Welcome to mirror list, hosted at ThFree Co, Russian Federation.

gitlab.com/gitlab-org/gitlab-foss.git - Unnamed repository; edit this file 'description' to name the repository.
summaryrefslogtreecommitdiff
path: root/app/policies
AgeCommit message (Collapse)Author
2017-06-19Merge branch 'fix-external-ci-services' into 'master'Grzegorz Bizon
Allow to access statuses for external CI services Closes #30714, #29369, and #15220 See merge request !11176
2017-06-09Merge commit 'abc61f260074663e5711d3814d9b7d301d07a259' into 9-3-stableClement Ho
2017-06-07Merge branch '3191-deploy-keys-update' into 'master'Rémy Coutable
Implement ability to update deploy keys Closes #3191 See merge request !10383
2017-06-05Allow group reporters to manage group labelsSean McGivern
Previously, only group masters could do this. However, project reporters can manage project labels, so there doesn't seem to be any need to restrict group labels further. Also, save a query or two by getting a single GroupMember object to find out if the user is a master or not.
2017-06-02Merge branch '25934-project-snippet-vis' into 'security-9-2'Douwe Maan
Fix visibility when referencing snippets See merge request !2101
2017-06-02Implement ability to update deploy keysAlexander Randa
2017-05-31Check only a merge ability for protected actionsGrzegorz Bizon
2017-05-10Merge branch 'snippets-finder-visibility' into 'security'Douwe Maan
Refactor snippets finder & dont return internal snippets for external users See merge request !2094
2017-05-10Merge branch 'snippets-finder-visibility' into 'security'Douwe Maan
Refactor snippets finder & dont return internal snippets for external users See merge request !2094
2017-05-08Add confirm delete protected branch modalSam Rose
2017-05-08Add Pipeline Schedules that supersedes experimental Trigger ScheduleZeger-Jan van de Weg
2017-05-05Use update build policy instead of new play policyGrzegorz Bizon
2017-05-05Merge commit '3a2b60f7' from 'master'Grzegorz Bizon
* commit '3a2b60f7a0109cdb84e8727a2625318a746e84dc': (151 commits) Fixed Karma spec Reject EE reserved namespace paths in CE as well Updated webpack config Include the bundler:audit job into the static-analysis job Document serializers Add artifact file page that uses the blob viewer Pipeline table mini graph dropdown remains open when table is refreshed Adds off for event hub Compile gitlab-shell go executables Allow to create new branch and empty WIP merge request from issue page Moved to a view spec Improving copy of CONTRIBUTING.md, PROCESS.md, and code_review.md Convert seconds to minutes and hours on chat notifations Disable navigation to Pages config if Pages is disabled Sort the network graph both by commit date and topographically. Add tooltips to note action buttons Add breadcrumb, build header and pipelines submenu to artifacts browser Update todos screenshots removes the possibility of commit messages having carriage returns Handle incoming emails from aliases correctly ...
2017-05-03Improve environment policy classGrzegorz Bizon
2017-05-02Support uploaders for personal snippets commentsJarka Kadlecova
2017-05-02Merge branch 'master' into ↵Grzegorz Bizon
feature/gb/manual-actions-protected-branches-permissions * master: (314 commits) Better Explore Groups view Update Carrierwave and fog-core Add specs for Gitlab::RequestProfiler Add scripts/static-analysis to run all the static analysers in one go Shorten and improve some job names Group static-analysis jobs into a single job Don't blow up when email has no References header Update CHANGELOG.md for 9.1.2 Add changelog Add changelog Show Raw button as Download for binary files Use blob viewers for snippets Fix typo Fixed transient failure related to dropdown animations Revert "Merge branch 'tc-no-todo-service-select' into 'master'" fix link to MR 10416 Another change from .click -> .trigger('click') to make spec pass Change from .click -> .trigger('click') to make spec pass Disable AddColumnWithDefaultToLargeTable cop for pre-existing migrations Add AddColumnWithDefaultToLargeTable cop ... Conflicts: spec/requests/api/jobs_spec.rb
2017-05-01Fix Rubocop offense in environments policy classGrzegorz Bizon
2017-05-01Add new ability check for stopping environmentGrzegorz Bizon
2017-04-26Fix Rubocop CyclomaticComplexity offenseRémy Coutable
Signed-off-by: Rémy Coutable <remy@rymai.me>
2017-04-13Merge branch 'master' into ↵Grzegorz Bizon
feature/gb/manual-actions-protected-branches-permissions * master: (641 commits) Revert "Fix registry for projects with uppercases in path" Fix registry for projects with uppercases in path Move event icons into events_helper Reset New branch button when issue state changes Add link to environments on kubernetes.md Indent system notes on desktop screens Improve webpack-dev-server compatibility with non-localhost setups. Add changelog entry Fix recent searches icon alignment in Safari Use preload to avoid Rails using JOIN Fix NUMBER_OF_TRUNCATED_DIFF_LINES re-definition error Prepare for zero downtime migrations Fix filtered search input width for IE Fix the `gitlab:gitlab_shell:check` task Fixed random failures with Poll spec Include CONTRIBUTING.md file when importing .gitlab-ci.yml templates Let uses hide verbose output by default Separate examples for each other Collapse similar sibling scenarios Use empty_project for resources that are independent of the repo ... Conflicts: app/views/projects/ci/builds/_build.html.haml
2017-04-12Do not inherit build policy in pipeline policyGrzegorz Bizon
2017-04-12Move code for playing an action to separate serviceGrzegorz Bizon
2017-04-12Implement new rule for manual actions in policiesGrzegorz Bizon
2017-04-12Merge branch 'siemens/gitlab-ce-fix/subgroup-hide-button' into 'master' Rémy Coutable
Hide new subgroup button if user has no permission to create one Closes #30139 See merge request !10627
2017-04-11Move permission to create subgroup into GroupPolicyDmitriy Zaporozhets
Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com>
2017-04-09Remove the User#is_admin? methodblackst0ne
2017-04-07Merge branch 'feature/service-desk-be-backport' into 'master' Sean McGivern
Backport permissions and multi-line array to CE See merge request !10507
2017-04-07Backport permissions and multi-line array to CEFelipe Artur
2017-04-06ProjectsFinder should handle more optionsJacopo
Extended ProjectFinder in order to handle the following options: - current_user - which user use - project_ids_relation: int[] - project ids to use - params: - trending: boolean - non_public: boolean - starred: boolean - sort: string - visibility_level: int - tags: string[] - personal: boolean - search: string - non_archived: boolean GroupProjectsFinder now inherits from ProjectsFinder. Changed the code in order to use the new available options.
