kotovalexarian-likes-gitlab/gitlab-org--gitlab-foss
1
0
Fork 0
Code Releases Activity
gitlab-org--gitlab-foss/spec/models
History
Krasimir Angelov 241ba4be79 Allow guests users to access project releases 
This is step one of resolving
https://gitlab.com/gitlab-org/gitlab-ce/issues/56838.

Here is what changed:
- Revert the security fix from bdee9e8412.
- Do not leak repository information (tag name, commit) to guests in API
responses.
- Do not include links to source code in API responses for users that do
not have download_code access.
- Show Releases in sidebar for guests.
- Do not display links to source code under Assets for users that do not
have download_code access.

GET ':id/releases/:tag_name' still do not allow guests to access
releases. This is to prevent guessing tag existence.
2019-05-03 13:29:20 +00:00
..
application_setting Add # frozen_string_literal to spec/models 2019-04-01 14:37:54 +13:00
badges Autocorrect with RSpec/ExampleWording cop 2019-04-05 08:43:27 +00:00
blob_viewer Add # frozen_string_literal to spec/models 2019-04-01 14:37:54 +13:00
ci Adds a way to start multiple manual jobs in stage 2019-05-02 18:27:35 +00:00
clusters Add gitlab-managed option to clusters form 2019-05-03 01:05:53 +00:00
concerns Move Contribution Analytics related spec in spec/features/groups/group_page_with_external_authorization_service_spec to EE 2019-04-09 15:38:58 +00:00
conversational_development_index Add # frozen_string_literal to spec/models 2019-04-01 14:37:54 +13:00
cycle_analytics Add # frozen_string_literal to spec/models 2019-04-01 14:37:54 +13:00
diff_viewer Add # frozen_string_literal to spec/models 2019-04-01 14:37:54 +13:00
error_tracking Handle missing keys in sentry api response 2019-03-29 14:53:40 +00:00
hooks Add # frozen_string_literal to spec/models 2019-04-01 14:37:54 +13:00
issue Add # frozen_string_literal to spec/models 2019-04-01 14:37:54 +13:00
members Add # frozen_string_literal to spec/models 2019-04-01 14:37:54 +13:00
merge_request Add # frozen_string_literal to spec/models 2019-04-01 14:37:54 +13:00
network Autocorrect with RSpec/ExampleWording cop 2019-04-05 08:43:27 +00:00
postgresql
project_services Update deployment chat message notification 2019-05-02 16:07:26 +00:00
protected_branch Add # frozen_string_literal to spec/models 2019-04-01 14:37:54 +13:00
releases Add support for FTP assets for releases 2019-02-13 10:51:12 +00:00
serverless Add Knative metrics to Prometheus 2019-04-06 02:02:39 +00:00
uploads
ability_spec.rb Add # frozen_string_literal to spec/models 2019-04-01 14:37:54 +13:00
abuse_report_spec.rb Add # frozen_string_literal to spec/models 2019-04-01 14:37:54 +13:00
active_session_spec.rb Add # frozen_string_literal to spec/models 2019-04-01 14:37:54 +13:00
appearance_spec.rb Add # frozen_string_literal to spec/models 2019-04-01 14:37:54 +13:00
application_record_spec.rb Add ApplicationRecord#safe_ensure_unique method 2019-04-12 12:19:47 +08:00
application_setting_spec.rb Add Let's Encrypt application settings 2019-04-27 04:38:01 +00:00
award_emoji_spec.rb Add # frozen_string_literal to spec/models 2019-04-01 14:37:54 +13:00
badge_spec.rb Autocorrect with RSpec/ExampleWording cop 2019-04-05 08:43:27 +00:00
blob_spec.rb Ensure that we only request blobs in one batch 2019-04-24 14:13:32 +01:00
board_group_recent_visit_spec.rb CE-port for 7714-view-recent-boards 2019-03-01 19:47:52 +08:00
board_project_recent_visit_spec.rb CE-port for 7714-view-recent-boards 2019-03-01 19:47:52 +08:00
board_spec.rb Add # frozen_string_literal to spec/models 2019-04-01 14:37:54 +13:00
broadcast_message_spec.rb Add # frozen_string_literal to spec/models 2019-04-01 14:37:54 +13:00
chat_name_spec.rb Add # frozen_string_literal to spec/models 2019-04-01 14:37:54 +13:00
