delta/gitlab/gitlab-ce.git/lib/api/projects.rb, branch fix/serialized-commit-path

Add more storage statistics

2016-12-21T15:39:49+00:00

This adds counters for build artifacts and LFS objects, and moves
the preexisting repository_size and commit_count from the projects
table into a new project_statistics table.

The counters are displayed in the administration area for projects
and groups, and also available through the API for admins (on */all)
and normal users (on */owned)

The statistics are updated through ProjectCacheWorker, which can now
do more granular updates with the new :statistics argument.

Consistently use current_user in API entities

2016-12-21T15:36:53+00:00

Allow public access to some Project API endpoints

2016-12-01T15:39:42+00:00

Signed-off-by: Rémy Coutable

Grapify the projects API

2016-11-28T20:01:43+00:00

API: Introduce `#find_project!` which also check access permission

2016-11-24T13:40:35+00:00

Signed-off-by: Rémy Coutable

API: Add endpoint to delete a group share

2016-11-23T11:53:37+00:00

Add setting to only allow merge requests to be merged when all discussions are resolved

2016-11-04T13:58:40+00:00

Signed-off-by: Rémy Coutable

Merge branch 'api-fix-project-group-sharing' into 'security'

2016-10-11T18:36:26+00:00

API: Share projects only with groups current_user can access

Aims to address the issues here: https://gitlab.com/gitlab-org/gitlab-ce/issues/23004

* Projects can be shared with non-existent groups
* Projects can be shared with groups that the current user does not have access to read

Concerns:

The new implementation of the API endpoint allows projects to be shared with a larger range of groups than can be done via the web UI.

The form for sharing a project with a group uses the following API endpoint to index the available groups: https://gitlab.com/gitlab-org/gitlab-ce/blob/494269fc92f61098ee6bd635a0426129ce2c5456/lib/api/groups.rb#L17. The groups indexed in the web form will only be those groups that the user is currently a member of.

The new implementation allows projects to be shared with any group that the authenticated user has access to view. This widens the range of groups to those that are public and internal.

See merge request !2005

Signed-off-by: Rémy Coutable

Tidy up project list actions

2016-10-05T11:13:58+00:00

api: add /projects/visible API endpoint

2016-10-04T16:23:18+00:00

FIxes #19361, #3119.