Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Merge branch 'security-todos_not_redacted_for_guests' into 'master' | John Jarvis | 2019-01-02 | 1 | -1/+1 |
|\ | | | | | | | | | [master] Security todos not redacted for guests See merge request gitlab/gitlabhq!2697 | ||||
| * | Delete confidential issue todos for guests | Felipe Artur | 2018-12-14 | 1 | -1/+1 |
| | | | | | | | | | | Fix leaking information of confidential issues on TODOs when user is downgraded to guest access. | ||||
* | | Rename GroupHierarchy into ObjectHierarchy | Jarka Košanová | 2018-12-19 | 2 | -2/+2 |
| | | | | | | | | | | | | - we now use the hierarchy class also for epics - also rename supports_nested_groups? into supports_nested_objects? - move it to a concern | ||||
* | | Change deprecated `except!` usages | Robert Speicher | 2018-12-16 | 1 | -1/+1 |
|/ | | | | | These can just be `delete` calls, with the caveat that it only takes one argument. | ||||
* | Fix Groups::UpdateService#execute not returning correct error code | Stan Hu | 2018-10-18 | 1 | -2/+4 |
| | | | | | This was causing problems in EE, where audit events were being generated even if the project failed to save. | ||||
* | Disable existing offenses for the CodeReuse cops | Yorick Peterse | 2018-09-11 | 2 | -0/+6 |
| | | | | | This whitelists all existing offenses for the various CodeReuse cops, of which most are triggered by the CodeReuse/ActiveRecord cop. | ||||
* | don't trigger project deletion hooks twice when removing a group | Gabriel Mazetto | 2018-08-26 | 1 | -1/+4 |
| | |||||
* | Fix: Project deletion may not log audit events during group deletion49796-project-deletion-may-not-log-audit-events-during-group-deletion | Valery Sizov | 2018-08-16 | 1 | -3/+4 |
| | |||||
* | Remove group todos when a users looses access | Jarka Kadlecová | 2018-08-02 | 1 | -1/+10 |
| | |||||
* | Enable frozen string in apps/services/**/*.rbrepo-forks/gitlab-ce-frozen-string-enable-apps-services-inner | gfyoung | 2018-07-16 | 6 | -0/+12 |
| | | | | | | For directories application_settings --> labels. Partially addresses #47424. | ||||
* | Add manifest import feature | Dmitriy Zaporozhets | 2018-07-11 | 1 | -5/+7 |
| | | | | | | | | | It allows user to automatically import multiple repositories with nested structure by uploading a manifest xml file. AOSP project was used as an example during development of this feature. Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com> | ||||
* | Merge branch 'fix/gh-namespace-issue' into 'security-10-4' | James Lopez | 2018-02-09 | 1 | -3/+7 |
| | | | | [10.4] Fix GH namespace security issue | ||||
* | 31885 - Ability to transfer a single group to another group | Mayra Cabrera | 2018-02-06 | 1 | -0/+96 |
| | |||||
* | Remove soft removals related code | Yorick Peterse | 2018-01-08 | 1 | -2/+1 |
| | | | | | | | | | | | | | | This removes all usage of soft removals except for the "pending delete" system implemented for projects. This in turn simplifies all the query plans of the models that used soft removals. Since we don't really use soft removals for anything useful there's no point in keeping it around. This _does_ mean that hard removals of issues (which only admins can do if I'm not mistaken) can influence the "iid" values, but that code is broken to begin with. More on this (and how to fix it) can be found in https://gitlab.com/gitlab-org/gitlab-ce/issues/31114. Fixes https://gitlab.com/gitlab-org/gitlab-ce/issues/37447 | ||||
* | Make Members with Owner and Master roles always able to create subgroups30473-allow-creation-of-subgroups-with-gitlab_default_can_create_group-set-to-false | Ruben Davila | 2017-09-07 | 1 | -9/+29 |
| | |||||
* | Refer to “Share with group lock” consistentlyimprove-share-locking-feature-for-subgroups | Michael Kozono | 2017-09-06 | 1 | -1/+1 |
| | |||||
* | Make UpdateService error message translatable | Winnie Hellmann | 2017-09-06 | 1 | -1/+1 |
| | |||||
* | Refactor based on code review | Michael Kozono | 2017-09-06 | 1 | -1/+1 |
| | |||||
* | Dry up method for code climate | Michael Kozono | 2017-09-06 | 1 | -10/+3 |
| | |||||
* | Enforce share_with_group_lock rules | Michael Kozono | 2017-09-06 | 1 | -1/+17 |
| | | | | …in Groups::UpdateService instead of only in the browser. | ||||
* | Handle creating a nested group on MySQL correctlybvl-fix-mysql-bare-repository-importer | Bob Van Landuyt | 2017-08-25 | 1 | -0/+4 |
| | | | | | Since we don't support nested groups on MySQL, raise an error explaining that on import instead of trying anyway. | ||||
* | Migrate creation of nested groups into a service | Bob Van Landuyt | 2017-08-23 | 1 | -0/+45 |
| | |||||
* | Merge branch '35845-improve-subgroup-creation-permissions' into 'master' | Douwe Maan | 2017-08-22 | 1 | -2/+2 |
|\ | | | | | | | | | | | | | Improves subgroup creation permissions Closes #35845 See merge request !13418 | ||||
