Skip to content

Allow Project Owners to let users set Issues and Notes iid and created_at for API-based imports

The standard GitLab behaviour is to restrict setting this fields to Project Owners and instance Administrators. However, external importers such as Heptapod API Import have to act as the target user, hence are blocked by this.

As this is a temporary measure meant for initial imports, it is controlled by setting the proper import_type on the Project, which is itself exposed as a new param in the API.

For comparison, note that the (builtin) Jira importer does set import_type to jira.

(An alternative would have been to allow the Project Owner to create issues on behalf of users, which is IMHO more problematic, both technically and from a security standpoint).

Merge request reports