Read about our upcoming Code of Conduct on this issue

  1. 10 May, 2017 1 commit
  2. 04 May, 2017 1 commit
  3. 25 Apr, 2017 1 commit
    • Timothy Andrew's avatar
      Don't display the `is_admin?` flag for user API responses. · ea72aad82e30
      Timothy Andrew authored
      - To prevent an attacker from enumerating the `/users` API to get a list of all
        the admins.
      
      - Display the `is_admin?` flag wherever we display the `private_token` - at the
        moment, there are two instances:
      
        - When an admin uses `sudo` to view the `/user` endpoint
        - When logging in using the `/session` endpoint
      ea72aad82e30
  4. 14 Apr, 2017 2 commits
  5. 09 Apr, 2017 1 commit
  6. 04 Apr, 2017 1 commit
  7. 03 Apr, 2017 3 commits
  8. 02 Apr, 2017 1 commit
  9. 20 Mar, 2017 2 commits
    • Tomasz Maczukin's avatar
      Send only defined dependencies · bef06efb327e
      Tomasz Maczukin authored
      In APIv1 we've been sending all jobs from previous stages and
      a `dependencies` list with names of jobs that user want to download
      artifacts from. This was selected on Runners side.
      
      In APIv1 we've planned to send only jobs that were defined (if any; and
      all previous jobs by default). However I've missed the fact that
      it was Runner who selected jobs, not GitLab. And now current version
      of APIV4 sends all jobs everytime.
      
      This commit fixes this. If user will define `dependencies` in his job,
      then GitLab will send only selected jobs.
      bef06efb327e
    • Tomasz Maczukin's avatar
      Send token of depenent job · 5b4030b44bdb
      Tomasz Maczukin authored
      Artifacts download for authorization is using a job token of job to
      which the artifact belongs. In APIv1 the token was sent with dependent
      jobs details and in APIv4 it was designed to also contain it.
      
      However I forgot about this parameter while working on
      `/api/v4/jobs/request` endpoint.
      
      This commit adds a missing parameter which is required for APIv4 to work
      properly.
      5b4030b44bdb
  10. 06 Mar, 2017 5 commits
  11. 05 Mar, 2017 3 commits
  12. 02 Mar, 2017 7 commits
  13. 01 Mar, 2017 1 commit
    • James Lopez's avatar
      Update occurrences of MWBS to MWPS · 060ee4e63884
      James Lopez authored
       Rename column in the database
       Rename fields related to import/export feature
       Rename API endpoints
       Rename documentation links
       Rename the rest of occurrences in the code
       Replace the images that contain the words "build succeeds" and docs referencing to them
       Make sure pipeline is green and nothing is missing.
      
      updated doc images
      
      renamed only_allow_merge_if_build_succeeds in projects and fixed references
      
      more updates
      
      fix some spec failures
      
      fix rubocop offences
      
      fix v3 api spec
      
      fix MR  specs
      
      fixed issues with partials
      
      fix MR spec
      
      fix alignment
      
      add missing v3 to v4 doc
      
      wip - refactor v3 endpoints
      
      fix specs
      
      fix a few typos
      
      fix project specs
      
      copy entities fully to V3
      
      fix  entity error
      
      more fixes
      
      fix failing specs
      
      fixed missing entities in V3 API
      
      remove comment
      
      updated code based on feedback
      
      typo
      
      fix spec
      060ee4e63884
  14. 28 Feb, 2017 3 commits
  15. 23 Feb, 2017 2 commits
  16. 22 Feb, 2017 1 commit
  17. 21 Feb, 2017 1 commit
  18. 17 Feb, 2017 1 commit
  19. 16 Feb, 2017 1 commit
  20. 15 Feb, 2017 2 commits