| * | Improves subgroup creation permissions35845-improve-subgroup-creation-permissions | Tiago Botelho | 2017-08-21 | 1 | -2/+2 |
| | | |||||
* | | Make sure repository's removal work for legacy and hashed storages28283-uuid-storage | Gabriel Mazetto | 2017-08-22 | 1 | -1/+1 |
|/ | |||||
* | Remove Mattermost team with GitLab group | Z.J. van de Weg | 2017-07-28 | 1 | -0/+2 |
| | | | | | | | When destroying a group, now an API call is made to the Mattermost server to request the deletion of the project. Actual team deletion on the Mattermost side happens async, so the runtime shouldn't increase by more than a second. | ||||
* | Defer project destroys within a namespace in ↵ | Stan Hu | 2017-06-29 | 1 | -2/+1 |
| | | | | | | | | | | | Groups::DestroyService#async_execute Group#destroy would actually hard-delete all associated projects even though the acts_as_paranoia gem is used, preventing Projects::DestroyService from doing any work. We first noticed this while trying to log all projects deletion to the Geo log. | ||||
* | Fix current feature related specs | Tiago Botelho | 2017-06-28 | 1 | -1/+1 |
| | |||||
* | Merge branch 'jej-group-name-disclosure' into 'security' | Sean McGivern | 2017-03-29 | 1 | -0/+8 |
| | | | | | | Prevent private group disclosure via parent_id See merge request !2077 | ||||
* | Fix eslint | Z.J. van de Weg | 2017-03-06 | 1 | -6/+3 |
| | |||||
* | Merge branch 'master' into zj-create-mattermost-team | Z.J. van de Weg | 2017-03-02 | 1 | -1/+2 |
|\ | |||||
| * | Make nested groups deletion synchronous to avoid potential race | Stan Hu | 2017-02-27 | 1 | -1/+2 |
| | | |||||
* | | Improve UX | Z.J. van de Weg | 2017-03-02 | 3 | -21/+11 |
| | | |||||
* | | Review changes | Luke "Jared" Bennett | 2017-02-28 | 1 | -1/+1 |
| | | |||||
* | | Fix tests | Z.J. van de Weg | 2017-02-24 | 3 | -10/+19 |
| | | |||||
* | | Merge branch 'master' into zj-create-mattermost-team | Z.J. van de Weg | 2017-02-20 | 1 | -1/+3 |
|\ \ | |/ | |||||
| * | Fix a number of race conditions that can occur during namespace deletionsh-namespace-cleanup-deleted-projects | Stan Hu | 2017-02-15 | 1 | -1/+3 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | There are two problems in the current implementation: 1. If a project is marked for deletion via the `pending_delete` flag and then the namespace was quickly deleted, it's possible that the namespace skips over that project and leaves that project in an orphaned state. 2. Before namespace deletion, the namespace attempts to clean up all the relevant storage paths. However, if all projects have been removed synchronously, then the namespace will not be able to clean anything. To prevent this, we should load the paths to be deleted before actually destroying projects. The specs were missing this second case due to a permission issue that caused project removal never to happen. | ||||
* | | Transactional mattermost team creation | Z.J. van de Weg | 2017-02-20 | 1 | -8/+13 |
| | | | | | | | | | | | | | | Before this commit, but still on this feature branch, the creation of mattermost teams where a background job. However, it was decided it was better that these happened as transaction so feedback could be displayed to the user. | ||||
* | | Improve DRYness of views | Z.J. van de Weg | 2017-02-16 | 2 | -1/+8 |
| | | |||||
* | | Add tests for Mattermost team creation | Z.J. van de Weg | 2017-02-16 | 1 | -1/+3 |
| | | |||||
* | | Create MM team for GitLab group | Z.J. van de Weg | 2017-02-16 | 1 | -0/+5 |
|/ | |||||
* | Fix inconsistent naming for services that delete things | dixpac | 2017-02-08 | 1 | -0/+25 |
| | | | | | | * Changed name of delete_user_service and worker to destroy * Move and change delete_group_service to Groups::DestroyService * Rename Notes::DeleteService to Notes::DestroyService | ||||
* | Refactor nested group related codedz-nested-group-misc | Dmitriy Zaporozhets | 2016-12-29 | 1 | -10/+4 |
| | | | | | | | * Simplify code around group parent access check * Rename 'Nested groups' to 'Subgroups' tab at group#show page Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com> | ||||
* | Add nested groups support to the Groups::CreateService | Dmitriy Zaporozhets | 2016-12-26 | 1 | -0/+13 |
| | | | | Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com> | ||||
* | Fix error 500 renaming group. Also added specs and changelog. | James Lopez | 2016-12-20 | 1 | -1/+7 |
| | |||||
* | Enable Style/MultilineOperationIndentation in Rubocop, fixes #25741 | Rydkin Maxim | 2016-12-16 | 1 | -1/+1 |
| | |||||
* | Address feedback | Douwe Maan | 2016-03-22 | 2 | -5/+1 |
| | |||||
* | Fix specs | Douwe Maan | 2016-03-20 | 1 | -1/+1 |
| | |||||
* | Tweaks, refactoring, and specs | Douwe Maan | 2016-03-20 | 3 | -15/+16 |
| | |||||
* | Improve group visibility level feature | Zeger-Jan van de Weg | 2016-03-18 | 3 | -24/+16 |
| |