diff options
| author | Tiago Botelho <tiagonbotelho@hotmail.com> | 2018-12-07 18:48:38 +0300 |
|---|---|---|
| committer | Tiago Botelho <tiagonbotelho@hotmail.com> | 2018-12-26 19:25:16 +0300 |
| commit | b0fca5cece26075e2ff2167b606c7d7ee4345470 (patch) | |
| tree | 912cb5039c44d1d50b119f75ed81f91008027542 /changelogs | |
| parent | d2120ff1e705799752e7d9704cae3f1896d8e186 (diff) | |
Adds validation to check if user can read project
An issuable should not be available to a user if the
project is not visible to that specific user
Diffstat (limited to 'changelogs')
| -rw-r--r-- | changelogs/unreleased/security-53543-user-keeps-access-to-mr-issue-when-removed-from-team.yml | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/changelogs/unreleased/security-53543-user-keeps-access-to-mr-issue-when-removed-from-team.yml b/changelogs/unreleased/security-53543-user-keeps-access-to-mr-issue-when-removed-from-team.yml new file mode 100644 index 00000000000..ab12ba539c1 --- /dev/null +++ b/changelogs/unreleased/security-53543-user-keeps-access-to-mr-issue-when-removed-from-team.yml @@ -0,0 +1,5 @@ +--- +title: Issuable no longer is visible to users when project can't be viewed +merge_request: +author: +type: security |