chat_team_spec.rb Add # frozen_string_literal to spec/models 2019-04-01 14:37:54 +13:00
commit_collection_spec.rb Backport splitting approval changes from CE 2019-04-02 11:01:07 +00:00
commit_range_spec.rb Add # frozen_string_literal to spec/models 2019-04-01 14:37:54 +13:00
commit_spec.rb Add # frozen_string_literal to spec/models 2019-04-01 14:37:54 +13:00
commit_status_spec.rb Remove deprecated uses of attribute_changed? 2019-04-30 15:24:25 +08:00
compare_spec.rb Add # frozen_string_literal to spec/models 2019-04-01 14:37:54 +13:00
container_repository_spec.rb Add # frozen_string_literal to spec/models 2019-04-01 14:37:54 +13:00
cycle_analytics_spec.rb Add # frozen_string_literal to spec/models 2019-04-01 14:37:54 +13:00
deploy_key_spec.rb Add # frozen_string_literal to spec/models 2019-04-01 14:37:54 +13:00
deploy_keys_project_spec.rb Add # frozen_string_literal to spec/models 2019-04-01 14:37:54 +13:00
deploy_token_spec.rb Autocorrect with RSpec/ExampleWording cop 2019-04-05 08:43:27 +00:00
deployment_spec.rb Fix deployments for Kubernetes service templates 2019-04-29 07:57:08 +10:00
diff_discussion_spec.rb Add # frozen_string_literal to spec/models 2019-04-01 14:37:54 +13:00
diff_note_spec.rb Add # frozen_string_literal to spec/models 2019-04-01 14:37:54 +13:00
discussion_spec.rb Add # frozen_string_literal to spec/models 2019-04-01 14:37:54 +13:00
email_spec.rb Add # frozen_string_literal to spec/models 2019-04-01 14:37:54 +13:00
environment_spec.rb Specify time window for additional metrics api 2019-04-03 17:21:56 +08:00
environment_status_spec.rb Add # frozen_string_literal to spec/models 2019-04-01 14:37:54 +13:00
event_collection_spec.rb Add # frozen_string_literal to spec/models 2019-04-01 14:37:54 +13:00
event_spec.rb [CE] Support multiple assignees for merge requests 2019-04-08 18:40:00 -03:00
external_issue_spec.rb Add # frozen_string_literal to spec/models 2019-04-01 14:37:54 +13:00
fork_network_member_spec.rb Add # frozen_string_literal to spec/models 2019-04-01 14:37:54 +13:00
fork_network_spec.rb Add # frozen_string_literal to spec/models 2019-04-01 14:37:54 +13:00
generic_commit_status_spec.rb Add # frozen_string_literal to spec/models 2019-04-01 14:37:54 +13:00
global_milestone_spec.rb Add # frozen_string_literal to spec/models 2019-04-01 14:37:54 +13:00
gpg_key_spec.rb Add # frozen_string_literal to spec/models 2019-04-01 14:37:54 +13:00
gpg_key_subkey_spec.rb Add # frozen_string_literal to spec/models 2019-04-01 14:37:54 +13:00
gpg_signature_spec.rb Add # frozen_string_literal to spec/models 2019-04-01 14:37:54 +13:00
group_custom_attribute_spec.rb Add # frozen_string_literal to spec/models 2019-04-01 14:37:54 +13:00
group_label_spec.rb Add # frozen_string_literal to spec/models 2019-04-01 14:37:54 +13:00
group_milestone_spec.rb Add # frozen_string_literal to spec/models 2019-04-01 14:37:54 +13:00
group_spec.rb Add part of needed code 2019-04-05 18:49:46 +00:00
guest_spec.rb Add # frozen_string_literal to spec/models 2019-04-01 14:37:54 +13:00
identity_spec.rb Add # frozen_string_literal to spec/models 2019-04-01 14:37:54 +13:00
import_export_upload_spec.rb Add # frozen_string_literal to spec/models 2019-04-01 14:37:54 +13:00
instance_configuration_spec.rb Display maximum artifact size from runtime config 2019-04-03 21:02:11 +02:00
internal_id_spec.rb Always use internal ID tables in development and production 2019-04-22 10:48:16 -07:00
issue_collection_spec.rb Add # frozen_string_literal to spec/models 2019-04-01 14:37:54 +13:00
issue_spec.rb Move Contribution Analytics related spec in spec/features/groups/group_page_with_external_authorization_service_spec to EE 2019-04-09 15:38:58 +00:00
key_spec.rb Add # frozen_string_literal to spec/models 2019-04-01 14:37:54 +13:00
