diff options
| author | Robert Speicher <robert@gitlab.com> | 2017-01-19 21:00:47 +0000 |
|---|---|---|
| committer | Robert Speicher <rspeicher@gmail.com> | 2017-01-23 13:54:52 -0500 |
| commit | a1f959430b752aca21f798d37d338e11afaa6110 (patch) | |
| tree | f2a94b85c04789589e9691867969052bc7b977ef /changelogs | |
| parent | 3a5df1d8fc518900d8e33a6be8a2243e399c754a (diff) | |
| download | gitlab-ce-a1f959430b752aca21f798d37d338e11afaa6110.tar.gz | |
Merge branch 'fix-guest-access-posting-to-notes' into 'security'
Prevent users from creating notes on resources they can't access
See https://dev.gitlab.org/gitlab/gitlabhq/merge_requests/2054
Diffstat (limited to 'changelogs')
| -rw-r--r-- | changelogs/unreleased/fix-guest-access-posting-to-notes.yml | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/changelogs/unreleased/fix-guest-access-posting-to-notes.yml b/changelogs/unreleased/fix-guest-access-posting-to-notes.yml new file mode 100644 index 00000000000..81377c0c6f0 --- /dev/null +++ b/changelogs/unreleased/fix-guest-access-posting-to-notes.yml @@ -0,0 +1,4 @@ +--- +title: Prevent users from creating notes on resources they can't access +merge_request: +author: |