| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | Merge branch '2563-backport-ee1942' into 'master' | Grzegorz Bizon | 2017-06-07 | 1 | -4/+0 |
| |\ | | | | | | | | | | | | | Backport some EE changes from adding shared_runners_minutes_limit to the API Closes gitlab-ee#2563 See merge request !11936 | ||||
| | * | Backport https://gitlab.com/gitlab-org/gitlab-ee/merge_requests/1942 | Lin Jen-Shin | 2017-06-06 | 1 | -4/+0 |
| | | | |||||
| * | | Introduce an Events API | Mark Fletcher | 2017-06-06 | 1 | -21/+0 |
| |/ | | | | | | | | | | | * Meld the following disparate endpoints: * `/projects/:id/events` * `/events` * `/users/:id/events` + Add result filtering to the above endpoints: * action * target_type * before and after dates | ||||
| * | Refactor the DeleteUserWorker | Nick Thomas | 2017-06-05 | 1 | -1/+1 |
| | | |||||
| * | Allow users to be hard-deleted from the API | Nick Thomas | 2017-06-02 | 1 | -1/+2 |
| | | |||||
| * | Create a Users Finder | George Andrinopoulos | 2017-05-15 | 1 | -10/+1 |
| | | |||||
| * | Don't display the `is_admin?` flag for user API responses. | Timothy Andrew | 2017-04-25 | 1 | -1/+1 |
| | | | | | | | | | | | | - To prevent an attacker from enumerating the `/users` API to get a list of all the admins. - Display the `is_admin?` flag wherever we display the `private_token` - at the moment, there are two instances: - When an admin uses `sudo` to view the `/user` endpoint - When logging in using the `/session` endpoint | ||||
| * | Merge branch 'query-users-by-extern-uid' into 'master' | Robert Speicher | 2017-04-19 | 1 | -8/+14 |
| |\ | | | | | | | | | Implement search by extern_uid in Users API See merge request !10509 | ||||
| | * | Implement search by extern_uid in Users API | Robin Bobbitt | 2017-04-18 | 1 | -8/+14 |
| | | | |||||
| * | | Remove unused user activities code | Sean McGivern | 2017-04-14 | 1 | -1/+0 |
| | | | |||||
| * | | Expose `last_activity_on` in the User API | Rémy Coutable | 2017-04-14 | 1 | -8/+6 |
| | | | | | | | | | Signed-off-by: Rémy Coutable <remy@rymai.me> | ||||
| * | | Port 'Add user activities API' to CE | Sean McGivern | 2017-04-14 | 1 | -0/+18 |
| |/ | | | | CE port of https://gitlab.com/gitlab-org/gitlab-ee/merge_requests/962 | ||||
| * | Separate CE params on Grape API | Oswaldo Ferreira | 2017-04-10 | 1 | -0/+2 |
| | | |||||
| * | Remove the User#is_admin? method | blackst0ne | 2017-04-09 | 1 | -3/+3 |
| | | |||||
| * | ProjectsFinder should handle more options | Jacopo | 2017-04-06 | 1 | -1/+1 |
| | | | | | | | | | | | | | | | | | | | | Extended ProjectFinder in order to handle the following options: - current_user - which user use - project_ids_relation: int[] - project ids to use - params: - trending: boolean - non_public: boolean - starred: boolean - sort: string - visibility_level: int - tags: string[] - personal: boolean - search: string - non_archived: boolean GroupProjectsFinder now inherits from ProjectsFinder. Changed the code in order to use the new available options. | ||||
| * | Delete users asynchronouslysh-fix-destroy-user-race | Stan Hu | 2017-04-02 | 1 | -1/+1 |
| | | |||||
| * | Implement new service for creating user | George Andrinopoulos | 2017-03-27 | 1 | -23/+4 |
| | | |||||
| * | use a magic default :global symbol instead of nil | http://jneen.net/ | 2017-03-09 | 1 | -1/+1 |
| | | | | | to make sure we mean the global permissions | ||||
| * | apply codestyle and implementation changes to the respective feature codepersonal_access_token_api_and_impersonation_token | Tiago Botelho | 2017-03-06 | 1 | -40/+36 |
| | | |||||
| * | refactors finder and correlated code | Tiago Botelho | 2017-03-01 | 1 | -17/+13 |
| | | |||||
| * | applies relevant changes to the code and code structure | Tiago Botelho | 2017-02-28 | 1 | -36/+26 |
| | | |||||
| * | refactors documentation and personal access tokens form to not allow admins ↵ | Tiago Botelho | 2017-02-28 | 1 | -50/+76 |
| | | | | | to generate non impersionation tokens | ||||
| * | add impersonation token | Simon Vocella | 2017-02-28 | 1 | -2/+5 |
| | | |||||
| * | manage personal_access_tokens through api | Simon Vocella | 2017-02-28 | 1 | -0/+64 |
| | | |||||
| * | Return 204 for delete endpoints | Robert Schilling | 2017-02-28 | 1 | -2/+2 |
| | | |||||
| * | Revert "Prefer leading style for Style/DotPosition" | Douwe Maan | 2017-02-23 | 1 | -15/+15 |
