Age | Commit message (Collapse) | Author | |
---|---|---|---|
2020-04-03 | Add latest changes from gitlab-org/gitlab@master | GitLab Bot | |
2020-02-06 | Add latest changes from gitlab-org/gitlab@master | GitLab Bot | |
2020-01-31 | Add latest changes from gitlab-org/gitlab@master | GitLab Bot | |
2019-12-17 | Add latest changes from gitlab-org/gitlab@master | GitLab Bot | |
2019-11-06 | Add latest changes from gitlab-org/gitlab@master | GitLab Bot | |
2019-10-10 | Add latest changes from gitlab-org/gitlab@master | GitLab Bot | |
2019-09-26 | Add latest changes from gitlab-org/gitlab@master | GitLab Bot | |
2019-09-13 | Add latest changes from gitlab-org/gitlab@master | GitLab Bot | |
2019-06-05 | preventing blocked users and their PipelineSchdules from creating new Pipelines | drew cimino | |
updated several specs and factories to accomodate new permissions | |||
2019-04-09 | Move Contribution Analytics related spec in ↵ | Imre Farkas | |
spec/features/groups/group_page_with_external_authorization_service_spec to EE | |||
2019-04-05 | Revert "Merge branch 'if-57131-external_auth_to_ce' into 'master'" | Andreas Brandl | |
This reverts merge request !26823 | |||
2019-04-05 | Move Contribution Analytics related spec in ↵ | Imre Farkas | |
spec/features/groups/group_page_with_external_authorization_service_spec to EE | |||
2019-01-07 | Make ProjectSnippetPolicy EE-ready | Rémy Coutable | |
Signed-off-by: Rémy Coutable <remy@rymai.me> | |||
2018-07-24 | Enable frozen string in presenters and policies | gfyoung | |
Enable frozen string in: * app/presenters * app/policies Partially addresses #47424. | |||
2018-02-22 | Port `read_cross_project` ability from EE | Bob Van Landuyt | |
2017-08-31 | `current_application_settings` belongs on `Gitlab::CurrentSettings` | Sean McGivern | |
The initializers including this were doing so at the top level, so every object loaded after them had a `current_application_settings` method. However, if someone had rack-attack enabled (which was loaded before these initializers), it would try to load the API, and fail, because `Gitlab::CurrentSettings` didn't have that method. To fix this: 1. Don't include `Gitlab::CurrentSettings` at the top level. We do not need `Object.new.current_application_settings` to work. 2. Make `Gitlab::CurrentSettings` explicitly `extend self`, as we already use it like that in several places. 3. Change the initializers to use that new form. | |||
2017-06-30 | Merge remote-tracking branch 'origin/master' into ↵ | Timothy Andrew | |
34141-allow-unauthenticated-access-to-the-users-api - Modify policy code to work with the `DeclarativePolicy` refactor in 37c401433b76170f0150d70865f1f4584db01fa8. | |||
2017-06-30 | Implement review comments for !12445 from @godfat and @rymai. | Timothy Andrew | |
- Use `GlobalPolicy` to authorize the users that a non-authenticated user can fetch from `/api/v4/users`. We allow access if the `Gitlab::VisibilityLevel::PUBLIC` visibility level is not restricted. - Further, as before, `/api/v4/users` is only accessible to unauthenticated users if the `username` parameter is passed. - Turn off `authenticate!` for the `/api/v4/users` endpoint by matching on the actual route + method, rather than the description. - Change the type of `current_user` check in `UsersFinder` to be more compatible with EE. | |||
2017-06-29 | bugfix: use `require_dependency` to bring in DeclarativePolicy | http://jneen.net/ | |
2017-06-27 | convert all the policies to DeclarativePolicy | http://jneen.net/ | |
2017-04-12 | Do not inherit build policy in pipeline policy | Grzegorz Bizon | |
2017-03-09 | use a magic default :global symbol instead of nil | http://jneen.net/ | |
to make sure we mean the global permissions | |||
2017-02-23 | Enable Rails/Delegate | Douwe Maan | |
2017-01-18 | More improvements to presenters | Rémy Coutable | |
Signed-off-by: Rémy Coutable <remy@rymai.me> | |||
2017-01-18 | Handle presenters in BasePolicy | Rémy Coutable | |
Signed-off-by: Rémy Coutable <remy@rymai.me> | |||
2016-08-31 | s/NB:/NOTE:/ | http://jneen.net/ | |
2016-08-30 | implement RuleSet#size for tests | http://jneen.net/ | |
2016-08-30 | factor out a RuleSet so that `delegate!` retains @cannot | http://jneen.net/ | |
2016-08-30 | special-case blocked users | http://jneen.net/ | |
2016-08-30 | use the cached abilities in #delegate! | http://jneen.net/ | |
2016-08-30 | factor in global permissions | http://jneen.net/ | |
2016-08-30 | add automatic detection of the policy class | http://jneen.net/ | |
2016-08-30 | port CommitStatus/Build | http://jneen.net/ | |
2016-08-30 | port issues to Issu{able,e}Policy | http://jneen.net/ | |
2016-08-30 | add support for anonymous abilities | http://jneen.net/ | |
2016-08-30 | add policies, and factor out ProjectPolicy | http://jneen.net/ | |