2017-03-09use policies to protect sending emailhttp://jneen.net/
2017-03-09use the policy stack to protect loginshttp://jneen.net/
2017-03-09add User#internal? and some global permissionshttp://jneen.net/
2017-03-09use a magic default :global symbol instead of nilhttp://jneen.net/
to make sure we mean the global permissions
2017-03-07Improve pipeline triggers UIKamil Trzciński
2017-03-03Merge branch 'remove_group_policy_add_rules' into 'master' Douwe Maan
Remove now unnecessary `additional_rules!` method from GroupPolicy See merge request !9595
2017-02-28Remove now unnecessary `additional_rules!` method from GroupPolicyDrew Blessing
The intention was for this to be used to override group policy in EE. This led to all sort of strange problems in practice - for example, https://gitlab.com/gitlab-org/gitlab-ee/merge_requests/1025 needed to override `owner` permissions, but `additional_rules!` passed `master` only. The better solution is to use an EE module to override the policy. Removing this now defunct method.
2017-02-24Don't allow deleting a ghost user.Timothy Andrew
- Add a `destroy_user` ability. This didn't exist before, and was implicit in other abilities (only admins could access the admin area, so only they could destroy all users; a user can only access their own account page, and so can destroy only themselves). - Grant this ability to admins, and when the current user is trying to destroy themselves. Disallow destroying ghost users in all cases. - Modify the `Users::DestroyService` to check this ability. Also check it in views to decide whether or not to show the "Delete User" button. - Add a short summary of the Ghost User to the bio.
2017-02-23Enable Rails/DelegateDouwe Maan
2017-02-07Merge branch 'ee-1439-read-only-user' into 'master' Douwe Maan
Backport changes from gitlab-org/gitlab-ee!998 See merge request !8984
2017-02-05Backport changes from gitlab-org/gitlab-ee!998Timothy Andrew
Some changes in EE for the auditor user feature need to be backported to CE to avoid merge conflicts. This commit encapsulates all these backports.
2017-02-01Fix pages abilitiesKamil Trzcinski
2017-02-01Initial work on GitLab Pages updateKamil Trzcinski
2017-02-01Add GitLab PagesKamil Trzcinski
- The pages are created when build artifacts for `pages` job are uploaded - Pages serve the content under: http://group.pages.domain.com/project - Pages can be used to serve the group page, special project named as host: group.pages.domain.com - User can provide own 403 and 404 error pages by creating 403.html and 404.html in group page project - Pages can be explicitly removed from the project by clicking Remove Pages in Project Settings - The size of pages is limited by Application Setting: max pages size, which limits the maximum size of unpacked archive (default: 100MB) - The public/ is extracted from artifacts and content is served as static pages - Pages asynchronous worker use `dd` to limit the unpacked tar size - Pages needs to be explicitly enabled and domain needs to be specified in gitlab.yml - Pages are part of backups - Pages notify the deployment status using Commit Status API - Pages use a new sidekiq queue: pages - Pages use a separate nginx config which needs to be explicitly added
2017-01-23Fix build access policies when pipelines are publicGrzegorz Bizon
2017-01-18More improvements to presentersRémy Coutable
Signed-off-by: Rémy Coutable <remy@rymai.me>
2017-01-18Handle presenters in BasePolicyRémy Coutable
Signed-off-by: Rémy Coutable <remy@rymai.me>
2016-12-29Merge branch 'issue_25682' into 'master' Sean McGivern
Parse JIRA issue references even if Issue Tracker is disabled Closes #25682 See merge request !8238
2016-12-29Parse JIRA issue references even if Issue Tracker is disabledFelipe Artur
2016-12-26Include group parents into read access for project and groupDmitriy Zaporozhets
Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com>
2016-12-16Enable Style/MultilineOperationIndentation in Rubocop, fixes #25741Rydkin Maxim
generated by cgit v1.2.3 (git 2.25.1) at 2024-08-15 04:20:21 +0300