kotovalexarian-likes-gitlab/gitlab-org--gitlab-foss
1
0
Fork 0
Code Releases Activity
gitlab-org--gitlab-foss/spec
History
Timothy Andrew d1488268b2 Simplify authentication logic in the v4 users API for !12445. 
- Rather than using an explicit check to turn off authentication for the
  `/users` endpoint, simply call `authenticate_non_get!`.

- All `GET` endpoints we wish to restrict already call
  `authenticated_as_admin!`, and so remain inacessible to anonymous users.

- This _does_ open up the `/users/:id` endpoint to anonymous access. It contains
  the same access check that `/users` users, and so is safe for use here.

- More context: https://gitlab.com/gitlab-org/gitlab-ce/merge_requests/12445#note_34031323
2017-07-04 12:19:48 +00:00
..
bin
config
controllers Merge branch 'hb-fix-abuse-report-on-stale-user-profile' into 'master' 2017-06-29 13:23:09 +00:00
db/production Handle case where GITLAB_PROMETHEUS_METRICS_ENABLED is non boolean value by defaulting to false 2017-06-06 13:16:55 +02:00
factories Merge remote-tracking branch 'upstream/master' into 28717-additional-metrics-review-branch 2017-06-22 15:05:52 +02:00
features Merge branch '34502-gitlab-git-hook-should-set-the-gl_repository-environment-variable' into 'master' 2017-06-30 08:53:14 +00:00
finders Merge branch 'add-since-and-until-params-to-issuables' into 'master' 2017-06-19 12:13:27 +00:00
fixtures Merge remote-tracking branch 'upstream/master' into 28717-additional-metrics-review-branch 2017-06-22 15:05:52 +02:00
helpers Strip trailing whitespace in relative submodule URL 2017-06-28 14:01:49 -05:00
initializers Instrument MergeRequestDiff#load_commits 2017-06-14 12:01:38 +01:00
javascripts Merge branch 'dm-merge-request-creations-controller' into 'master' 2017-06-29 11:57:06 +00:00
lib Set the GL_REPOSITORY env variable on Gitlab::Git::Hook 2017-06-29 15:22:40 -04:00
mailers Enable Style/DotPosition Rubocop 👮 2017-06-21 13:48:12 +00:00
migrations Merge branch 'master' into fix/gb/improve-updating-column-in-batches-helper 2017-06-22 12:37:38 +02:00
models Set the GL_REPOSITORY env variable on Gitlab::Git::Hook 2017-06-29 15:22:40 -04:00
policies Implement review comments for !12445 from @jneen. 2017-07-03 05:14:00 +00:00
presenters Enable Style/DotPosition Rubocop 👮 2017-06-21 13:48:12 +00:00
requests Simplify authentication logic in the v4 users API for !12445. 2017-07-04 12:19:48 +00:00
routing Split up MergeRequestsController 2017-06-28 18:17:44 -05:00
rubocop/cop Enable Style/DotPosition Rubocop 👮 2017-06-21 13:48:12 +00:00
serializers Correct RSpec/SingleLineHook cop offenses 2017-06-14 13:18:56 -05:00
services Set the GL_REPOSITORY env variable on Gitlab::Git::Hook 2017-06-29 15:22:40 -04:00
sidekiq/cron
support Merge branch 'fix-sidebar-showing-mobile-merge-requests' into 'master' 2017-06-30 07:07:18 +00:00
tasks Enable Style/DotPosition Rubocop 👮 2017-06-21 13:48:12 +00:00
unicorn Increase unicorn test boot timeout to 5 minutes 2017-06-08 18:35:55 +02:00
uploaders Fix filename method of GitlabUploader to return always real filename 2017-06-13 00:37:12 +02:00
validators Rebuild the dynamic path before validating it 2017-06-21 16:09:35 +02:00
views Split up MergeRequestsController 2017-06-28 18:17:44 -05:00
workers Use gl_repository exclusively as identifier on post-receive 2017-06-27 19:20:20 -04:00
factories_spec.rb Lint our factories creation in addition to their build 2017-06-02 19:06:50 +02:00
rails_helper.rb
rake_helper.rb
simplecov_env.rb
spec_helper.rb Include Devise::Test::IntegrationHelpers for all feature specs 2017-06-19 18:59:03 -05:00