Dmitriy Zaporozhets 8c47a72a4e Merge branch 'project-existence-leak' into 'master' ...

Don't leak information about private project existence via Git-over-SSH/HTTP.

Fixes #2040 and https://gitlab.com/gitlab-org/gitlab-ce/issues/343.

Both `Grack::Auth` (used by Git-over-HTTP) and `Api::Internal /allowed` (used by gitlab-shell/Git-over-SSH) now return a generic "Not Found" error when the project exists but the user doesn't have access to it.

See merge request !1578

2015-03-03 20:05:12 +00:00

..

controllers

Render go-import meta tag for private repos.

2015-03-03 11:22:30 +01:00

factories

Annotate models

2015-02-02 10:24:40 -08:00

features

Merge branch 'master' into rails-4.1.9

2015-02-19 20:53:05 -07:00

finders

Updated rspec to rspec 3.x syntax

2015-02-12 19:17:35 +01:00

fixtures

Add trailing newline to all text files.

2014-06-21 11:20:22 +02:00

helpers

Merge pull request #8890 from sue445/feature/project_api_avatar_url

2015-03-01 10:54:42 +01:00

javascripts

Add trailing newline to all text files.

2014-06-21 11:20:22 +02:00

lib

Merge branch 'project-existence-leak' into 'master'

2015-03-03 20:05:12 +00:00

mailers

Upgrade to Rails 4.1.9

2015-02-14 11:09:23 -07:00

models

Fix import check for case sensetive namespaces

2015-03-02 23:06:59 -08:00

requests/api

Improve error messages when file editing fails

2015-02-22 16:01:49 -07:00

routing

Upgrade to Rails 4.1.9

2015-02-14 11:09:23 -07:00

services

Allow mass-unassigning of issues

2015-02-25 23:57:23 -05:00

support

TestEnv improvements

2015-02-16 20:36:34 -05:00

tasks/gitlab

Updated rspec to rspec 3.x syntax

2015-02-12 19:17:35 +01:00

workers

Updated rspec to rspec 3.x syntax

2015-02-12 19:17:35 +01:00

factories_spec.rb

Updated rspec to rspec 3.x syntax

2015-02-12 19:17:35 +01:00

factories.rb

Remove unneeded password_confirmation from seed.

2014-12-28 14:42:15 +01:00

spec_helper.rb

Updated rspec to rspec 3.x syntax

2015-02-12 19:17:35 +01:00