91f43587a8
Prevent private group disclosure via parent_id See merge request !2077
40 lines
1.7 KiB
Text
40 lines
1.7 KiB
Text
- parent = GroupFinder.new(current_user).execute(id: params[:parent_id] || @group.parent_id)
|
|
- group_path = root_url
|
|
- group_path << parent.full_path + '/' if parent
|
|
- if @group.persisted?
|
|
.form-group
|
|
= f.label :name, class: 'control-label' do
|
|
Group name
|
|
.col-sm-10
|
|
= f.text_field :name, placeholder: 'open-source', class: 'form-control'
|
|
|
|
.form-group
|
|
= f.label :path, class: 'control-label' do
|
|
Group path
|
|
.col-sm-10
|
|
.input-group.gl-field-error-anchor
|
|
.group-root-path.input-group-addon.has-tooltip{ title: group_path, :'data-placement' => 'bottom' }
|
|
%span>= root_url
|
|
- if parent
|
|
%strong= parent.full_path + '/'
|
|
= f.text_field :path, placeholder: 'open-source', class: 'form-control',
|
|
autofocus: local_assigns[:autofocus] || false, required: true,
|
|
pattern: Gitlab::Regex::NAMESPACE_REGEX_STR_JS,
|
|
title: 'Please choose a group name with no special characters.',
|
|
"data-bind-in" => "#{'create_chat_team' if Gitlab.config.mattermost.enabled}"
|
|
- if parent
|
|
= f.hidden_field :parent_id, value: parent.id
|
|
|
|
- if @group.persisted?
|
|
.alert.alert-warning.prepend-top-10
|
|
%ul
|
|
%li Changing group path can have unintended side effects.
|
|
%li Renaming group path will rename directory for all related projects
|
|
%li It will change web url for access group and group projects.
|
|
%li It will change the git path to repositories under this group.
|
|
|
|
.form-group.group-description-holder
|
|
= f.label :description, class: 'control-label'
|
|
.col-sm-10
|
|
= f.text_area :description, maxlength: 250,
|
|
class: 'form-control js-gfm-input', rows: 4
|