diff options
| author | Robert Speicher <robert@gitlab.com> | 2017-01-03 18:03:13 +0000 |
|---|---|---|
| committer | Robert Speicher <rspeicher@gmail.com> | 2017-01-23 13:54:35 -0500 |
| commit | 3a5df1d8fc518900d8e33a6be8a2243e399c754a (patch) | |
| tree | 73e2ef9be53a013e3756a8d0e5ba9d9309bb5918 /changelogs | |
| parent | d7755ede246988e3186a46b2c9fbd1b70660b529 (diff) | |
| download | gitlab-ce-3a5df1d8fc518900d8e33a6be8a2243e399c754a.tar.gz | |
Merge branch 'fix-api-mr-permissions' into 'security'
Ensure that only privileged users can access merge requests in the API
See merge request !2053
Diffstat (limited to 'changelogs')
| -rw-r--r-- | changelogs/unreleased/fix-api-mr-permissions.yml | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/changelogs/unreleased/fix-api-mr-permissions.yml b/changelogs/unreleased/fix-api-mr-permissions.yml new file mode 100644 index 00000000000..33b677b1f29 --- /dev/null +++ b/changelogs/unreleased/fix-api-mr-permissions.yml @@ -0,0 +1,4 @@ +--- +title: Don't allow project guests to subscribe to merge requests through the API +merge_request: +author: Robert Schilling |