Douwe MaanandRobert Speicher 65d3a647bc Merge branch '18033-private-repo-mentions' into 'master' ...

Ensure logged-out users can't see private refs

https://gitlab.com/gitlab-org/gitlab-ce/issues/18033

I'm still not sure what to do about the CHANGELOG on security issues - should I add to a patch release? This issue was assigned to 8.10.

See merge request !1974
(cherry picked from commit 3a6ebb1fd6)

2016-06-30 14:52:52 -04:00

..

ci

add 'triggers' keyword to gitlab-ci.yml 'only' and 'except' fields to allow control over whether triggers will cause jobs to run

2016-03-15 09:27:33 -04:00

commits

Add support to cherry-pick any commit

2016-04-19 19:19:00 +02:00

files

Automatically fork a project when not allowed to edit a file.

2015-12-18 10:03:34 +01:00

groups

Address feedback

2016-03-22 00:09:20 +01:00

issues

Refactor and expose only Gitlab::UrlBuilder.build(record)

2016-04-13 16:07:04 +02:00

merge_requests

Merge branch '15591-fix-project-leak-in-new-mr-view' into 'master'

2016-04-25 21:53:17 +00:00

milestones

Implement review suggestions

2016-04-07 10:59:24 -03:00

notes

Merge branch 'rs-notes-privilege-escalation' into 'master'

2016-04-27 08:43:33 +00:00

oauth2

Rubocop: no trailing newlines

2015-02-02 21:53:27 -08:00

projects

Merge branch 'fix/import-data-issue' into 'master'

2016-05-19 13:06:36 -05:00

search

Restrict access to confidential issues on search results

2016-03-17 20:55:59 -03:00

wiki_pages

Merge branch '15527-fix-wiki-page-creation-issue' into 'master'

2016-05-03 09:42:16 +00:00

audit_event_service.rb

Audit log for user authentication

2015-07-06 12:36:08 +03:00

base_service.rb

Tweaks, refactoring, and specs

2016-03-20 21:04:07 +01:00

compare_service.rb

Use Gitlab::Git::DiffCollections

2016-03-03 18:38:44 +01:00

create_branch_service.rb

Fix duplicated branch creation/deletion Web hooks/service notifications when using Web UI

2016-02-09 06:22:49 -08:00

create_commit_builds_service.rb

Cleanup CiCommit and CiBuild

2016-03-14 13:20:35 +01:00

create_release_service.rb

Allow editing a release in API via PUT method

2015-11-21 22:34:53 +01:00

create_snippet_service.rb

Tweaks, refactoring, and specs

2016-03-20 21:04:07 +01:00

create_spam_log_service.rb

Support Akismet spam checking for creation of issues via API

2016-02-02 11:25:44 -02:00

create_tag_service.rb

Generate builds when creating tag using web interface

2016-01-11 12:37:27 +01:00

delete_branch_service.rb

Fix duplicated branch creation/deletion Web hooks/service notifications when using Web UI

2016-02-09 06:22:49 -08:00

delete_tag_service.rb

Refactor release code a bit

2015-11-09 15:30:50 +01:00

delete_user_service.rb

Clearify who deletes the user

2016-03-15 21:09:25 +01:00

destroy_group_service.rb

Add ability to delete a user with force

2016-03-15 21:09:25 +01:00

event_create_service.rb

Create a "destroyed Milestone" event and keep Milestone events around in the DB

2015-09-15 05:51:11 -07:00

git_hooks_service.rb

Raise the exception from #execute instead of #run_hook. #1156 #3069

2015-12-03 09:39:15 -05:00

git_push_service.rb

Using single builder for push and tag events

2016-04-19 11:00:30 +02:00

git_tag_push_service.rb

Using single builder for push and tag events

2016-04-19 11:00:30 +02:00

gravatar_service.rb

Add support for HiDPI displays in gravatar service

2015-09-26 20:53:16 +02:00

issuable_base_service.rb

Merge branch 'fix/private-labels-permissions' into 'master'

2016-04-22 10:53:54 +02:00

notification_service.rb

Reuse User#notification_settings_for when it's possible

2016-04-11 20:50:26 -03:00

repair_ldap_blocked_user_service.rb

Code style fixes and some code simplified

2016-01-08 16:26:04 -02:00

system_hooks_service.rb

Added System Hooks for push and tag_push

2016-04-19 11:00:30 +02:00

system_note_service.rb

Start with iid on branch creation

2016-04-14 14:49:45 +02:00

test_hook_service.rb

Added X-GitLab-Event header for web hooks

2015-05-08 16:49:03 +03:00

todo_service.rb

Merge branch '18033-private-repo-mentions' into 'master'

2016-06-30 14:52:52 -04:00

update_release_service.rb

Allow editing a release in API via PUT method

2015-11-21 22:34:53 +01:00

update_snippet_service.rb

Tweaks, refactoring, and specs

2016-03-20 21:04:07 +01:00