Rémy Coutable da8ac1635f Merge branch 'issue_17302' into 'master' ...

Fix api leaking notes when user is not authorized to read noteable

fixes #17302

See merge request !4102

2016-05-18 04:31:12 +00:00

..

api_helpers_spec.rb

Fix API::APIHelpers -> API::Helpers;

2015-10-23 11:42:57 +08:00

branches_spec.rb

Add traits for each access_level to ProjectMember factory

2016-03-06 16:53:22 -05:00

builds_spec.rb

Codestyle: make sure we have space around operators

2016-05-13 04:46:56 -03:00

commit_statuses_spec.rb

Fix a few places where autoloading would fail

2016-05-10 11:51:19 +02:00

commits_spec.rb

API support for the 'since' and 'until' operators on commit requests

2016-04-29 09:26:52 +02:00

doorkeeper_access_spec.rb

…

files_spec.rb

Add ability to fetch the commit ID of the last commit that actually touched a file

2015-11-02 17:07:06 +02:00

fork_spec.rb

Add traits for each access_level to ProjectMember factory

2016-03-06 16:53:22 -05:00

group_members_spec.rb

Codestyle: make sure we have space around operators

2016-05-13 04:46:56 -03:00

groups_spec.rb

API: Avoid group leak while updating the group

2016-04-13 11:20:45 +02:00

internal_spec.rb

fixed merge conflict and refactored specs

2016-02-29 10:59:16 +01:00

issues_spec.rb

Add API endpoints for un/subscribing from/to a label

2016-05-12 22:48:09 +02:00

keys_spec.rb

Add API method for get user by ID of an SSH key

2015-09-03 15:47:22 +03:00

labels_spec.rb

Add API endpoints for un/subscribing from/to a label

2016-05-12 22:48:09 +02:00

licenses_spec.rb

Update to licensee 8.0.0 and fix API specs

2016-04-18 14:47:50 +02:00

merge_requests_spec.rb

Expose MergeRequest#user_notes_count in the API and use the method in issues list

2016-05-09 16:08:07 +02:00

milestones_spec.rb

Improve Milestones API specs

2016-04-25 18:07:51 +02:00

namespaces_spec.rb

…

notes_spec.rb

Fix single note api request

2016-05-16 16:43:19 -03:00

project_hooks_spec.rb

Prevent users from deleting Webhooks via API they do not own

2016-04-24 23:53:59 -07:00

project_members_spec.rb

Allow a project member to leave the projected through the API

2016-04-12 14:30:42 +02:00

project_snippets_spec.rb

Prevent private snippets in public/internal projects from being leaked via API

2016-04-25 12:02:06 -07:00

projects_spec.rb

Restrict starred projects to viewable ones

2016-05-10 18:13:52 +01:00

repositories_spec.rb

Add traits for each access_level to ProjectMember factory

2016-03-06 16:53:22 -05:00

runners_spec.rb

Add traits for each access_level to ProjectMember factory

2016-03-06 16:53:22 -05:00

services_spec.rb

Fixed Rubocop offenses

2015-12-15 00:53:52 -02:00

session_spec.rb

…

settings_spec.rb

…

system_hooks_spec.rb

…

tags_spec.rb

Use Rugged's TagCollection#create instead of gitlab-shell's Repository#add_tag for better performance

2016-05-04 17:19:13 +02:00

triggers_spec.rb

Add traits for each access_level to ProjectMember factory

2016-03-06 16:53:22 -05:00

users_spec.rb

Insert users check into api

2016-04-18 11:12:27 -03:00

variables_spec.rb

Add traits for each access_level to ProjectMember factory

2016-03-06 16:53:22 -05:00