Robert Speicher 3e4b45fc21 Only include the user's ID in the time_spent command's update hash ... Previously, this would include the entire User record in the update hash, which was rendered in the response using `to_json`, erroneously exposing every attribute of that record, including their (now removed) private token. Now we only include the user ID, and perform the lookup on-demand.		2017-12-19 15:45:08 -06:00
..
award_emoji.rb
boards.rb
branches.rb	Improve performance of the /projects/:id/repository/branches API endpoint	2017-11-06 13:31:23 +01:00
broadcast_messages.rb
builds.rb	Add doc. Fix spec. Add erase_build in protected_ref rule	2017-11-07 02:47:05 +09:00
commits.rb	Adds Rubocop rule for line break after guard clause	2017-11-16 17:58:29 +01:00
deploy_keys.rb
deployments.rb
entities.rb	Allow password authentication to be disabled entirely	2017-11-23 13:16:14 +00:00
environments.rb
files.rb
groups.rb
helpers.rb
issues.rb
labels.rb
members.rb
merge_request_diffs.rb
merge_requests.rb
milestones.rb
notes.rb
pipelines.rb
project_hooks.rb
project_snippets.rb
projects.rb
repositories.rb	Merge branch 'sha-handling' into 'master'	2017-10-16 15:14:42 +00:00
runners.rb	Adds Rubocop rule for line break after guard clause	2017-11-16 17:58:29 +01:00
services.rb
settings.rb	Allow password authentication to be disabled entirely	2017-11-23 13:16:14 +00:00
snippets.rb	Adds Rubocop rule for line break after guard clause	2017-11-16 17:58:29 +01:00
subscriptions.rb
system_hooks.rb
tags.rb
templates.rb
time_tracking_endpoints.rb	Only include the user's ID in the time_spent command's update hash	2017-12-19 15:45:08 -06:00
todos.rb
triggers.rb
users.rb
variables.rb