Age | Commit message (Collapse) | Author | |
---|---|---|---|
2023-05-10 | Add latest changes from gitlab-org/gitlab@master | GitLab Bot | |
2023-01-18 | Add latest changes from gitlab-org/gitlab@master | GitLab Bot | |
2022-10-26 | Add latest changes from gitlab-org/gitlab@master | GitLab Bot | |
2022-03-18 | Add latest changes from gitlab-org/gitlab@master | GitLab Bot | |
2022-03-15 | Add latest changes from gitlab-org/gitlab@master | GitLab Bot | |
2022-03-10 | Add latest changes from gitlab-org/gitlab@master | GitLab Bot | |
2021-08-24 | Add latest changes from gitlab-org/gitlab@master | GitLab Bot | |
2021-05-12 | Add latest changes from gitlab-org/gitlab@master | GitLab Bot | |
2020-11-26 | Add latest changes from gitlab-org/gitlab@master | GitLab Bot | |
2020-11-09 | Add latest changes from gitlab-org/gitlab@master | GitLab Bot | |
2020-10-30 | Add latest changes from gitlab-org/gitlab@master | GitLab Bot | |
2020-08-20 | Add latest changes from gitlab-org/gitlab@master | GitLab Bot | |
2020-08-07 | Add latest changes from gitlab-org/gitlab@master | GitLab Bot | |
2020-01-16 | Add latest changes from gitlab-org/gitlab@master | GitLab Bot | |
2020-01-13 | Add latest changes from gitlab-org/gitlab@master | GitLab Bot | |
2019-12-16 | Add latest changes from gitlab-org/gitlab@master | GitLab Bot | |
2018-07-30 | Allow users to set a status | Bob Van Landuyt | |
This can be done trough the API for the current user, or on the profile page. | |||
2018-07-24 | Enable frozen string in presenters and policies | gfyoung | |
Enable frozen string in: * app/presenters * app/policies Partially addresses #47424. | |||
2018-07-24 | Add an option to have a private profile on GitLab | JX Terry | |
2018-05-04 | Make the user dropdown reusable | Bob Van Landuyt | |
We will reuse the the dropdown, but exclude some menu items based on permissions. So moving the menu to a partial, and adding checks for each menu item here. | |||
2017-06-30 | Merge remote-tracking branch 'origin/master' into ↵ | Timothy Andrew | |
34141-allow-unauthenticated-access-to-the-users-api - Modify policy code to work with the `DeclarativePolicy` refactor in 37c401433b76170f0150d70865f1f4584db01fa8. | |||
2017-06-30 | Implement review comments for !12445 from @godfat and @rymai. | Timothy Andrew | |
- Use `GlobalPolicy` to authorize the users that a non-authenticated user can fetch from `/api/v4/users`. We allow access if the `Gitlab::VisibilityLevel::PUBLIC` visibility level is not restricted. - Further, as before, `/api/v4/users` is only accessible to unauthenticated users if the `username` parameter is passed. - Turn off `authenticate!` for the `/api/v4/users` endpoint by matching on the actual route + method, rather than the description. - Change the type of `current_user` check in `UsersFinder` to be more compatible with EE. | |||
2017-06-27 | convert all the policies to DeclarativePolicy | http://jneen.net/ | |
2017-02-24 | Don't allow deleting a ghost user. | Timothy Andrew | |
- Add a `destroy_user` ability. This didn't exist before, and was implicit in other abilities (only admins could access the admin area, so only they could destroy all users; a user can only access their own account page, and so can destroy only themselves). - Grant this ability to admins, and when the current user is trying to destroy themselves. Disallow destroying ghost users in all cases. - Modify the `Users::DestroyService` to check this ability. Also check it in views to decide whether or not to show the "Delete User" button. - Add a short summary of the Ghost User to the bio. | |||
2016-08-30 | port UserPolicy | http://jneen.net/ | |