summaryrefslogtreecommitdiff
path: root/spec/controllers/projects
Commit message (Collapse)AuthorAgeFilesLines
* Add latest changes from gitlab-org/gitlab@masterGitLab Bot2019-12-031-4/+4
|
* Add latest changes from gitlab-org/gitlab@masterGitLab Bot2019-12-021-13/+19
|
* Add latest changes from gitlab-org/gitlab@masterGitLab Bot2019-11-291-0/+22
|
* Add latest changes from gitlab-org/gitlab@masterGitLab Bot2019-11-291-3/+3
|
* Merge remote-tracking branch 'dev/master'Alessio Caiazza2019-11-271-0/+37
|\
| * Merge branch 'security-filter-related-branches-from-activity-feed' into 'master'GitLab Release Tools Bot2019-11-261-0/+37
| |\ | | | | | | | | | | | | Related Branches Visible to Guests in Issue Activity See merge request gitlab/gitlabhq!3537
| | * Restrict branches visible to guests in Issue feedKerri Miller2019-11-201-0/+37
| | | | | | | | | | | | | | | Notes related to branch creation should not be shown in an issue's activity feed when the user doesn't have access to :download_code.
* | | Add latest changes from gitlab-org/gitlab@masterGitLab Bot2019-11-271-17/+3
|/ /
* | Add latest changes from gitlab-org/gitlab@masterGitLab Bot2019-11-261-0/+32
| |
* | Add latest changes from gitlab-org/gitlab@masterGitLab Bot2019-11-221-1/+1
| |
* | Add latest changes from gitlab-org/gitlab@masterGitLab Bot2019-11-211-11/+14
|/
* Add latest changes from gitlab-org/gitlab@masterGitLab Bot2019-11-191-36/+79
|
* Add latest changes from gitlab-org/gitlab@masterGitLab Bot2019-11-191-0/+35
|
* Add latest changes from gitlab-org/gitlab@masterGitLab Bot2019-11-191-0/+11
|
* Add latest changes from gitlab-org/gitlab@masterGitLab Bot2019-11-151-6/+6
|
* Add latest changes from gitlab-org/gitlab@masterGitLab Bot2019-11-151-4/+9
|
* Add latest changes from gitlab-org/gitlab@masterGitLab Bot2019-11-149-21/+56
|
* Add latest changes from gitlab-org/gitlab@masterGitLab Bot2019-11-131-1/+1
|
* Add latest changes from gitlab-org/gitlab@masterGitLab Bot2019-11-131-12/+0
|
* Add latest changes from gitlab-org/gitlab@masterGitLab Bot2019-11-131-0/+94
|
* Add latest changes from gitlab-org/gitlab@masterGitLab Bot2019-11-111-1/+13
|
* Add latest changes from gitlab-org/gitlab@masterGitLab Bot2019-11-082-13/+193
|
* Add latest changes from gitlab-org/gitlab@masterGitLab Bot2019-11-085-8/+8
|
* Add latest changes from gitlab-org/gitlab@masterGitLab Bot2019-11-081-1/+51
|
* Add latest changes from gitlab-org/gitlab@masterGitLab Bot2019-11-075-8/+8
|
* Add latest changes from gitlab-org/gitlab@masterGitLab Bot2019-11-071-34/+0
|
* Add latest changes from gitlab-org/gitlab@masterGitLab Bot2019-11-061-0/+64
|
* Add latest changes from gitlab-org/gitlab@masterGitLab Bot2019-11-041-47/+47
|
* Add latest changes from gitlab-org/gitlab@masterGitLab Bot2019-11-011-1/+2
|
* Add latest changes from gitlab-org/gitlab@masterGitLab Bot2019-11-011-8/+89
|
* Add latest changes from gitlab-org/gitlab@masterGitLab Bot2019-10-313-498/+192
|
* Add latest changes from gitlab-org/gitlab@masterGitLab Bot2019-10-311-0/+83
|
* Add latest changes from gitlab-org/gitlab@masterGitLab Bot2019-10-301-4/+4
|
* Merge dev.gitlab.org@master into GitLab.com@masterYorick Peterse2019-10-305-22/+25
|\
| * Merge branch ↵GitLab Release Tools Bot2019-10-291-16/+19
| |\ | | | | | | | | | | | | | | | | | | 'security-ag-hide-private-members-in-project-member-autocomplete' into 'master' Hide private members in project member autocomplete See merge request gitlab/gitlabhq!3212
