diff options
author | Rémy Coutable <remy@rymai.me> | 2018-11-29 12:53:09 +0300 |
---|---|---|
committer | Rémy Coutable <remy@rymai.me> | 2018-11-29 12:53:09 +0300 |
commit | 70b19fbdefac344641c8087a493bd582d9c57abe (patch) | |
tree | 9a3c3ff147b1401e3a916fd896133619ba27da23 /doc | |
parent | 299011313cef8fbeb8d5eeafcc60374211c88ec8 (diff) | |
parent | bd3a4840329160a64c0cac25ed6c1d3b22f5bdb4 (diff) |
Merge branch 'if-40385-prohibit_impersonation' into 'master'
Add config to prohibit impersonation
See merge request gitlab-org/gitlab-ce!23338
Diffstat (limited to 'doc')
-rw-r--r-- | doc/api/README.md | 39 |
1 files changed, 38 insertions, 1 deletions
diff --git a/doc/api/README.md b/doc/api/README.md index 0e8d1aaf86e..848a6e6b72b 100644 --- a/doc/api/README.md +++ b/doc/api/README.md @@ -225,6 +225,43 @@ For more information, refer to the Impersonation tokens are used exactly like regular personal access tokens, and can be passed in either the `private_token` parameter or the `Private-Token` header. +#### Disable impersonation + +> [Introduced](https://gitlab.com/gitlab-org/gitlab-ce/issues/40385) in GitLab +11.6. + +By default, impersonation is enabled. To disable impersonation, GitLab must be +reconfigured: + +**For Omnibus installations** + +1. Edit `/etc/gitlab/gitlab.rb`: + + ```ruby + gitlab_rails['impersonation_enabled'] = false + ``` + +1. Save the file and [reconfigure](../administration/restart_gitlab.md#omnibus-gitlab-reconfigure) + GitLab for the changes to take effect. + +To re-enable impersonation, remove this configuration and reconfigure GitLab. + +--- + +**For installations from source** + +1. Edit `config/gitlab.yml`: + + ```yaml + gitlab: + impersonation_enabled: false + ``` + +1. Save the file and [restart](../administration/restart_gitlab.md#installations-from-source) + GitLab for the changes to take effect. + +To re-enable impersonation, remove this configuration and restart GitLab. + ### Sudo NOTE: **Note:** @@ -540,7 +577,7 @@ When you try to access an API URL that does not exist you will receive 404 Not F ``` HTTP/1.1 404 Not Found Content-Type: application/json -{ +{ f "error": "404 Not Found" } ``` |