summaryrefslogtreecommitdiff
path: root/app/models/todo.rb
diff options
context:
space:
mode:
authorFelipe Artur <felipefac@gmail.com>2018-12-11 16:15:10 -0200
committerFelipe Artur <felipefac@gmail.com>2018-12-14 10:38:52 -0200
commit1653f7b1c68b2ea7da8df84ed459b9578e3dff8f (patch)
tree9e55514e5682aa8799469286265b3e51af84b003 /app/models/todo.rb
parentcc7353523bc1d19054769d7a0a61b0cb7f6ce4e3 (diff)
downloadgitlab-ce-1653f7b1c68b2ea7da8df84ed459b9578e3dff8f.tar.gz
Delete confidential issue todos for guests
Fix leaking information of confidential issues on TODOs when user is downgraded to guest access.
Diffstat (limited to 'app/models/todo.rb')
-rw-r--r--app/models/todo.rb5
1 files changed, 5 insertions, 0 deletions
diff --git a/app/models/todo.rb b/app/models/todo.rb
index 7b64615f699..d9b86d941b6 100644
--- a/app/models/todo.rb
+++ b/app/models/todo.rb
@@ -4,6 +4,11 @@ class Todo < ActiveRecord::Base
include Sortable
include FromUnion
+ # Time to wait for todos being removed when not visible for user anymore.
+ # Prevents TODOs being removed by mistake, for example, removing access from a user
+ # and giving it back again.
+ WAIT_FOR_DELETE = 1.hour
+
ASSIGNED = 1
MENTIONED = 2
BUILD_FAILED = 3