Robert SpeicherandRobert Speicher 806cc20803 Merge branch 'fix-impersonation-issue' into 'master' ...

Prevent privilege escalation via "impersonate" feature

Closes https://gitlab.com/gitlab-org/gitlab-ce/issues/15548

See merge request !1956

2016-04-25 16:58:52 -04:00

..

abuse_reports_controller.rb

Improve abuse reports management

2015-08-25 10:52:10 +02:00

application_controller.rb

Merge branch 'fix-impersonation-issue' into 'master'

2016-04-25 16:58:52 -04:00

application_settings_controller.rb

reCAPTCHA is configurable through Admin Settings, no reload needed.

2015-12-29 11:13:50 +01:00

applications_controller.rb

Small improvements to CI

2015-01-17 16:17:34 -08:00

background_jobs_controller.rb

Use Gitlab.config instead of Settings everywhere

2014-10-15 23:01:31 +02:00

broadcast_messages_controller.rb

Redirect to a default path if HTTP_REFERER is not set

2015-10-20 07:45:48 -07:00

builds_controller.rb

Migrate CI::Project to Project

2015-12-11 18:02:09 +01:00

dashboard_controller.rb

Explicitly define ordering in models using default_scope

2015-02-05 14:20:55 -08:00

deploy_keys_controller.rb

Remove show actions from Admin and Project DeployKeys

2015-06-03 18:03:04 -04:00

groups_controller.rb

Wrap group removal into service

2015-06-03 14:07:20 +02:00

hooks_controller.rb

Redirect to a default path if HTTP_REFERER is not set

2015-10-20 07:45:48 -07:00

identities_controller.rb

Merge branch 'admin_add_identity' into 'master'

2015-12-21 12:58:43 -05:00

impersonations_controller.rb

Merge branch 'fix-impersonation-issue' into 'master'

2016-04-25 16:58:52 -04:00

keys_controller.rb

Fixed the Rails/ActionFilter cop

2015-04-20 15:39:37 +02:00

labels_controller.rb

added spinach for glabal labels

2015-09-03 19:02:14 +03:00

logs_controller.rb

Added the correct hierarchy of controllers for the administrative part

2013-01-24 22:31:24 +02:00

projects_controller.rb

Allow listing of archived projects

2015-08-19 13:46:59 +02:00

runner_projects_controller.rb

Remove ci_ prefix from all ci related things

2015-12-11 18:02:09 +01:00

runners_controller.rb

Migrate CI::Project to Project

2015-12-11 18:02:09 +01:00

services_controller.rb

Improve invalidation of stored service password if the endpoint URL is changed

2015-10-15 12:07:59 +02:00

users_controller.rb

Merge branch 'fix-impersonation-issue' into 'master'

2016-04-25 16:58:52 -04:00