label_link_spec.rb Add # frozen_string_literal to spec/models 2019-04-01 14:37:54 +13:00
label_note_spec.rb Enable the Layout/ExtraSpacing cop 2019-01-24 13:05:45 +01:00
label_priority_spec.rb Add # frozen_string_literal to spec/models 2019-04-01 14:37:54 +13:00
label_spec.rb Add # frozen_string_literal to spec/models 2019-04-01 14:37:54 +13:00
legacy_diff_discussion_spec.rb Add # frozen_string_literal to spec/models 2019-04-01 14:37:54 +13:00
lfs_download_object_spec.rb Add # frozen_string_literal to spec/models 2019-04-01 14:37:54 +13:00
lfs_file_lock_spec.rb Add # frozen_string_literal to spec/models 2019-04-01 14:37:54 +13:00
lfs_object_spec.rb Add # frozen_string_literal to spec/models 2019-04-01 14:37:54 +13:00
lfs_objects_project_spec.rb Add # frozen_string_literal to spec/models 2019-04-01 14:37:54 +13:00
license_template_spec.rb Fix license_template_spec to not modify String 2019-04-01 14:37:54 +13:00
list_spec.rb Add # frozen_string_literal to spec/models 2019-04-01 14:37:54 +13:00
member_spec.rb Allow a member to have an access level equal to parent group 2019-04-30 13:31:51 -07:00
merge_request_diff_commit_spec.rb Add # frozen_string_literal to spec/models 2019-04-01 14:37:54 +13:00
merge_request_diff_file_spec.rb Add # frozen_string_literal to spec/models 2019-04-01 14:37:54 +13:00
merge_request_diff_spec.rb Add # frozen_string_literal to spec/models 2019-04-01 14:37:54 +13:00
merge_request_spec.rb Merge branch 'add-project-level-config-for-merge-train-ce' into 'master' 2019-05-01 10:14:27 +00:00
milestone_spec.rb Add # frozen_string_literal to spec/models 2019-04-01 14:37:54 +13:00
namespace_spec.rb Add packages_size to ProjectStatistics 2019-05-02 16:04:15 +00:00
note_diff_file_spec.rb Add # frozen_string_literal to spec/models 2019-04-01 14:37:54 +13:00
note_spec.rb Add # frozen_string_literal to spec/models 2019-04-01 14:37:54 +13:00
notification_recipient_spec.rb Stop sending emails to users who can't read commit 2019-04-16 17:26:49 +08:00
notification_setting_spec.rb Add # frozen_string_literal to spec/models 2019-04-01 14:37:54 +13:00
pages_domain_spec.rb Remove disabled pages domains 2019-04-30 12:05:54 +00:00
personal_access_token_spec.rb Add # frozen_string_literal to spec/models 2019-04-01 14:37:54 +13:00
pool_repository_spec.rb Fix wrong use of ActiveRecord in PoolRepository 2019-04-20 13:27:53 +00:00
programming_language_spec.rb Add # frozen_string_literal to spec/models 2019-04-01 14:37:54 +13:00
project_authorization_spec.rb Add # frozen_string_literal to spec/models 2019-04-01 14:37:54 +13:00
project_auto_devops_spec.rb Autocorrect with RSpec/ExampleWording cop 2019-04-05 08:43:27 +00:00
project_ci_cd_setting_spec.rb
project_custom_attribute_spec.rb Add # frozen_string_literal to spec/models 2019-04-01 14:37:54 +13:00
project_daily_statistic_spec.rb Add project http fetch statistics API 2019-02-27 11:52:35 +01:00
project_deploy_token_spec.rb Add # frozen_string_literal to spec/models 2019-04-01 14:37:54 +13:00
project_feature_spec.rb Add # frozen_string_literal to spec/models 2019-04-01 14:37:54 +13:00
project_group_link_spec.rb Add # frozen_string_literal to spec/models 2019-04-01 14:37:54 +13:00
project_import_data_spec.rb Add clear_credentials method to ProjectImportData 2019-01-14 11:45:46 -08:00
project_import_state_spec.rb Add # frozen_string_literal to spec/models 2019-04-01 14:37:54 +13:00
project_label_spec.rb Add # frozen_string_literal to spec/models 2019-04-01 14:37:54 +13:00
project_metrics_setting_spec.rb Add ProjectMetricsDashboardSetting model and table 2019-04-26 17:23:26 +00:00
project_repository_spec.rb
project_snippet_spec.rb Add # frozen_string_literal to spec/models 2019-04-01 14:37:54 +13:00
