Robert SpeicherandRobert Speicher 55bbc7e3df Merge branch 'fix-impersonation-issue' into 'master' ...

Prevent privilege escalation via "impersonate" feature

Closes https://gitlab.com/gitlab-org/gitlab-ce/issues/15548

See merge request !1956

2016-04-25 16:52:11 -04:00

..

abuse_reports_controller.rb

Clearify who deletes the user

2016-03-15 21:09:25 +01:00

appearances_controller.rb

Branded login page also in CE

2016-02-26 15:50:51 +01:00

application_controller.rb

Merge branch 'fix-impersonation-issue' into 'master'

2016-04-25 16:52:11 -04:00

application_settings_controller.rb

Merge branch 'issue_12658' into 'master'

2016-03-21 21:37:57 -04:00

applications_controller.rb

Small improvements to CI

2015-01-17 16:17:34 -08:00

background_jobs_controller.rb

Use Gitlab.config instead of Settings everywhere

2014-10-15 23:01:31 +02:00

broadcast_messages_controller.rb

Allow limited Markdown in Broadcast Messages

2016-02-06 14:30:07 -05:00

builds_controller.rb

Show 'All' tab by default in the builds page

2016-01-04 10:21:10 -02:00

dashboard_controller.rb

Explicitly define ordering in models using default_scope

2015-02-05 14:20:55 -08:00

deploy_keys_controller.rb

Remove show actions from Admin and Project DeployKeys

2015-06-03 18:03:04 -04:00

groups_controller.rb

Merge branch 'issue_12658' into 'master'

2016-03-21 21:37:57 -04:00

hooks_controller.rb

Redirect to a default path if HTTP_REFERER is not set

2015-10-20 07:45:48 -07:00

identities_controller.rb

Code style fixes and some code simplified

2016-01-08 16:26:04 -02:00

impersonations_controller.rb

Merge branch 'fix-impersonation-issue' into 'master'

2016-04-25 16:52:11 -04:00

keys_controller.rb

Fixed the Rails/ActionFilter cop

2015-04-20 15:39:37 +02:00

labels_controller.rb

Label description and Label row

2016-02-17 21:52:12 +08:00

logs_controller.rb

Added the correct hierarchy of controllers for the administrative part

2013-01-24 22:31:24 +02:00

projects_controller.rb

Merge branch 'issue_12658' into 'master'

2016-03-21 21:37:57 -04:00

runner_projects_controller.rb

Remove ci_ prefix from all ci related things

2015-12-11 18:02:09 +01:00

runners_controller.rb

Migrate CI::Project to Project

2015-12-11 18:02:09 +01:00

services_controller.rb

Improve invalidation of stored service password if the endpoint URL is changed

2015-10-15 12:07:59 +02:00

spam_logs_controller.rb

Refactor Admin::SpamLogsController to block user before destroying

2016-02-02 11:25:44 -02:00

users_controller.rb

Merge branch 'fix-impersonation-issue' into 'master'

2016-04-25 16:52:11 -04:00