diff options
author | Kamil Trzcinski <ayufan@ayufan.eu> | 2015-07-21 22:48:34 +0200 |
---|---|---|
committer | Kamil Trzcinski <ayufan@ayufan.eu> | 2015-07-22 16:52:19 +0200 |
commit | b9c551302253f86a8a85e8288099696b1d8ccdd6 (patch) | |
tree | 5308f2a13fe26929e9df717d56f7f39a157d2d20 /db/migrate | |
parent | 7728125c3e3474fef153c0037355c20ec72868b0 (diff) | |
download | gitlab-ci-b9c551302253f86a8a85e8288099696b1d8ccdd6.tar.gz |
Fix: user could steal specific runner
- check if user has manage access to project
- don't cache result of authorized_projects, because it's serialised with User object
- clear user sessions
Diffstat (limited to 'db/migrate')
-rw-r--r-- | db/migrate/20150721204649_truncate_sessions.rb (renamed from db/migrate/20150706103229_truncate_sessions.rb) | 0 |
1 files changed, 0 insertions, 0 deletions
diff --git a/db/migrate/20150706103229_truncate_sessions.rb b/db/migrate/20150721204649_truncate_sessions.rb index 32fe651..32fe651 100644 --- a/db/migrate/20150706103229_truncate_sessions.rb +++ b/db/migrate/20150721204649_truncate_sessions.rb |