data/deprecations/16-4-deprecate-change-vulnerability-status-with-developer-role.yml


1
2
3
4
5
6
7
8
9
10
11

- title: "Deprecate change vulnerability status from the Developer role"
  removal_milestone: "17.0"
  announcement_milestone: "16.4"
  breaking_change: true
  reporter: abellucci
  stage: govern
  issue_url: https://gitlab.com/gitlab-org/gitlab/-/issues/424133
  body: |
    The ability for Developers to change the status of vulnerabilities is now deprecated.  We plan to make a breaking change in the upcoming GitLab 17.0 release to remove this ability from the Developer role.  Users who wish to continue to grant this permission to developers can [create a custom role](https://docs.gitlab.com/ee/user/permissions.html#custom-roles) for their developers and add in the `admin_vulnerability` permission to give them this access.
  tiers: [Gold, Ultimate]
  documentation_url: https://docs.gitlab.com/ee/user/permissions.html#custom-roles