| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | Don't expose a user's private token in the `/api/v3/user` API. | Timothy Andrew | 2016-08-31 | 1 | -1/+1 |
| | | | | | | | - This would allow anyone with a personal access token (even a read-only token, once scopes are implemented) to escalate their access by obtaining the private token. | ||||
| * | Enable Style/RedundantParentheses rubocop coprubocop/enable-redundant-parentheses-cop | Grzegorz Bizon | 2016-05-30 | 1 | -1/+1 |
| | | | | | See #17478 | ||||
| * | Add changelog entry | Felipe Artur | 2016-04-18 | 1 | -1/+1 |
| | | |||||
| * | Fix documentation and improve permissions code | Felipe Artur | 2016-04-18 | 1 | -1/+1 |
| | | |||||
| * | Insert users check into api | Felipe Artur | 2016-04-18 | 1 | -2/+8 |
| | | |||||
| * | Expose user location in API | Robert Schilling | 2016-04-06 | 1 | -2/+4 |
| | | |||||
| * | Add missing API docs on external user | Achilleas Pipinellis | 2016-03-17 | 1 | -2/+2 |
| | | | | | [ci skip] | ||||
| * | API support for setting External flag on existing users | Zeger-Jan van de Weg | 2016-03-17 | 1 | -1/+2 |
| | | |||||
| * | External Users | Zeger-Jan van de Weg | 2016-03-13 | 1 | -2/+3 |
| | | | | | | The user has the rights of a public user execpt it can never create a project, group, or team. Also it cant view internal projects. | ||||
| * | Codestyle changes | Gabriel Mazetto | 2016-01-12 | 1 | -3/+3 |
| | | |||||
| * | Prevent ldap_blocked users from being blocked/unblocked by the API | Gabriel Mazetto | 2016-01-08 | 1 | -4/+8 |
| | | |||||
| * | Make single user API endpoint return Entities::User instead of ↵ | Michi302 | 2015-12-28 | 1 | -1/+1 |
| | | | | | Entities::UserBasic | ||||
| * | Add API support for looking up a user by username | Stan Hu | 2015-12-24 | 1 | -4/+10 |
| | | | | | Needed to support Huboard | ||||
| * | Added ability to update or set the identity of an existing user, like the ↵fix-user-identities-api | Patricio Cano | 2015-09-22 | 1 | -0/+11 |
| | | | | | documentation said it was possible, but actually wasn't. | ||||
| * | Restrict users API endpoints to use integer IDs | Stan Hu | 2015-08-23 | 1 | -1/+1 |
| | | | | | Closes #2267 | ||||
| * | Fix indentation | Douwe Maan | 2015-07-31 | 1 | -11/+11 |
| | | |||||
| * | Add ability to manage user email addresses via the API. | Douwe Maan | 2015-07-29 | 1 | -0/+111 |
| | | |||||
| * | Allow user to be blocked and unblocked via the API | Steve Norman | 2015-07-03 | 1 | -0/+30 |
| | | |||||
| * | Fix error when deleting a user who has projects | Stan Hu | 2015-06-23 | 1 | -1/+1 |
| | | | | | | Closes #1856 Closes https://github.com/gitlabhq/gitlabhq/issues/9394 | ||||
| * | You can not remove user if he/she is an only owner of group | Dmitriy Zaporozhets | 2015-05-28 | 1 | -1/+1 |
| | | | | | | | | To prevent loose of group data you need to transfer or remove group first before you can remove user Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com> | ||||
| * | Change ordering so that confirm is removed from attrs before attempting to ↵ | RICKETTM@uk.ibm.com | 2015-03-24 | 1 | -2/+2 |
| | | | | | User.build_user | ||||
| * | Merge branch 'master' into mmonaco/gitlab-ce-api-user-noconfirm | Dmitriy Zaporozhets | 2015-02-27 | 1 | -5/+9 |
| |\ | | | | | | | | | Conflicts: lib/api/users.rb | ||||
| | * | Supporting for multiple omniauth provider for the same user | Valery Sizov | 2014-12-04 | 1 | -4/+8 |
| | | | |||||
| * | | Add 'confirm' option to users api | Matthew Monaco | 2014-11-03 | 1 | -1/+4 |
| |/ | |||||
| * | Improve error reporting on users API | jubianchi | 2014-09-16 | 1 | -21/+37 |
| | | | | | | | | | * users (#6878, #3526, #4209): Validation error messages are now exposed through 400 responses, 409 response are sent in case of duplicate email or username * MRs (#5335): 409 responses are sent in case of duplicate merge request (source/target branches), 422 responses are sent when submiting MR fo/from unrelated forks * issues * labels * projects | ||||
| * | Fix signup and project visibility | Dmitriy Zaporozhets | 2014-06-30 | 1 | -1/+1 |
| | | | | | Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com> | ||||
| * | Make app works with strong params | Dmitriy Zaporozhets | 2014-06-26 | 1 | -1/+1 |
| | | | | | Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com> | ||||
| * | Dont expose user email via API | Dmitriy Zaporozhets | 2014-06-13 | 1 | -4/+14 |
| | | | | | | | | | | | | | | To prevent leaking of users info we reduce amount of user information retrieved via API for normal users. What user can get via API: * if not admin: only id, state, name, username and avatar_url * if admin: all user information * about himself: all informaion Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com> | ||||
