Welcome to mirror list, hosted at ThFree Co, Russian Federation.

gitlab.com/gitlab-org/gitlab-foss.git - Unnamed repository; edit this file 'description' to name the repository.
summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2020-05-05Add latest changes from gitlab-org/gitlab@masterGitLab Bot
2020-04-24Add latest changes from gitlab-org/gitlab@masterGitLab Bot
2020-04-21Add latest changes from gitlab-org/gitlab@masterGitLab Bot
2020-01-31Add latest changes from gitlab-org/gitlab@masterGitLab Bot
2020-01-23Add latest changes from gitlab-org/gitlab@masterGitLab Bot
2019-11-30Add latest changes from gitlab-org/gitlab@masterGitLab Bot
2019-10-11Add latest changes from gitlab-org/gitlab@masterGitLab Bot
2019-10-10Add latest changes from gitlab-org/gitlab@masterGitLab Bot
2019-09-13Add latest changes from gitlab-org/gitlab@masterGitLab Bot
2019-07-19Restrict slash commands to users who can log inHordur Freyr Yngvason
2019-06-05preventing blocked users and their PipelineSchdules from creating new Pipelinesdrew cimino
updated several specs and factories to accomodate new permissions
2019-05-06Allow usage of quick actions for internal usersPeter Leitzen
Just prevent support bots from using quick actions in EE
2019-03-05Add metadata about the GitLab server to GraphQLNick Thomas
2018-07-27Spec instance statisticsBob Van Landuyt
2018-07-27Add read_instance_statistics global policyLuke Bennett
2018-07-27Revert "Merge branch '41416-making-instance-wide-data-tools-more-accessible' ↵Sean McGivern
into 'master'" This reverts merge request !20679
2018-07-27Spec instance statisticsBob Van Landuyt
2018-07-26Add read_instance_statistics global policyLuke Bennett
2018-07-24Enable frozen string in presenters and policiesgfyoung
Enable frozen string in: * app/presenters * app/policies Partially addresses #47424.
2018-05-10Allows `access_(git|api)` to anonymous usersBob Van Landuyt
The `access_git` and `access_api` were currently never checked for anonymous users. And they would also be allowed access: An anonymous user can clone and pull from a public repo An anonymous user can request public information from the API So the policy didn't actually reflect what we were enforcing.
2018-05-10Block access to API & git when terms are enforcedBob Van Landuyt
When terms are enforced, but the user has not accepted the terms access to the API & git is rejected with a message directing the user to the web app to accept the terms.
2017-09-29moved fork checks into policiesPhil Hughes
2017-09-28Support custom attributes on usersMarkus Koller
2017-08-01Allow logged in users to read user list under public restrictionLin Jen-Shin (godfat)
2017-07-25Allow admin to read_users_list even if it's restrictedLin Jen-Shin
2017-07-03Implement review comments for !12445 from @jneen.Timothy Andrew
- Fix duplicate `prevent` declaration - Add spec for `GlobalPolicy`
2017-06-30Merge remote-tracking branch 'origin/master' into ↵Timothy Andrew
34141-allow-unauthenticated-access-to-the-users-api - Modify policy code to work with the `DeclarativePolicy` refactor in 37c401433b76170f0150d70865f1f4584db01fa8.
2017-06-30Implement review comments for !12445 from @godfat and @rymai.Timothy Andrew
- Use `GlobalPolicy` to authorize the users that a non-authenticated user can fetch from `/api/v4/users`. We allow access if the `Gitlab::VisibilityLevel::PUBLIC` visibility level is not restricted. - Further, as before, `/api/v4/users` is only accessible to unauthenticated users if the `username` parameter is passed. - Turn off `authenticate!` for the `/api/v4/users` endpoint by matching on the actual route + method, rather than the description. - Change the type of `current_user` check in `UsersFinder` to be more compatible with EE.
2017-06-27convert all the policies to DeclarativePolicyhttp://jneen.net/
2017-06-15Rename "Slash commands" to "Quick actions"Eric Eastwood
Fix https://gitlab.com/gitlab-org/gitlab-ce/issues/27070 Deprecate "chat commands" in favor of "slash commands" We looked for things like: - `slash commmand` - `slash_command` - `slash-command` - `SlashCommand`
2017-04-07Backport permissions and multi-line array to CEFelipe Artur
2017-03-09use policies to protect sending emailhttp://jneen.net/
2017-03-09use the policy stack to protect loginshttp://jneen.net/
2017-03-09add User#internal? and some global permissionshttp://jneen.net/
2016-08-30line break after guard clausehttp://jneen.net/
2016-08-30factor in global permissionshttp://jneen.net/