blob: a317f49ea940662898ca30e7268262a45811097c (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
|
# This list tracks unknown abilities per policy.
#
# This file is used by `spec/support/ability_check.rb`.
#
# Each TODO entry means that an ability wasn't found in
# the particular policy class or its delegations.
#
# This could be one of the reasons:
# * The ability is misspelled.
# - Suggested action: Fix typo.
# * The ability has been removed from a policy but is still in use.
# - Remove production code in question.
# * The ability is defined in EE policy but is used in FOSS code.
# - Guard the check or move it to EE folder.
# - See https://docs.gitlab.com/ee/development/ee_features.html
# * The ability is defined in another policy but delegation is missing.
# - Add delegation policy or guard the check with a type check.
# - See https://docs.gitlab.com/ee/development/policies.html#delegation
# * The ability check is polymorphic (for example, Issuable) and some policies
# do not implement this ability.
# - Exclude TODO permanently below.
# - Guard the check with a type check.
# * The ability check is defined on GraphQL field which does not support
# authorization on resolved field values yet.
# See https://gitlab.com/gitlab-org/gitlab/-/issues/300922
---
# <Policy class>:
# - <ability name>
# - <ability name>
# ...
# Temporary excludes:
Ci::BridgePolicy:
- read_job_artifacts
CommitStatusPolicy:
- read_job_artifacts
EpicPolicy:
- create_timelog
- read_emoji
- set_issue_crm_contacts
GlobalPolicy:
- read_achievement
- read_on_demand_dast_scan
- update_max_pages_size
GroupPolicy:
- admin_merge_request
- change_push_rules
- manage_owners
IssuePolicy:
- create_test_case
MergeRequestPolicy:
- set_confidentiality
- set_issue_crm_contacts
Namespaces::UserNamespacePolicy:
- read_crm_contact
PersonalSnippetPolicy:
- read_internal_note
- read_project
ProjectMemberPolicy:
- override_project_member
ProjectPolicy:
- admin_feature_flags_issue_links
- admin_vulnerability
- create_requirement
- create_test_case
- read_group_saml_identity
UserPolicy:
- admin_terraform_state
# Permanent excludes (please provide a reason):
|
