summaryrefslogtreecommitdiff
path: root/CHANGELOG
diff options
context:
space:
mode:
authorRémy Coutable <remy@rymai.me>2016-04-13 11:32:25 +0000
committerRémy Coutable <remy@rymai.me>2016-04-13 11:32:25 +0000
commitcf306b17bfdcc426b635a5f99c972985598a4094 (patch)
tree520cc8d77a8b093cdea114b78e63f5c118d005f6 /CHANGELOG
parent861e685e1853d45dea83bc1d06ebd639b120f36c (diff)
parent4cd04443f5f69665ce1139726751af678e0e55c3 (diff)
downloadgitlab-ce-cf306b17bfdcc426b635a5f99c972985598a4094.tar.gz
Merge branch 'api-group-leaking' into 'master'
API: Return 404 if user does not have access to group Closes #15185 After !3587 is merged, I'll update this one to also fix the return code of the tests in !3587. See merge request !3683
Diffstat (limited to 'CHANGELOG')
-rw-r--r--CHANGELOG1
1 files changed, 1 insertions, 0 deletions
diff --git a/CHANGELOG b/CHANGELOG
index c633c4bb35f..ed59bc1b252 100644
--- a/CHANGELOG
+++ b/CHANGELOG
@@ -45,6 +45,7 @@ v 8.7.0 (unreleased)
- Fix admin/projects when using visibility levels on search (PotHix)
- Build status notifications
- API: Expose user location (Robert Schilling)
+ - API: Do not leak group existence via return code (Robert Schilling)
- ClosingIssueExtractor regex now also works with colons. e.g. "Fixes: #1234" !3591
- Update number of Todos in the sidebar when it's marked as "Done". !3600
- API: Expose 'updated_at' for issue, snippet, and merge request notes (Robert Schilling)