1. 25 4月, 2017 1 次提交
    • T
      Don't display the `is_admin?` flag for user API responses. · 34b71e73
      Timothy Andrew 提交于
      - To prevent an attacker from enumerating the `/users` API to get a list of all
        the admins.
      
      - Display the `is_admin?` flag wherever we display the `private_token` - at the
        moment, there are two instances:
      
        - When an admin uses `sudo` to view the `/user` endpoint
        - When logging in using the `/session` endpoint
      34b71e73
  2. 14 4月, 2017 2 次提交
  3. 09 4月, 2017 1 次提交
  4. 04 4月, 2017 3 次提交
  5. 03 4月, 2017 1 次提交
  6. 02 4月, 2017 1 次提交
  7. 20 3月, 2017 2 次提交
    • T
      Send only defined dependencies · c191c110
      Tomasz Maczukin 提交于
      In APIv1 we've been sending all jobs from previous stages and
      a `dependencies` list with names of jobs that user want to download
      artifacts from. This was selected on Runners side.
      
      In APIv1 we've planned to send only jobs that were defined (if any; and
      all previous jobs by default). However I've missed the fact that
      it was Runner who selected jobs, not GitLab. And now current version
      of APIV4 sends all jobs everytime.
      
      This commit fixes this. If user will define `dependencies` in his job,
      then GitLab will send only selected jobs.
      c191c110
    • T
      Send token of depenent job · 9267a9b1
      Tomasz Maczukin 提交于
      Artifacts download for authorization is using a job token of job to
      which the artifact belongs. In APIv1 the token was sent with dependent
      jobs details and in APIv4 it was designed to also contain it.
      
      However I forgot about this parameter while working on
      `/api/v4/jobs/request` endpoint.
      
      This commit adds a missing parameter which is required for APIv4 to work
      properly.
      9267a9b1
  8. 07 3月, 2017 1 次提交
  9. 06 3月, 2017 7 次提交
  10. 03 3月, 2017 3 次提交
  11. 02 3月, 2017 4 次提交
  12. 01 3月, 2017 4 次提交
    • J
      Update occurrences of MWBS to MWPS · a0101ebf
      James Lopez 提交于
       Rename column in the database
       Rename fields related to import/export feature
       Rename API endpoints
       Rename documentation links
       Rename the rest of occurrences in the code
       Replace the images that contain the words "build succeeds" and docs referencing to them
       Make sure pipeline is green and nothing is missing.
      
      updated doc images
      
      renamed only_allow_merge_if_build_succeeds in projects and fixed references
      
      more updates
      
      fix some spec failures
      
      fix rubocop offences
      
      fix v3 api spec
      
      fix MR  specs
      
      fixed issues with partials
      
      fix MR spec
      
      fix alignment
      
      add missing v3 to v4 doc
      
      wip - refactor v3 endpoints
      
      fix specs
      
      fix a few typos
      
      fix project specs
      
      copy entities fully to V3
      
      fix  entity error
      
      more fixes
      
      fix failing specs
      
      fixed missing entities in V3 API
      
      remove comment
      
      updated code based on feedback
      
      typo
      
      fix spec
      a0101ebf
    • T
      9f2e4742
    • S
      add impersonation token · a3dfb58e
      Simon Vocella 提交于
      a3dfb58e
    • S
      manage personal_access_tokens through api · 81246e56
      Simon Vocella 提交于
      81246e56
  13. 23 2月, 2017 2 次提交
  14. 22 2月, 2017 1 次提交
  15. 21 2月, 2017 1 次提交
  16. 17 2月, 2017 1 次提交
  17. 16 2月, 2017 2 次提交
  18. 15 2月, 2017 2 次提交
  19. 14 2月, 2017 1 次提交