gitlab-org--gitlab-foss/spec/policies
Bob Van Landuyt d801dd1774 Allows `access_(git|api)` to anonymous users
The `access_git` and `access_api` were currently never checked for
anonymous users. And they would also be allowed access:

  An anonymous user can clone and pull from a public repo

  An anonymous user can request public information from the API

So the policy didn't actually reflect what we were enforcing.
2018-05-10 17:02:27 +02:00
..
application_setting Allow a user to accept/decline terms 2018-05-04 13:54:43 +02:00
ci Hide pipeline schedule 'take ownership' for current owner 2018-02-01 17:25:13 +00:00
clusters specs for policies. 2017-10-31 00:29:48 +09:00
base_policy_spec.rb Remove superfluous lib: true, type: redis, service: true, models: true, services: true, no_db: true, api: true 2017-07-27 14:31:53 +02:00
deploy_key_policy_spec.rb Remove superfluous lib: true, type: redis, service: true, models: true, services: true, no_db: true, api: true 2017-07-27 14:31:53 +02:00
deploy_token_policy_spec.rb Increase test suite around deploy tokens behavior 2018-04-06 21:20:17 -05:00
environment_policy_spec.rb Ensure all project factories use `:repository` trait or `:empty_project` 2017-08-01 14:51:52 -04:00
global_policy_spec.rb Allows `access_(git|api)` to anonymous users 2018-05-10 17:02:27 +02:00
group_policy_spec.rb Fix users not seeing labels from private groups when being a member of a child project 2018-04-23 13:56:38 -03:00
issuable_policy_spec.rb Port `read_cross_project` ability from EE 2018-02-22 17:11:36 +01:00
issue_policy_spec.rb Port `read_cross_project` ability from EE 2018-02-22 17:11:36 +01:00
namespace_policy_spec.rb Update policies unit tests 2017-11-27 23:06:43 +01:00
note_policy_spec.rb Remove edit_note and update_note abilities in favor of admin_note 2018-04-10 15:46:20 +02:00
personal_snippet_policy_spec.rb Prevent awarding emoji when a project is archived 2018-04-11 10:51:43 +02:00
project_policy_spec.rb Prevent awarding emoji when a project is archived 2018-04-11 10:51:43 +02:00
project_snippet_policy_spec.rb Merge branch 'security-10-4-25223-snippets-finder-doesnt-obey-feature-visibility' into 'security-10-4' 2018-02-09 12:04:05 -06:00
protected_branch_policy_spec.rb Revert exploratory branch restriction policy 2018-03-26 10:29:53 +01:00
user_policy_spec.rb Make the user dropdown reusable 2018-05-04 13:52:55 +02:00