diff options
| author | Bob Van Landuyt <bob@vanlanduyt.co> | 2019-06-18 18:31:06 +0200 |
|---|---|---|
| committer | Bob Van Landuyt <bob@vanlanduyt.co> | 2019-06-20 17:35:13 +0200 |
| commit | 6489bc8e251836d8bccf7c0731bcfa2ab98a6596 (patch) | |
| tree | 97aca19adaf8f82615a1e735fa394660757834ab /changelogs | |
| parent | e3eeb779d72006b9fbbaecf9f1d8fbd52a7d6383 (diff) | |
| download | gitlab-ce-6489bc8e251836d8bccf7c0731bcfa2ab98a6596.tar.gz | |
Fix failing auhtorizations in GraphQL
0. Add authorize to LabelType and NamespaceType.
1. Make sure that authorizations on non-nullable fields are also
executed.
Diffstat (limited to 'changelogs')
| -rw-r--r-- | changelogs/unreleased/security-bvl-enforce-graphql-type-authorization.yml | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/changelogs/unreleased/security-bvl-enforce-graphql-type-authorization.yml b/changelogs/unreleased/security-bvl-enforce-graphql-type-authorization.yml new file mode 100644 index 00000000000..7dedb9f6230 --- /dev/null +++ b/changelogs/unreleased/security-bvl-enforce-graphql-type-authorization.yml @@ -0,0 +1,5 @@ +--- +title: Add missing authorizations in GraphQL +merge_request: +author: +type: security |