| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | Add latest changes from gitlab-org/gitlab@master | GitLab Bot | 2023-02-28 | 1 | -0/+14 |
| | | |||||
| * | Add latest changes from gitlab-org/gitlab@master | GitLab Bot | 2023-02-23 | 1 | -11/+27 |
| | | |||||
| * | Add latest changes from gitlab-org/gitlab@master | GitLab Bot | 2023-02-17 | 1 | -4/+1 |
| | | |||||
| * | Add latest changes from gitlab-org/gitlab@master | GitLab Bot | 2023-02-09 | 1 | -1/+1 |
| | | |||||
| * | Add latest changes from gitlab-org/gitlab@master | GitLab Bot | 2022-11-30 | 1 | -0/+1 |
| | | |||||
| * | Add latest changes from gitlab-org/gitlab@master | GitLab Bot | 2022-11-17 | 1 | -1/+1 |
| | | |||||
| * | Add latest changes from gitlab-org/gitlab@master | GitLab Bot | 2022-08-26 | 1 | -1/+1 |
| | | |||||
| * | Add latest changes from gitlab-org/gitlab@master | GitLab Bot | 2022-08-15 | 1 | -14/+57 |
| | | |||||
| * | Add latest changes from gitlab-org/gitlab@master | GitLab Bot | 2022-06-10 | 1 | -94/+0 |
| | | |||||
| * | Add latest changes from gitlab-org/gitlab@master | GitLab Bot | 2022-04-08 | 1 | -1/+15 |
| | | |||||
| * | Add latest changes from gitlab-org/gitlab@master | GitLab Bot | 2021-12-20 | 1 | -3/+6 |
| | | |||||
| * | Add latest changes from gitlab-org/gitlab@master | GitLab Bot | 2021-11-11 | 1 | -0/+29 |
| | | |||||
| * | Add latest changes from gitlab-org/gitlab@master | GitLab Bot | 2021-03-30 | 1 | -3/+3 |
| | | |||||
| * | Add latest changes from gitlab-org/gitlab@master | GitLab Bot | 2021-02-19 | 1 | -43/+3 |
| | | |||||
| * | Add latest changes from gitlab-org/gitlab@master | GitLab Bot | 2021-02-18 | 1 | -3/+1 |
| | | |||||
| * | Add latest changes from gitlab-org/gitlab@master | GitLab Bot | 2021-02-11 | 1 | -1/+37 |
| | | |||||
| * | Add latest changes from gitlab-org/gitlab@master | GitLab Bot | 2021-02-11 | 1 | -3/+12 |
| | | |||||
| * | Add latest changes from gitlab-org/gitlab@master | GitLab Bot | 2021-02-09 | 1 | -0/+36 |
| | | |||||
| * | Add latest changes from gitlab-org/gitlab@master | GitLab Bot | 2021-02-04 | 1 | -1/+3 |
| | | |||||
| * | Add latest changes from gitlab-org/gitlab@master | GitLab Bot | 2020-12-09 | 1 | -1/+1 |
| | | |||||
| * | Add latest changes from gitlab-org/gitlab@master | GitLab Bot | 2020-11-13 | 1 | -0/+19 |
| | | |||||
| * | Add latest changes from gitlab-org/gitlab@master | GitLab Bot | 2020-08-31 | 1 | -1/+1 |
| | | |||||
| * | Add latest changes from gitlab-org/gitlab@master | GitLab Bot | 2020-08-11 | 1 | -0/+1 |
| | | |||||
| * | Add latest changes from gitlab-org/gitlab@master | GitLab Bot | 2020-07-17 | 1 | -2/+82 |
| | | |||||
| * | Add latest changes from gitlab-org/gitlab@master | GitLab Bot | 2020-06-03 | 1 | -1/+1 |
| | | |||||
| * | Add latest changes from gitlab-org/gitlab@master | GitLab Bot | 2020-05-26 | 1 | -1/+5 |
| | | |||||
| * | Add latest changes from gitlab-org/gitlab@master | GitLab Bot | 2020-04-01 | 1 | -1/+1 |
| | | |||||
| * | Add latest changes from gitlab-org/gitlab@master | GitLab Bot | 2020-01-28 | 1 | -33/+33 |
| | | |||||
| * | Add latest changes from gitlab-org/gitlab@master | GitLab Bot | 2019-11-19 | 1 | -0/+11 |
| | | |||||
| * | Add latest changes from gitlab-org/gitlab@master | GitLab Bot | 2019-11-14 | 1 | -1/+3 |
| | | |||||
| * | Add latest changes from gitlab-org/gitlab@master | GitLab Bot | 2019-10-23 | 1 | -3/+3 |
| | | |||||
| * | Add latest changes from gitlab-org/gitlab@master | GitLab Bot | 2019-10-18 | 1 | -0/+1 |
| | | |||||
| * | Merge branch 'security-2853-prevent-comments-on-private-mrs' into 'master' | GitLab Release Tools Bot | 2019-08-29 | 1 | -71/+240 |
| |\ | | | | | | | | | Ensure only authorised users can create notes on merge requests and issues See merge request gitlab/gitlabhq!3137 | ||||
