delta/gitlab/gitlab-ce.git/lib/api/projects.rb, branch grapify-notes-api gitlab.com: gitlab-org/gitlab-ce.git Add setting to only allow merge requests to be merged when all discussions are resolved 2016-11-04T13:58:40+00:00 Rodolfo Santos rodolfoasantos@gmail.com 2016-09-16T11:02:42+00:00 1db9f826c16053e32a1d234bf40b2ca399779cdf Signed-off-by: Rémy Coutable <remy@rymai.me> 
Signed-off-by: Rémy Coutable <remy@rymai.me>
Merge branch 'api-fix-project-group-sharing' into 'security' 2016-10-11T18:36:26+00:00 Rémy Coutable remy@gitlab.com 2016-10-11T10:20:35+00:00 670b2eb5c05a721f810a5b248612cadde0eaf2ce API: Share projects only with groups current_user can access Aims to address the issues here: https://gitlab.com/gitlab-org/gitlab-ce/issues/23004 * Projects can be shared with non-existent groups * Projects can be shared with groups that the current user does not have access to read Concerns: The new implementation of the API endpoint allows projects to be shared with a larger range of groups than can be done via the web UI. The form for sharing a project with a group uses the following API endpoint to index the available groups: https://gitlab.com/gitlab-org/gitlab-ce/blob/494269fc92f61098ee6bd635a0426129ce2c5456/lib/api/groups.rb#L17. The groups indexed in the web form will only be those groups that the user is currently a member of. The new implementation allows projects to be shared with any group that the authenticated user has access to view. This widens the range of groups to those that are public and internal. See merge request !2005 Signed-off-by: Rémy Coutable <remy@rymai.me> 
API: Share projects only with groups current_user can access

Aims to address the issues here: https://gitlab.com/gitlab-org/gitlab-ce/issues/23004

* Projects can be shared with non-existent groups
* Projects can be shared with groups that the current user does not have access to read

Concerns:

The new implementation of the API endpoint allows projects to be shared with a larger range of groups than can be done via the web UI.

The form for sharing a project with a group uses the following API endpoint to index the available groups: https://gitlab.com/gitlab-org/gitlab-ce/blob/494269fc92f61098ee6bd635a0426129ce2c5456/lib/api/groups.rb#L17. The groups indexed in the web form will only be those groups that the user is currently a member of.

The new implementation allows projects to be shared with any group that the authenticated user has access to view. This widens the range of groups to those that are public and internal.

See merge request !2005

Signed-off-by: Rémy Coutable <remy@rymai.me>
Tidy up project list actions 2016-10-05T11:13:58+00:00 Sean McGivern sean@gitlab.com 2016-10-05T11:13:58+00:00 0a1baaa80f017ebf068a0a83d7efda45fbe2ef6c 






api: add /projects/visible API endpoint
2016-10-04T16:23:18+00:00

Ben Boeckel
ben.boeckel@kitware.com

2016-08-23T19:23:56+00:00

e956a24dfd45baaafe93a520df61015bba40a4da

FIxes #19361, #3119.





FIxes #19361, #3119.







Expose project share expiration_date field on API
2016-09-28T13:12:49+00:00

Felipe Artur
felipefac@gmail.com

2016-09-22T20:31:18+00:00

93d849beaebb00dc4dcb6cb5ffa4721883e0da51












API: Return 404 when trying to fork to unaccessible namespace
2016-09-22T10:15:45+00:00

Rémy Coutable
remy@rymai.me

2016-09-21T14:40:46+00:00

7458126111fab210974edb6e59cd722bee248088

Signed-off-by: Rémy Coutable <remy@rymai.me>





Signed-off-by: Rémy Coutable <remy@rymai.me>







Allow to set request_access_enabled for groups and projects using API
2016-09-19T15:13:57+00:00

Felipe Artur
felipefac@gmail.com

2016-09-14T22:04:27+00:00

e0067d185005f563b0f8dad9e150d922419c0ea2












Use Search::GlobalService.new in the `GET /projects/search/:query` endpoint
2016-09-12T08:34:03+00:00

Rémy Coutable
remy@rymai.me

2016-09-09T13:16:26+00:00

3a58dd2d8ffd0baf7a6a8f342d703cbdc34400bb

Also streamline the sorting part while we're at it.

That being done, there's currently a duplication between
`GET /projects/search/:query` and `GET /projects?search=:search`
so we might want to keep only the latter for 9.0...

Signed-off-by: Rémy Coutable <remy@rymai.me>





Also streamline the sorting part while we're at it.

That being done, there's currently a duplication between
`GET /projects/search/:query` and `GET /projects?search=:search`
so we might want to keep only the latter for 9.0...

Signed-off-by: Rémy Coutable <remy@rymai.me>







Search should compare only the lowercase versions of the project names
2016-09-09T13:19:18+00:00

Razzeee
razzeee@gmail.com

2016-09-07T18:44:06+00:00

874ad681cd98616e560fb633e7c3867361faf46c












Higher code quality for fork to namespace API
2016-09-06T21:51:08+00:00

Olaf Tomalka
olaf.tomalka@gmail.com

2016-09-06T21:51:08+00:00

636db1515c8b9429c5895845e5601ac33b2ac6b6