Robert Speicher 3e4b45fc21 Only include the user's ID in the time_spent command's update hash ... Previously, this would include the entire User record in the update hash, which was rendered in the response using `to_json`, erroneously exposing every attribute of that record, including their (now removed) private token. Now we only include the user ID, and perform the lookup on-demand.		2017-12-19 15:45:08 -06:00
..
scopes	Refactor have_http_status into have_gitlab_http_status in the specs	2017-10-20 10:13:18 +02:00
v3	Only include the user's ID in the time_spent command's update hash	2017-12-19 15:45:08 -06:00
issues_resolving_discussions_shared_examples.rb	Refactor have_http_status into have_gitlab_http_status in the specs	2017-10-20 10:13:18 +02:00
members_shared_examples.rb	Refactor have_http_status into have_gitlab_http_status in the specs	2017-10-20 10:13:18 +02:00
milestones_shared_examples.rb	Refactor have_http_status into have_gitlab_http_status in the specs	2017-10-20 10:13:18 +02:00
repositories_shared_context.rb
schema_matcher.rb	Backport to CE for:	2017-08-04 21:45:14 +08:00
time_tracking_shared_examples.rb	Only include the user's ID in the time_spent command's update hash	2017-12-19 15:45:08 -06:00