kotovalexarian-likes-gitlab
/
gitlab-org--gitlab-foss
1
0
Fork 0
Code Releases Activity
gitlab-org--gitlab-foss/spec/models/concerns
History
Douwe Maan 79d94b1679 Merge branch '22481-honour-issue-visibility-for-groups' into 'security' 
Honour issue and merge request visibility in their respective finders

This MR fixes a security issue with the IssuesFinder and MergeRequestFinder where they would return items the user did not have permission to see. This was most visible on the issue and merge requests page for a group containing projects that had set their issues or merge requests to "private".

Closes https://gitlab.com/gitlab-org/gitlab-ce/issues/22481

See merge request !2000
 		2016-11-09 12:24:13 +01:00
..
access_requestable_spec.rb Exclude requesters from Project#members, Group#members and User#members 2016-07-01 17:44:46 +02:00
awardable_spec.rb Order award tooltips by their created_at date 2016-09-01 08:40:10 +10:00
cache_markdown_field_spec.rb Add RTL support to markdown renderer 2016-10-16 17:47:48 +03:30
case_sensitivity_spec.rb
…
expirable_spec.rb Differentiate the expire from leave event 2016-10-20 00:26:45 +00:00
faster_cache_keys_spec.rb Added concern for a faster "cache_key" method 2016-08-08 16:49:22 +02:00
has_status_spec.rb Fix tests. Check 'success' first (default status) 2016-10-03 19:35:53 +08:00
issuable_spec.rb Merge branch '22481-honour-issue-visibility-for-groups' into 'security' 2016-11-09 12:24:13 +01:00
mentionable_spec.rb Simplify Mentionable concern instance methods 2016-10-04 10:45:48 +02:00
milestoneish_spec.rb adds second batch of tests changed to active tense 2016-08-09 15:11:39 +01:00
participable_spec.rb Cache Participable#participants in instance variable 2016-06-21 12:54:12 +02:00
project_features_compatibility_spec.rb Fix project features default values 2016-11-01 11:03:56 -02:00
spammable_spec.rb Further refactor and syntax fixes. 2016-08-15 17:20:57 -05:00
strip_attribute_spec.rb Enable Style/EmptyLines cop, remove redundant ones 2016-07-01 21:56:17 +02:00
subscribable_spec.rb Add API endpoints for un/subscribing from/to a label 2016-05-12 22:48:09 +02:00
token_authenticatable_spec.rb adds second batch of tests changed to active tense 2016-08-09 15:11:39 +01:00