Welcome to mirror list, hosted at ThFree Co, Russian Federation.

gitlab.com/gitlab-org/gitlab-foss.git - Unnamed repository; edit this file 'description' to name the repository.
summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2019-04-02Merge branch 'master' of dev.gitlab.org:gitlab/gitlabhq into ↵John Jarvis
jarv/dev-to-gitlab-2019-04-02
2019-03-27[CE] Reduce the diff with EE in spec/policies/project_policy_spec.rbRémy Coutable
Signed-off-by: Rémy Coutable <remy@rymai.me>
2019-03-26Disallow guest users from accessing ReleasesShinya Maeda
As they do not have a permission to read git tag
2019-03-06Allow protected branch creation via web and APIPatrick Bajao
This commit includes changes to add `UserAccess#can_create_branch?` which will check whether the user is allowed to create a branch even if it matches a protected branch. This is used in `Gitlab::Checks::BranchCheck` when the branch name matches a protected branch. A `push_to_create_protected_branch` ability in `ProjectPolicy` has been added to allow Developers and above to create protected branches.
2019-03-04Merge dev master into GitLab.com masterYorick Peterse
2019-02-27Add project http fetch statistics APIJacopo
The API get projects/:id/traffic/fetches allows user with write access to the repository to get the number of clones for the last 30 days.
2019-02-11Disable board policies when issues are disabledHeinrich Lee Yu
Board list policies are also included
2019-01-31[master] Pipelines section is available to unauthorized usersKamil Trzciński
2019-01-31Fixed bug when external wiki is enabledFrancisco Javier López
When the external wiki is enabled, the internal wiki link is replaced by the external wiki url. But the internal wiki is still accessible. In this change the external wiki will have its own tab in the sidebar and only if the services are disabled the tab (and access rights) will not be displayed.
2019-01-31Don't process MR refs for guests in the notesOswaldo Ferreira
2019-01-24Enable the Layout/ExtraSpacing copRémy Coutable
Signed-off-by: Rémy Coutable <remy@rymai.me>
2019-01-10Service for calling Sentry issues apiReuben Pereira
2018-12-31Add spec for Release APIShinya Maeda
Add spec for all release API - GET, POST, PUT, DELETE. Also, fixes some minior bugs.
2018-12-31Add releases APIAlessio Caiazza
This commit introduces Releases API under /api/v4/projects/:id/releases * We are introducing release policies at project level. * We are deprecating releases changes from tags, both api and web interface. * Tags::CreateService no longer create a release This feature is controlled by :releases_page feature flag
2018-12-24Allow users to add cluster with ancestorsMayra Cabrera
Include a new policy in Clusterables (projects and groups), which checks if another cluster can be added clusterable_has_cluster? and multiple_clusters_available private methods will be overriden in EE Related to https://gitlab.com/gitlab-org/gitlab-ce/issues/34758
2018-11-21Eliminate duplicated wordsTakuya Noguchi
Signed-off-by: Takuya Noguchi <takninnovationresearch@gmail.com>
2018-11-08Add policy for clusters on group levelThong Kuah
- maintainer for group can read, create, update, and admin cluster - project user, at any level, cannot do anything with group cluster
2018-08-22Use policies to determine if attributes can be set in the APISean McGivern
This is more idiomatic than checking membership explicitly.
2018-07-11Resolve "Rename the `Master` role to `Maintainer`" BackendMark Chao
2018-06-20Operations and Kubernetes items are now omitted in the sidebar when ↵Tiago Botelho
repository or builds are disabled
2018-06-01Rephrase "maintainer" to more precise "members who can merge to the target ↵Mark Chao
branch" "Maintainer" will be freed to be used for #42751
2018-05-15Enable update_(build|pipeline) for maintainersJan Provaznik
2018-04-11Prevent awarding emoji when a project is archivedBob Van Landuyt
This prevents performing the requests, and disables all emoji reaction buttons
2018-04-11Rename `create_merge_request` permissionsBob Van Landuyt
So we can distinguish between the permissions on the source and the target project. - `create_merge_request_from` indicates a user can create a merge request with the project as a source_project - `create_merge_request_in` indicates a user can create a merge request with the project as a target_project
2018-04-11Prevent new merge requests for archived projectsBob Van Landuyt
This prevents creating merge requests targeting archived projects. This could happen when a project was already forked, but then the source was archived.
2018-04-10Update policies to make archived projects completely read-onlyDouwe Maan
2018-04-10Rename delete_protected_branch ability to push_to_delete_protected_branch to ↵Douwe Maan
prevent confusion with destroy_protected_branch
2018-04-05Fix N+1 in MergeRequestParserSean McGivern
read_project can be prevented by a very expensive condition, which we want to avoid, while still not writing manual SQL queries. read_project_for_iids is used by read_issue_iid and read_merge_request_iid to satisfy both of those constraints, and allow the declarative policy runner to use its normal caching strategy.
2018-03-07Limit queries to a user-branch combinationBob Van Landuyt
The query becomes a lot simpler if we can check the branch name as well instead of having to load all branch names.
2018-03-07Allow abilities on forks while MR is openBob Van Landuyt
When an MR is created using `allow_maintainer_to_push`, we enable some abilities while the MR is open. This should allow every user with developer abilities on the target project, to push to the source project.
2018-01-31Make user/author use project.creator in most factoriesRémy Coutable
Signed-off-by: Rémy Coutable <remy@rymai.me>
2017-09-22Refactor spec/policies/project_policy_spec.rb to minimize the diff with EERémy Coutable
Signed-off-by: Rémy Coutable <remy@rymai.me>
2017-09-18Allow DEVELOPER role to admin milestonesFelipe Artur
2017-08-03Change all `:empty_project` to `:project`Robert Speicher
2017-07-27Remove superfluous lib: true, type: redis, service: true, models: true, ↵Rémy Coutable
services: true, no_db: true, api: true Signed-off-by: Rémy Coutable <remy@rymai.me>
2017-07-24Don't treat anonymous users as owners when group has pending invitesSean McGivern
The `members` table can have entries where `user_id: nil`, because people can invite group members by email. We never want to include those as members, because it might cause confusion with the anonymous (logged out) user.
2017-07-24Associate Issues tab only with internal issues trackerJarka Kadlecova
2017-06-27convert all the policies to DeclarativePolicyhttp://jneen.net/
2017-06-27update the specs to not require a set to be returnedhttp://jneen.net/
2017-06-21Enable Style/DotPosition Rubocop :cop:Grzegorz Bizon
2017-06-13Update tests and applicationKamil Trzcinski
2017-05-08Add confirm delete protected branch modalSam Rose
2017-03-28Use `:empty_project` where possible in policy specsRobert Speicher
2017-02-07More backportDouwe Maan
2016-12-04Update effected testsZ.J. van de Weg
2016-12-04Guests can read builds if those are publicZ.J. van de Weg
Fixes #18448
2016-11-30Improve ProjectPolicy spec to check permissions when wiki is disabledDouglas Barbosa Alexandre
2016-11-01Allow owners to fetch source code in CI buildsKamil Trzcinski
Due to different way of handling owners of a project, they were not allowed to fetch CI sources for project.
2016-10-11Make guests unable to view MRsValery Sizov
2016-10-07Improve project policy specAlejandro Rodríguez