| | * | Prevent unauthorised comments on merge requests | Alex Kalderimis | 2019-08-07 | 1 | -71/+240 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Prevent creating notes on inaccessible MRs This applies the notes rules at the MR scope. Rather than adding extra rules to the Project level policy, preventing :create_note here is better since it only prevents creating notes on MRs. * Prevent creating notes in inaccessible Issues without this policy, non-team-members are allowed to comment on issues even when the project has the private-issues policy set. This means that without this change, users are allowed to comment on issues that they cannot read. * Add CHANGELOG entry | ||||
| * | | Improve specs for Issues and Notes controllers63372-award-emoji-services | Luke Duncalfe | 2019-08-21 | 1 | -5/+14 |
| |/ | | | | | | This adds test that Todos are completed. https://gitlab.com/gitlab-org/gitlab-ce/issues/63372 | ||||
| * | Use NotesFinder in IssuableActions module | Patrick Derichs | 2019-08-01 | 1 | -1/+1 |
| | | | | | | | | | | | Remove project from NotesFinder constructor Add project parameter to specs Also look for methods in private scope Fix specs to match new NotesFinder constructor | ||||
| * | Cleanup usages of `JSON.parse` in specs | Peter Leitzen | 2019-07-16 | 1 | -2/+2 |
| | | | | | Prefer `json_response` where applicable. | ||||
| * | Correctly check permissions when creating snippet notes | Markus Koller | 2019-06-06 | 1 | -1/+1 |
| | | | | | | | | | | | In the Snippets::NotesController the noteable was resolved and authorized through the :snippet_id, so by passing a :target_id for a different snippet it was possible to create a note on a snippet where the user would be unauthorized to do so otherwise. This fixes the problem by ignoring the :target_id and :target_type from the request, and using the same noteable for creation and authorization. | ||||
| * | Add some frozen string to spec/**/*.rb | gfyoung | 2019-04-15 | 1 | -0/+2 |
| | | | | | | | | | | | Adds frozen string to the following: * spec/bin/**/*.rb * spec/config/**/*.rb * spec/controllers/**/*.rb xref https://gitlab.com/gitlab-org/gitlab-ce/issues/59758 | ||||
| * | Only return `commands_changes` used in frontend | Heinrich Lee Yu | 2019-03-18 | 1 | -0/+31 |
| | | | | | | When executing quick actions, this limits the `commands_changes` response to only those used by the frontend | ||||
| * | Refactor params for notes_actions | Heinrich Lee Yu | 2019-02-23 | 1 | -2/+18 |
| | | | | | | | | Removes unneeded params from permitted list This also fixes commenting on commits with a hash starting with a large number | ||||
| * | Update specs to rails5 formatblackst0ne-convert-specs-rails5-style | blackst0ne | 2018-12-19 | 1 | -44/+44 |
| | | | | | | | | | | | Updates specs to use new rails5 format. The old format: `get :show, { some: params }, { some: headers }` The new format: `get :show, params: { some: params }, headers: { some: headers }` | ||||
| * | Fix deprecation: Comparing equality between ActionController::Parameters and ↵ | Jasper Maes | 2018-12-16 | 1 | -2/+2 |
| | | | | | a Hash is deprecated | ||||
| * | Merge branch 'security-guest-comments' into 'master' | Cindy Pallares | 2018-11-28 | 1 | -27/+76 |
| | | | | | | [master]Fixed ability to comment on and edit/delete comments on locked or confidential issues See merge request gitlab/gitlabhq!2612 | ||||
| * | Resolve "Filter discussion (tab) by comments or activity in issues and merge ↵ | Oswaldo Ferreira | 2018-10-23 | 1 | -0/+31 |
| | | | | | requests" | ||||
| * | Return discussion object from NotesController#create when return_discussion ↵ | Douwe Maan | 2018-09-21 | 1 | -0/+8 |
| | | | | | param is set | ||||
| * | Use ResourceLabelEvent for tracking label changes | Jan Provaznik | 2018-09-07 | 1 | -1/+1 |
| | | |||||
| * | Changes tab VUE refactoring | Felipe Artur | 2018-06-21 | 1 | -7/+7 |
| | | |||||
| * | Replace '.team << [user, role]' with 'add_role(user)' in specs36782-replace-team-user-role-with-add_role-user-in-specs | blackst0ne | 2017-12-22 | 1 | -7/+7 |
| | | |||||
| * | Make sure NotesActions#noteable returns a Noteable in the update actiondm-notes-actions-noteable-for-update | Douwe Maan | 2017-11-16 | 1 | -0/+23 |
| | | |||||
 |
index : delta/gitlab/gitlab-ce.git | |
| gitlab.com: gitlab-org/gitlab-ce.git |
| summaryrefslogtreecommitdiff |