Rémy CoutableandRémy Coutable 554567331c Merge branch 'fix-project-hook-delete-permissions' into 'master' ...

Prevent users from deleting Webhooks via API they do not own

Closes https://gitlab.com/gitlab-org/gitlab-ce/issues/15576

See merge request !1959

Signed-off-by: Rémy Coutable <remy@rymai.me>

2016-04-26 10:51:27 +02:00

..

api_guard.rb

Rubocop: Style/CaseIndentation enabled

2015-02-02 21:26:40 -08:00

api.rb

Reimplement Trigger API

2015-12-11 18:02:09 +01:00

branches.rb

Added the missing comma

2015-03-31 17:08:33 +01:00

commit_statuses.rb

Migrate CI::Project to Project

2015-12-11 18:02:09 +01:00

commits.rb

Order commit comments in API chronologically

2015-05-08 14:34:10 +02:00

deploy_keys.rb

Fix failing tests due to updates on the return messages.

2015-01-07 11:39:20 +01:00

entities.rb

Fix Rubocop complain.

2015-12-16 14:51:25 -05:00

files.rb

Add ability to fetch the commit ID of the last commit that actually touched a file

2015-11-02 17:07:06 +02:00

group_members.rb

Track who created a group or project member.

2015-04-14 12:06:42 +02:00

groups.rb

Add API group projects endpoint.

2015-12-07 17:10:40 +01:00

helpers.rb

Migrate CI::Project to Project

2015-12-11 18:02:09 +01:00

internal.rb

Improve Git access error messages.

2015-05-13 09:41:55 +02:00

issues.rb

Merge branch 'rename-abilities' into 'master'

2015-06-26 16:39:17 +00:00

keys.rb

Add API method for get user by ID of an SSH key

2015-09-03 15:47:22 +03:00

labels.rb

Fix failing tests due to updates on the return messages.

2015-01-07 11:39:20 +01:00

merge_requests.rb

Merge branch 'merge-when-build-succeeds-unchecked' into 'master'

2016-01-06 13:58:49 -05:00

milestones.rb

Fix the test and add documentation for the "per-milestone issues API call"

2015-01-22 12:14:53 +01:00

namespaces.rb

Make namespace API available to all users

2015-05-28 11:39:12 -07:00

notes.rb

Show who last edited a comment if it wasn't the original author

2015-07-30 14:45:54 +02:00

project_hooks.rb

Merge branch 'fix-project-hook-delete-permissions' into 'master'

2016-04-26 10:51:27 +02:00

project_members.rb

Use project_member instead of team_member.

2015-03-15 13:50:38 +01:00

project_snippets.rb

Rename abilities to correspond contoller/model action names

2015-06-26 15:55:56 +02:00

projects.rb

Api support for requesting starred projects for user

2015-12-16 21:46:00 +01:00

repositories.rb

Move git tags API to separate file

2015-11-12 15:41:13 +01:00

services.rb

Hide passwords to non-admin users in the services API

2015-10-12 15:24:00 +02:00

session.rb

Add LDAP support to /api/session

2013-07-16 11:28:19 +03:00

settings.rb

Add tests and improve logic

2015-07-06 16:47:19 +02:00

system_hooks.rb

Added X-GitLab-Event header for web hooks

2015-05-08 16:49:03 +03:00

tags.rb

Allow editing a release in API via PUT method

2015-11-21 22:34:53 +01:00

triggers.rb

Fix triggers tests

2015-12-11 18:02:09 +01:00

users.rb

Added ability to update or set the identity of an existing user, like the documentation said it was possible, but actually wasn't.

2015-09-22 16:26:59 -05:00