summaryrefslogtreecommitdiff
path: root/spec/features/security
Commit message (Collapse)AuthorAgeFilesLines
* Create and use project path helpers that only need a project, no namespaceDouwe Maan2017-07-056-111/+111
|
* Split up MergeRequestsControllerdm-merge-request-creations-controllerDouwe Maan2017-06-282-2/+2
|
* Correct RSpec/SingleLineHook cop offensesRobert Speicher2017-06-142-8/+24
|
* Rename BuildsController to JobsControllerLin Jen-Shin2017-05-173-9/+9
| | | | | | | | | | | | Rename other URL generators admin_builds_path -> admin_jobs_path Fix tests and more renaming Fix more tests Also change build_id to job_id in the controller
* Add Pipeline Schedules that supersedes experimental Trigger ScheduleZeger-Jan van de Weg2017-05-073-3/+73
|
* Merge branch 'metrics-deployment-history' into 'master' Douwe Maan2017-05-023-0/+45
|\ | | | | | | | | | | | | Metrics deployment history Closes #26914 See merge request !10649
| * Fix deployments security check path and add checks for internal and public ↵Pawel Chojnacki2017-04-243-1/+31
| | | | | | | | access
| * Add deployments security checkPawel Chojnacki2017-04-241-0/+15
| |
* | Resolve "Add more tests for spec/controllers/projects/builds_controller_spec.rb"Dosuken shinya2017-04-283-0/+108
|/
* Fix Rubocop offenses in code related to the registryGrzegorz Bizon2017-04-031-1/+1
|
* Refactor container registry repository tag stubsGrzegorz Bizon2017-04-033-3/+3
|
* Rename container image to repository in specsGrzegorz Bizon2017-03-233-6/+6
|
* Merge branch 'master' into feature/multi-level-container-registry-imagesGrzegorz Bizon2017-03-213-0/+42
|\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * master: (1327 commits) Merge branch 'render-json-leak' into 'security' Merge branch 'ssrf' into 'security' Merge branch 'ssrf' into 'security' Merge branch 'fix-links-target-blank' into 'security' Merge branch '28058-hide-emails-in-atom-feeds' into 'security' Fix karma test Reset filters after click Handle Route#name being nil after an update Only add frontend code coverage instrumentation when generating coverage report fix recompile assets step in 9.0 upgrade guide to use yarn Undo explicit conversion to Integer Make level_value accept string integers Make feature spec more robust Removed d3.js from the main application.js bundle Extend compound status for manual actions specs Update css to be nice and tidy. Fix pipeline status for transition between stages add an index to the ghost column Return 404 in project issues API endpoint when project cannot be found Improve rename projects migration ... Conflicts: doc/ci/docker/using_docker_build.md spec/lib/gitlab/import_export/all_models.yml
| * Added access spec testsJose Ivan Vargas2017-03-062-0/+28
| | | | | | | | Also created changelog and removed redundant code
| * Add access spec tests for the /settings/repository routeJose Ivan Vargas2017-03-061-0/+14
| |
* | Fixes broken and missing testsAndre Guedes2017-02-223-0/+9
|/
* Fixed tests, renamed files and methodsJose Ivan Vargas2017-02-061-0/+14
|
* Changed the controller/route name to 'ci/cd' and renamed the corresponding filesJose Ivan Vargas2017-02-063-6/+34
| | | | Added tests to verify the access policy to the new controller
* Fixed tests and a rubocop linter26138-combine-webhooks-and-services-settings-pagesJose Ivan Vargas2017-01-183-6/+6
|
* Updated some tests descriptions to represent the correct settings pathJose Ivan Vargas2017-01-033-3/+3
| | | | Updated the js from the member_expiration_date to es6
* Fixed rspec tests for the project members also fixed the indexJose Ivan Vargas2017-01-033-6/+6
| | | | view (removed an extra tag )
* Add support for nested groups to admin routingdz-fix-admin-routesDmitriy Zaporozhets2016-12-111-1/+1
| | | | Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com>
* Update effected testszj-guest-reads-public-buildsZ.J. van de Weg2016-12-041-24/+25
|
* Guests can read builds if those are publicZ.J. van de Weg2016-12-041-0/+52
| | | | Fixes #18448
* Speed up project snippet security request specsrs-project-snippet-security-specsRobert Speicher2016-12-023-204/+168
| | | | | | | Part of https://gitlab.com/gitlab-org/gitlab-ce/issues/24899 See https://gitlab.com/gitlab-org/gitlab-ce/merge_requests/7779 and https://gitlab.com/gitlab-org/gitlab-ce/merge_requests/7813
* Speed up Group security access specsrs-group-security-spec-speedRobert Speicher2016-11-303-204/+165
| | | | This is the Group equivalent of 13ad9a745a392e0bf0cedd0e1f318c1acee9b969
* Speed up Project security access specsRobert Speicher2016-11-283-758/+719
| | | | | | | | | Prior, every single test was creating four `ProjectMember` objects, each of which created one `User` record, even though each test only used _one_ of those Users, if any. Now each test only creates the single user record it needs, if it needs one. This shaves minutes off of each spec file changed here.
