diff options
| author | Bob Van Landuyt <bob@vanlanduyt.co> | 2018-05-09 13:55:31 +0300 |
|---|---|---|
| committer | Bob Van Landuyt <bob@vanlanduyt.co> | 2018-05-10 18:02:27 +0300 |
| commit | d801dd177483a8375f1656654ca3638c18550204 (patch) | |
| tree | 91dbc59dd7dfb437308e2d39238c024528268064 /lib/gitlab/build_access.rb | |
| parent | f7f13f9db0da92c7b43481dfe5559f317711e533 (diff) | |
Allows `access_(git|api)` to anonymous users
The `access_git` and `access_api` were currently never checked for
anonymous users. And they would also be allowed access:
An anonymous user can clone and pull from a public repo
An anonymous user can request public information from the API
So the policy didn't actually reflect what we were enforcing.
Diffstat (limited to 'lib/gitlab/build_access.rb')
0 files changed, 0 insertions, 0 deletions