project_spec.rb Fix wrong use of ActiveRecord in PoolRepository 2019-04-20 13:27:53 +00:00
project_statistics_spec.rb Add packages_size to ProjectStatistics 2019-05-02 16:04:15 +00:00
project_team_spec.rb [CE] Reduce diff with EE in spec/models/project_team_spec.rb 2019-04-02 10:21:35 +02:00
project_wiki_spec.rb Added list_pages method to avoid loading all wiki pages content 2019-04-25 04:19:07 +00:00
prometheus_metric_spec.rb Fix and document an RSpec::Parameterized::TableSyntax edge-case 2019-02-20 19:51:26 +01:00
protectable_dropdown_spec.rb Add # frozen_string_literal to spec/models 2019-04-01 14:37:54 +13:00
protected_branch_spec.rb Add # frozen_string_literal to spec/models 2019-04-01 14:37:54 +13:00
protected_tag_spec.rb Add # frozen_string_literal to spec/models 2019-04-01 14:37:54 +13:00
push_event_payload_spec.rb Add # frozen_string_literal to spec/models 2019-04-01 14:37:54 +13:00
push_event_spec.rb Add # frozen_string_literal to spec/models 2019-04-01 14:37:54 +13:00
redirect_route_spec.rb Add # frozen_string_literal to spec/models 2019-04-01 14:37:54 +13:00
release_spec.rb Allow guests users to access project releases 2019-05-03 13:29:20 +00:00
remote_mirror_spec.rb Autocorrect with RSpec/ExampleWording cop 2019-04-05 08:43:27 +00:00
repository_language_spec.rb Add # frozen_string_literal to spec/models 2019-04-01 14:37:54 +13:00
repository_spec.rb Add support for two-step Gitaly Rebase RPC 2019-05-02 17:30:07 +00:00
resource_label_event_spec.rb Add local markdown version 2019-02-06 19:46:59 +01:00
route_spec.rb Add # frozen_string_literal to spec/models 2019-04-01 14:37:54 +13:00
sent_notification_spec.rb Add # frozen_string_literal to spec/models 2019-04-01 14:37:54 +13:00
service_spec.rb Autocorrect with RSpec/ExampleWording cop 2019-04-05 08:43:27 +00:00
shard_spec.rb
snippet_blob_spec.rb Add # frozen_string_literal to spec/models 2019-04-01 14:37:54 +13:00
snippet_spec.rb Add # frozen_string_literal to spec/models 2019-04-01 14:37:54 +13:00
spam_log_spec.rb Add # frozen_string_literal to spec/models 2019-04-01 14:37:54 +13:00
ssh_host_key_spec.rb Add # frozen_string_literal to spec/models 2019-04-01 14:37:54 +13:00
subscription_spec.rb Add # frozen_string_literal to spec/models 2019-04-01 14:37:54 +13:00
suggestion_spec.rb Fixed test specs 2019-04-04 13:08:34 +00:00
system_note_metadata_spec.rb Add # frozen_string_literal to spec/models 2019-04-01 14:37:54 +13:00
term_agreement_spec.rb Add # frozen_string_literal to spec/models 2019-04-01 14:37:54 +13:00
timelog_spec.rb Add # frozen_string_literal to spec/models 2019-04-01 14:37:54 +13:00
todo_spec.rb Add # frozen_string_literal to spec/models 2019-04-01 14:37:54 +13:00
tree_spec.rb Add # frozen_string_literal to spec/models 2019-04-01 14:37:54 +13:00
trending_project_spec.rb Add # frozen_string_literal to spec/models 2019-04-01 14:37:54 +13:00
upload_spec.rb Add # frozen_string_literal to spec/models 2019-04-01 14:37:54 +13:00
user_agent_detail_spec.rb Add # frozen_string_literal to spec/models 2019-04-01 14:37:54 +13:00
user_callout_spec.rb Add # frozen_string_literal to spec/models 2019-04-01 14:37:54 +13:00
user_custom_attribute_spec.rb Add # frozen_string_literal to spec/models 2019-04-01 14:37:54 +13:00
user_interacted_project_spec.rb Add # frozen_string_literal to spec/models 2019-04-01 14:37:54 +13:00
user_preference_spec.rb Save sorting preference for Issues/MRs in BE 2019-01-28 12:48:05 -06:00
user_spec.rb [CE] Support multiple assignees for merge requests 2019-04-08 18:40:00 -03:00
user_status_spec.rb
wiki_directory_spec.rb Add # frozen_string_literal to spec/models 2019-04-01 14:37:54 +13:00
wiki_page_spec.rb Added list_pages method to avoid loading all wiki pages content 2019-04-25 04:19:07 +00:00