delta/gitlab/gitlab-ce.git/spec/features/groups/issues_spec.rb, branch patch-7 gitlab.com: gitlab-org/gitlab-ce.git Merge branch '22481-honour-issue-visibility-for-groups' into 'security' 2016-11-09T11:24:13+00:00 Douwe Maan douwe@gitlab.com 2016-10-26T17:34:06+00:00 79d94b167999544086db235602a9213a2d37831e Honour issue and merge request visibility in their respective finders This MR fixes a security issue with the IssuesFinder and MergeRequestFinder where they would return items the user did not have permission to see. This was most visible on the issue and merge requests page for a group containing projects that had set their issues or merge requests to "private". Closes https://gitlab.com/gitlab-org/gitlab-ce/issues/22481 See merge request !2000 

Honour issue and merge request visibility in their respective finders

This MR fixes a security issue with the IssuesFinder and MergeRequestFinder where they would return items the user did not have permission to see. This was most visible on the issue and merge requests page for a group containing projects that had set their issues or merge requests to "private".

Closes https://gitlab.com/gitlab-org/gitlab-ce/issues/22481

See merge request !2000