diff options
| author | Rémy Coutable <remy@rymai.me> | 2016-04-13 14:32:25 +0300 |
|---|---|---|
| committer | Rémy Coutable <remy@rymai.me> | 2016-04-13 14:32:25 +0300 |
| commit | cf306b17bfdcc426b635a5f99c972985598a4094 (patch) | |
| tree | 520cc8d77a8b093cdea114b78e63f5c118d005f6 /CHANGELOG | |
| parent | 861e685e1853d45dea83bc1d06ebd639b120f36c (diff) | |
| parent | 4cd04443f5f69665ce1139726751af678e0e55c3 (diff) | |
Merge branch 'api-group-leaking' into 'master'
API: Return 404 if user does not have access to group
Closes #15185
After !3587 is merged, I'll update this one to also fix the return code of the tests in !3587.
See merge request !3683
Diffstat (limited to 'CHANGELOG')
| -rw-r--r-- | CHANGELOG | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/CHANGELOG b/CHANGELOG index c633c4bb35f..ed59bc1b252 100644 --- a/CHANGELOG +++ b/CHANGELOG @@ -45,6 +45,7 @@ v 8.7.0 (unreleased) - Fix admin/projects when using visibility levels on search (PotHix) - Build status notifications - API: Expose user location (Robert Schilling) + - API: Do not leak group existence via return code (Robert Schilling) - ClosingIssueExtractor regex now also works with colons. e.g. "Fixes: #1234" !3591 - Update number of Todos in the sidebar when it's marked as "Done". !3600 - API: Expose 'updated_at' for issue, snippet, and merge request notes (Robert Schilling) |