Robert SpeicherandRobert Speicher 15f8fb3164 Merge branch 'fix-impersonation-issue' into 'master' ...

Prevent privilege escalation via "impersonate" feature

Closes https://gitlab.com/gitlab-org/gitlab-ce/issues/15548

See merge request !1956

2016-04-25 17:03:43 -04:00

..

abuse_reports_controller.rb

Improve abuse reports management

2015-08-25 10:52:10 +02:00

application_controller.rb

Merge branch 'fix-impersonation-issue' into 'master'

2016-04-25 17:03:43 -04:00

application_settings_controller.rb

Implement Build Artifacts

2015-11-10 12:51:50 +01:00

applications_controller.rb

Small improvements to CI

2015-01-17 16:17:34 -08:00

background_jobs_controller.rb

Use Gitlab.config instead of Settings everywhere

2014-10-15 23:01:31 +02:00

broadcast_messages_controller.rb

Redirect to a default path if HTTP_REFERER is not set

2015-10-20 07:45:48 -07:00

dashboard_controller.rb

Explicitly define ordering in models using default_scope

2015-02-05 14:20:55 -08:00

deploy_keys_controller.rb

Remove show actions from Admin and Project DeployKeys

2015-06-03 18:03:04 -04:00

groups_controller.rb

Wrap group removal into service

2015-06-03 14:07:20 +02:00

hooks_controller.rb

Redirect to a default path if HTTP_REFERER is not set

2015-10-20 07:45:48 -07:00

identities_controller.rb

Fix admin identities code

2015-06-23 10:26:50 +02:00

impersonations_controller.rb

Merge branch 'fix-impersonation-issue' into 'master'

2016-04-25 17:03:43 -04:00

keys_controller.rb

Fixed the Rails/ActionFilter cop

2015-04-20 15:39:37 +02:00

labels_controller.rb

added spinach for glabal labels

2015-09-03 19:02:14 +03:00

logs_controller.rb

Added the correct hierarchy of controllers for the administrative part

2013-01-24 22:31:24 +02:00

projects_controller.rb

Allow listing of archived projects

2015-08-19 13:46:59 +02:00

services_controller.rb

Improve invalidation of stored service password if the endpoint URL is changed

2015-10-15 12:07:59 +02:00

users_controller.rb

Merge branch 'fix-impersonation-issue' into 'master'

2016-04-25 17:03:43 -04:00