| | * Pick only those groups that the viewing user has access to,Aakriti Gupta2019-09-251-16/+19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | in a project members' list. Add tests for possible scenarios Re-factor and remove N + 1 queries Remove author from changelog Don't use memoisation when not needed Include users part of parents of project's group Re-factor tests Create and add users according to roles Re-use group created earlier Add incomplete test for ancestoral groups Rename method to clarify category of groups Skip pending test, remove comments not needed Remove extra line Include ancestors from invited groups as well Add specs for participants service Add more specs Add more specs use instead of Use public group owner instead of project maintainer to test owner acess Remove tests that have now been moved into participants_service_spec Use :context instead of :all Create nested group instead of creating an ancestor separately Add comment explaining doubt on the failing spec Imrpove test setup Optimize sql queries Refactor specs file Add rubocop disablement Add special case for project owners Add small refactor Add explanation to the docs Fix wording Refactor group check Add small changes in specs Add cr remarks Add cr remarks Add specs Add small refactor Add code review remarks Refactor for better database usage Fix failing spec Remove rubocop offences Add cr remarks
| * | Merge branch 'security-remove-leaky-401-responses-master' into 'master'GitLab Release Tools Bot2019-10-294-6/+6
| |\ \ | | | | | | | | | | | | | | | | Private/internal repository enumeration via bruteforce on a vulnerable URL See merge request gitlab/gitlabhq!3454
| | * | Avoid #authenticate_user! in #route_not_foundKerri Miller2019-10-094-6/+6
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This method, #route_not_found, is executed as the final fallback for unrecognized routes (as the name might imply.) We want to avoid `#authenticate_user!` when calling `#route_not_found`; `#authenticate_user!` can, depending on the request format, return a 401 instead of redirecting to a login page. This opens a subtle security exploit where anonymous users will receive a 401 response when attempting to access a private repo, while a recognized user will receive a 404, exposing the existence of the private, hidden repo.
* | | | Add latest changes from gitlab-org/gitlab@masterGitLab Bot2019-10-291-0/+50
| | | |
* | | | Add latest changes from gitlab-org/gitlab@masterGitLab Bot2019-10-281-12/+56
| | | |
* | | | Add latest changes from gitlab-org/gitlab@masterGitLab Bot2019-10-261-0/+18
|/ / /
* | | Add latest changes from gitlab-org/gitlab@masterGitLab Bot2019-10-237-31/+27
| | |
* | | Add latest changes from gitlab-org/gitlab@masterGitLab Bot2019-10-233-192/+498
| | |
* | | Add latest changes from gitlab-org/gitlab@masterGitLab Bot2019-10-221-0/+27
| | |
* | | Add latest changes from gitlab-org/gitlab@masterGitLab Bot2019-10-213-7/+43
| | |
* | | Add latest changes from gitlab-org/gitlab@masterGitLab Bot2019-10-211-2/+186
| | |
* | | Add latest changes from gitlab-org/gitlab@masterGitLab Bot2019-10-184-44/+93
| | |
* | | Add latest changes from gitlab-org/gitlab@masterlistGitLab Bot2019-10-171-6/+119
| | |
* | | Add latest changes from gitlab-org/gitlab@masterGitLab Bot2019-10-171-3/+80
| | |
* | | Add latest changes from gitlab-org/gitlab@masterGitLab Bot2019-10-162-5/+16
| | |
View Lorry Controller Status