"signatures" did not exist on "40519cc17106d651d1630d024f1f98cbfe23fc4d"
Only assign merge params when allowed
When a user updates a merge request coming from a fork, they should not be able to set `force_remove_source_branch` if they cannot push code to the source project. Otherwise developers of the target project could remove the source branch of the source project by setting this flag through the API.