| * | Implement GET /users/:uid/keys for admin users | Timm Friebe | 2014-04-18 | 1 | -0/+39 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Complements POST operation added in gitlabhq/gitlabhq#3146 Implement DELETE /users/:uid/keys/:id for admin users Fix "Line is too long. [83/80]" Use single quotes as advised Use single quotes as advised Use single quotes as advised Fix missing space around { and } Fix typo in documentation Only catch ActiveRecord::RecordNotFound, let other exceptions propagate Raise a "404 Not found" if key to be deleted cannot be found As requested by @jvanbaarsen in https://github.com/gitlabhq/gitlabhq/pull/6781#discussion_r11735114 Remove tab Unconfigured vim on this box, grrrr./ | ||||
| * | Merge pull request #6075 from skv-headless/remove_deprecated_finders | Dmitriy Zaporozhets | 2014-01-22 | 1 | -1/+1 |
| |\ | | | | | Remove deprecated finders | ||||
| | * | Remove deprecated finders | skv | 2014-01-19 | 1 | -1/+1 |
| | | | |||||
| * | | Add website url to user | Jerome Dalbert | 2014-01-18 | 1 | -1/+3 |
| |/ | |||||
| * | fix most of warnings | skv | 2013-12-15 | 1 | -1/+1 |
| | | |||||
| * | Extended User API to expose admin and can_create_group for user ↵ | Boyan Tabakov | 2013-09-29 | 1 | -3/+11 |
| | | | | | | | | creation/updating. Also, is_admin and can_create_group are exposed in the user information. Fixed attributes_for_keys to process properly keys with boolean values (since false.present? is false). | ||||
| * | Update to only provide one way to get a default user | Izaak Alpert | 2013-09-11 | 1 | -3/+2 |
| | | | | | | | -calling build_user will now apply defaults and only override them if as: :admin is set Change-Id: Id1d938c0967752ecc14370af54f2d88128d18c44 | ||||
| * | Update User api to respect default settings | Izaak Alpert | 2013-09-11 | 1 | -1/+1 |
| | | | | | | | -API now respects default_projects_limit, default_can_create_group, and default_can_create_team Change-Id: I059d060d576df1050e5371e707381c5e8c608a7a | ||||
| * | Refactor API classes. So api classes like Gitlab::Issues become API::Issues | Dmitriy Zaporozhets | 2013-05-14 | 1 | -1/+1 |
| | | |||||
| * | modify api to work with new deploy keys | Dmitriy Zaporozhets | 2013-05-06 | 1 | -1/+1 |
| | | |||||
| * | Paginate users in users api | Dmitriy Zaporozhets | 2013-04-16 | 1 | -0/+1 |
| | | |||||
| * | Dont show blocked users in autocomplete | Dmitriy Zaporozhets | 2013-03-19 | 1 | -0/+1 |
| | | |||||
| * | Abilities added to /user and /sign_in requests | Alex Denisov | 2013-03-18 | 1 | -1/+1 |
| | | |||||
| * | Result of misspellings run. | Kevin Lyda | 2013-03-17 | 1 | -1/+1 |
| | | | | | | | | | | Most of these are comments but a few are strings for users. Might be an idea to run this from time to time: https://github.com/lyda/misspell-check It runs mostly clean now. | ||||
| * | add api users filter and integrate users select2 | Dmitriy Zaporozhets | 2013-03-13 | 1 | -1/+2 |
| | | |||||
| * | Merge branch 'master' into fixes/api, code clean up and tests fixed | Sebastian Ziebell | 2013-03-07 | 1 | -0/+20 |
| |\ | | | | | | | | | | | Conflicts: doc/api/projects.md spec/requests/api/projects_spec.rb | ||||
| | * | Additional Admin APIs | Angus MacArthur | 2013-03-05 | 1 | -0/+20 |
| | | | |||||
| * | | API: extracted helper method to validate required parameters, code clean up | Sebastian Ziebell | 2013-02-27 | 1 | -7/+2 |
| | | | | | | | | | | | | | Added a helper method to check if required parameters are given in an API call. Can be used to return a `400 Bad Request` return code if a required attribute is missing. Code clean up and fixed tests. | ||||
| * | | API: fixes return codes, documentation updated with status codes, tests added | Sebastian Ziebell | 2013-02-20 | 1 | -5/+19 |
| |/ | | | | | | | | The users API updated with return codes, e.g. if required parameters are missing a `400 Bad Request` error is returned instead of `404`. Fixes return codes of functions, e.g. deletion of a ssh key is an idempotent function now. The API documentation is updated to reflect the current status of the API. Descriptions are more detailed and complete, infos to return values are added to all functions. | ||||
| * | Extended users API to support updating and deleting users. | Boyan Tabakov | 2012-12-18 | 1 | -1/+46 |
| | | | | | Also added tests. | ||||
| * | Validates presence of User#name | Cyril | 2012-12-12 | 1 | -2/+0 |
| | | | | | | | | | | The 2 reasons are : - creation of user fail if name is empty : in after_save, it tries to create a namespace with namespace.name = user.name and namespece validates presence Namespace#name - in the web app links to team members are broken with empty User#name because they are of the form <a href'...'> user.name </a> | ||||
| * | Fixed spinach and tests. Build should pass now | Dmitriy Zaporozhets | 2012-11-23 | 1 | -1/+1 |
| | | |||||
 |
index : delta/gitlab/gitlab-ce.git | |
| gitlab.com: gitlab-org/gitlab-ce.git |
| summaryrefslogtreecommitdiff |