| | | | | | This reverts commit cb10b725c8929b8b4460f89c9d96c773af39ba6b. | ||||
| * | Prefer leading style for Style/DotPosition | Douwe Maan | 2017-02-23 | 1 | -15/+15 |
| | | |||||
| * | Enable Performance/RedundantMerge | Douwe Maan | 2017-02-23 | 1 | -1/+1 |
| | | |||||
| * | API: Use POST to (un)block a userapi-post-block | Robert Schilling | 2017-02-20 | 1 | -2/+2 |
| | | |||||
| * | Paginate all endpoints that return an array | Robert Schilling | 2017-02-16 | 1 | -4/+12 |
| | | |||||
| * | Merge branch '1051-api-create-users-without-password' into 'master' | Rémy Coutable | 2017-02-10 | 1 | -2/+14 |
| |\ | | | | | | | | | | | | | Optionally make users created via the API set their password Closes #1051 See merge request !8957 | ||||
| | * | Optionally make users created via the API set their password | Joost Rijneveld | 2017-02-09 | 1 | -2/+14 |
| | | | |||||
| * | | Fix inconsistent naming for services that delete things | dixpac | 2017-02-08 | 1 | -1/+1 |
| |/ | | | | | | * Changed name of delete_user_service and worker to destroy * Move and change delete_group_service to Groups::DestroyService * Rename Notes::DeleteService to Notes::DestroyService | ||||
| * | Force new password after password reset via API | George Andrinopoulos | 2017-02-02 | 1 | -0/+2 |
| | | |||||
| * | Fix Users API to accept confirm parameter | Mark Fletcher | 2017-01-11 | 1 | -1/+1 |
| | | |||||
| * | Fix the failing spec in POST /users APIfix-users-api-500-error | Rémy Coutable | 2017-01-05 | 1 | -7/+4 |
| | | | | | Signed-off-by: Rémy Coutable <remy@rymai.me> | ||||
| * | API: extern_uid is a stringapi-fix-extern-uid-validation | Robert Schilling | 2017-01-03 | 1 | -1/+1 |
| | | |||||
| * | remove build_user from model User | Arsenev Vladislav | 2016-12-18 | 1 | -1/+1 |
| | | |||||
| * | Calls to the API are checked for scope. | Timothy Andrew | 2016-12-16 | 1 | -1/+4 |
| | | | | | | | | | | | | | | | - Move the `Oauth2::AccessTokenValidationService` class to `AccessTokenValidationService`, since it is now being used for personal access token validation as well. - Each API endpoint declares the scopes it accepts (if any). Currently, the top level API module declares the `api` scope, and the `Users` API module declares the `read_user` scope (for GET requests). - Move the `find_user_by_private_token` from the API `Helpers` module to the `APIGuard` module, to avoid littering `Helpers` with more auth-related methods to support `find_user_by_private_token` | ||||
| * | API: Memoize the current_user so that the sudo can work properly | Rémy Coutable | 2016-12-12 | 1 | -1/+1 |
| | | | | | | | | | The issue was arising when `#current_user` was called a second time after a user was impersonated: the `User#is_admin?` check would be performed on it and it would fail. Signed-off-by: Rémy Coutable <remy@rymai.me> | ||||
| * | adds impersonator variable and makes sudo usage overall more clear24537-reenable-private-token-with-sudo | tiagonbotelho | 2016-12-07 | 1 | -8/+8 |
| | | |||||
| * | Reenables /user API request to return private-token if user is admin and ↵ | tiagonbotelho | 2016-12-07 | 1 | -1/+1 |
| | | | | | requested with sudo | ||||
| * | Use the pagination helper in the APIuse-pagination-helper | Robert Schilling | 2016-12-04 | 1 | -1/+4 |
| | | |||||
| * | Fix StrongAttibutes error with Ruby 2.124730-broken-master | Rémy Coutable | 2016-11-21 | 1 | -4/+5 |
| | | | | | Signed-off-by: Rémy Coutable <remy@rymai.me> | ||||
| * | Grapify the users APIgrapify-users-api | Robert Schilling | 2016-11-21 | 1 | -258/+250 |
| | | |||||
| * | Add query param to filter users on 'external' & 'blocked' type on API | Yatish Mehta | 2016-11-08 | 1 | -1/+6 |
| | | |||||
| * | Get rid of extra .page call | Airat Shigapov | 2016-10-24 | 1 | -2/+1 |
| | | |||||
| * | Fix events order in user contributions API | Airat Shigapov | 2016-10-24 | 1 | -1/+2 |
| | | |||||
| * | API: New /users/:id/events endpoint | Rémy Coutable | 2016-10-10 | 1 | -0/+20 |
| | | | | | Signed-off-by: Rémy Coutable <remy@rymai.me> | ||||
| * | Add User#organization to users api | Dmitriy Zaporozhets | 2016-09-27 | 1 | -2/+4 |
| | | | | | Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com> | ||||
 |
index : delta/gitlab/gitlab-ce.git | |
| gitlab.com: gitlab-org/gitlab-ce.git |
| summaryrefslogtreecommitdiff |