summaryrefslogtreecommitdiff
path: root/app/policies
Commit message (Expand)AuthorAgeFilesLines
* Disallow guest users from accessing ReleasesShinya Maeda2019-03-261-1/+1
* Move out link\unlink ability checks to a policyPavel Shutsin2019-03-191-0/+15
* Update group policy to reflect all the requirementsMałgorzata Ksionek2019-03-131-1/+2
* Disallow reopening of locked merge requestsJan Beckmann2019-03-083-0/+5
* API: delete job_artifacts of a single jobRoger Rüttimann2019-03-061-0/+1
* Merge branch '56809-graphql-version-api' into 'master'Douwe Maan2019-03-051-0/+4
|\
| * Add metadata about the GitLab server to GraphQLNick Thomas2019-03-051-0/+4
* | Display the correct number of MRs a user has access toIgor Drozdov2019-03-051-1/+1
|/
* Resolve conflicts in group policyMałgorzata Ksionek2019-03-051-1/+0
* Resolve conflicts in app/policies/group_policy.rbStan Hu2019-03-041-3/+0
* Merge dev master into GitLab.com masterYorick Peterse2019-03-042-0/+5
|\
| * Merge branch 'security-2798-fix-boards-policy' into 'master'Yorick Peterse2019-03-041-0/+2
| |\
| | * Disable board policies when issues are disabledHeinrich Lee Yu2019-02-111-0/+2
| * | Secure vulerability and add specsMałgorzata Ksionek2019-02-281-1/+0
* | | Merge branch '42086-project-fetch-statistics-api-http-only' into 'master'57125-heatmap-chart-typeNick Thomas2019-02-271-0/+1
|\ \ \
| * | | Add project http fetch statistics APIJacopo2019-02-271-0/+1
* | | | Enable `:read_list` when `:read_group` is enabledHeinrich Lee Yu2019-02-251-0/+1
| |/ / |/| |
* | | Allow maintainers to remove pagesVladimir Shushlin2019-02-251-1/+1
|/ /
* | Fix 403 errors when adding an assignee list in project boardsStan Hu2019-02-141-1/+3
|/
* [master] Pipelines section is available to unauthorized usersKamil Trzciński2019-01-312-4/+25
* Prevent comments by email when issue is lockedHeinrich Lee Yu2019-01-313-1/+7
* Fixed bug when external wiki is enabledFrancisco Javier López2019-01-311-1/+1
* Prevent award_emoji to notes not visible to userHeinrich Lee Yu2019-01-311-0/+1
* Don't process MR refs for guests in the notesOswaldo Ferreira2019-01-311-1/+1
* Merge branch 'container-repository-cleanup-api' into 'master'Grzegorz Bizon2019-01-251-0/+5
|\
| * Add Container Registry APIKamil Trzciński2019-01-251-0/+5
* | Allow admins/auditors to read private personal snippetsPatrick Bajao2019-01-241-0/+2
* | Backport of 54385-board-policyMario de la Ossa2019-01-181-0/+14
|/
* Service for calling Sentry issues apiReuben Pereira2019-01-091-0/+1
* Merge branch 'ce-extract-specific-code-from-project_snippet_policy' into 'mas...Nick Thomas2019-01-092-6/+9
|\
| * Make ProjectSnippetPolicy EE-readyce-extract-specific-code-from-project_snippet_policyRémy Coutable2019-01-072-6/+9
* | Remove caching of CSV file49231-import-issues-csvHeinrich Lee Yu2019-01-071-1/+1
* | Improve email messagesHeinrich Lee Yu2019-01-071-1/+2
* | Import CSV BackendHeinrich Lee Yu2019-01-071-0/+1
|/
* Merge branch 'master' of dev.gitlab.org:gitlab/gitlabhqJohn Jarvis2019-01-011-1/+1
|\
| * Merge branch 'security-53543-user-keeps-access-to-mr-issue-when-removed-from-...John Jarvis2019-01-011-1/+1
| |\
| | * Adds validation to check if user can read projectTiago Botelho2018-12-191-1/+1
* | | Add spec for Release APIShinya Maeda2018-12-312-1/+6
* | | Add releases APIAlessio Caiazza2018-12-311-0/+7
* | | Merge branch '34758-extend-can-create-cluster-logic' into 'master'Kamil Trzciński2018-12-303-1/+30
|\ \ \ | |/ / |/| |
| * | Allow users to add cluster with ancestorsMayra Cabrera2018-12-243-1/+30
* | | Rename GroupHierarchy into ObjectHierarchyJarka Košanová2018-12-191-1/+1
| |/ |/|
* | Add a missing policy allowance in GroupPolicyRémy Coutable2018-12-181-0/+1
|/
* Allow suggesting single line changes in diffsOswaldo Ferreira2018-12-131-0/+11
* Merge branch 'security-guest-comments' into 'master'Cindy Pallares2018-11-282-0/+11
* Suggests issues when typing titlePhil Hughes2018-11-271-0/+5
* Authorize DestroyPipelineService against pipelineMatija Čupić2018-11-132-1/+4
* Destroy pipeline in serviceMatija Čupić2018-11-121-0/+1
* Add policy for clusters on group levelThong Kuah2018-11-083-5/+7
* Allow to make builds soft-archived.disallow-retry-of-old-buildsKamil Trzciński2018-11-052-1/+15