Robert SpeicherandRobert Speicher 15f8fb3164 Merge branch 'fix-impersonation-issue' into 'master' ...

Prevent privilege escalation via "impersonate" feature

Closes https://gitlab.com/gitlab-org/gitlab-ce/issues/15548

See merge request !1956

2016-04-25 17:03:43 -04:00

..

admin

Merge branch 'fix-impersonation-issue' into 'master'

2016-04-25 17:03:43 -04:00

groups

Merge branch 'fix-global-milestones-error-500' into 'master'

2015-12-07 14:28:31 -05:00

import

Fix duplicate repositories in GitHub import page

2015-10-19 10:39:59 -07:00

profiles

Bump devise-two-factor to 2.0.0

2015-09-19 21:16:18 -04:00

projects

Merge branch 'fix-merge-request-that-removes-submodule' into 'master'

2015-12-08 17:15:37 -05:00

abuse_reports_controller_spec.rb

Satisfy Rubocop

2015-10-18 13:08:08 +02:00

application_controller_spec.rb

Fix 403 Access Denied error messages when accessing Labels section in a project that has MRs disabled but issues enabled

2015-06-18 03:15:05 -07:00

autocomplete_controller_spec.rb

Fix bug preventing invite by e-mail

2015-08-21 13:47:56 -07:00

blame_controller_spec.rb

Fix blame view line groupings

2015-08-20 01:27:29 -07:00

blob_controller_spec.rb

Fix Style/AlignHash cop violations

2015-06-22 22:24:39 -07:00

branches_controller_spec.rb

Fix errors deleting and creating branches with encoded slashes

2015-08-01 23:33:33 -07:00

commit_controller_spec.rb

Merge branch 'fix-merge-request-that-removes-submodule' into 'master'

2015-12-08 17:15:37 -05:00

commits_controller_spec.rb

Fix Style/AlignHash cop violations

2015-06-22 22:24:39 -07:00

help_controller_spec.rb

Fix Style/AlignHash cop violations

2015-06-22 22:24:39 -07:00

invites_controller_spec.rb

Redirect to a default path if HTTP_REFERER is not set

2015-10-20 07:45:48 -07:00

namespaces_controller_spec.rb

Fix tests and improve wording

2015-09-14 14:16:08 +02:00

profile_keys_controller_spec.rb

Only publish ssh key-type and key

2015-08-04 14:33:18 +02:00

projects_controller_spec.rb

Merge branch 'stanhu/gitlab-ce-fix-404-after-project-removal'

2015-11-30 12:03:13 -05:00

root_controller_spec.rb

Add user preference to view project activity and starred project activity as default dashboard

2015-09-26 08:46:05 -07:00

snippets_controller_spec.rb

Merge branch 'dbalexandre/gitlab-ce-fix-raw-personal-snippet-access-workflow'

2015-11-27 14:43:42 -05:00

uploads_controller_spec.rb

Make all group public

2015-09-09 11:27:03 +03:00

users_controller_spec.rb

Merge branch 'atom-feed-latest-update' into 'master'

2015-11-20 11:02:27 +01:00