* Add missing security specs for raw snippet accessthe-undefined2016-11-053-59/+151
| | | | | | | | | | Each project visibility type (Public, Internal, Private) has an access feature spec to catch security regressions. This commit adds relevent tests for the raw snippet path in each of these project access specs. Refacotrings: - Use an empty project factory for access specs
* Make guests unable to view MRsguests_cant_see_mrsValery Sizov2016-10-111-1/+1
|
* Support integration with Koding (online IDE)Gokmen Goksel2016-08-191-0/+14
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Koding: #index: landing page for Koding integration If enabled it will provide a link to open remote Koding instance url for now we are also providing the sneak preview video for how integration works in detail. Repository: check whether .koding.yml file exists on repository Projects: landing page: show Run in IDE (Koding) button if repo has stack file Projects: MR: show Run in IDE Koding button if repo has stack file on active branch ProjectHelpers: add_koding_stack: stack generator for provided project With this helper we will auto-generate the required stack template for a given project. For the feature we can request this base template from the running Koding instance on integration. Currently this will provide users to create a t2.nano instance on aws and it'll automatically configures the instance for basic requirements. Projects: empty state and landing page provide shortcuts to create stack projects_helper: use branch on checkout and provide an entry point This ${var.koding_queryString_branch} will be replaced with the branch provided in query string which will allow us to use same stack template for different branches of the same repository. ref: https://github.com/koding/koding/pull/8597/commits/b8c0e43c4c24bf132670aa8a3cfb0d634acfd09b projects_helper: provide sha info in query string to use existing vms With this change we'll be able to query existing vms on Koding side based on the commit id that they've created. ref: https://github.com/koding/koding/pull/8597/commits/1d630fadf31963fa6ccd3bed92e526761a30a343 Integration: Docs: Koding documentation added Disable /koding route if integration is disabled Use application settings to enable Koding Projects_helper: better indentation with strip_heredoc usage Projects_helper: return koding_url as is if there is no project provided current_settings: set koding_enabled: false by default Koding_Controller: to render not_found once integration is disabled Dashboard_specs: update spec for Koding enabled case Projects_Helper: make repo dynamic ref: https://github.com/koding/koding/pull/8597/commits/4d615242f45aaea4c4986be84ecc612b0bb1514c Updated documentation to have right format
* Allow to access Container Registry for Public and Internal projectsallow-to-pull-public-imagesKamil Trzcinski2016-07-153-0/+57
|
* Enable Style/EmptyLines cop, remove redundant onesrubocop/enable-cops-for-empty-linesGrzegorz Bizon2016-07-013-3/+0
|
* Fix 404 for pipelinesKamil Trzcinski2016-06-233-1/+270
|
* Authorize environments controller actionsKamil Trzcinski2016-06-141-0/+43
|
* Rename all `[ci_]commit` to `[ci_]pipeline` in specs and featuresKamil Trzcinski2016-06-031-2/+2
|
* Rename Ci::Build commit to pipelineKamil Trzcinski2016-06-031-1/+1
|
* Projects members tab should follow visibility levelsFelipe Artur2016-04-183-14/+14
|
* Ensure project snippets have their own access levelRémy Coutable2016-03-253-0/+234
|
* Address feedbackDouwe Maan2016-03-223-16/+16
|
* Tweaks, refactoring, and specsDouwe Maan2016-03-207-648/+458
|
* Fix specsFelipe Artur2016-03-181-1/+1
|
* Code fixesFelipe Artur2016-03-173-15/+46
|
* Merge 4009-external-users into issue_12658Felipe Artur2016-03-163-33/+117
|\
| * Create an external users tab on Admin user listZeger-Jan van de Weg2016-03-132-0/+38
| | | | | | | | Also incorporates the review into this, mainly spec changes.
| * External UsersZeger-Jan van de Weg2016-03-133-33/+79
| | | | | | | | | | The user has the rights of a public user execpt it can never create a project, group, or team. Also it cant view internal projects.
* | Code improvements and add Create group serviceFelipe Artur2016-03-161-2/+0
| |
* | Add security specsFelipe Artur2016-03-104-40/+312
|/
* Rename allow_guest_to_access_builds to public_buildsKamil Trzcinski2016-02-041-0/+54
|
* Fixed Rubocop offensesGabriel Mazetto2015-12-151-2/+2
|
* Merge branch 'public_profiles' into 'master'Dmitriy Zaporozhets2015-09-141-3/+3
|\ | | | | | | | | | | | | | | | | | | Make all group public https://gitlab.com/gitlab-org/gitlab-ce/merge_requests/1219# Internal issue - https://dev.gitlab.org/gitlab/gitlabhq/issues/1361 See merge request !1247