Robert SpeicherandRobert Speicher 017f87e8cd Merge branch 'fix-impersonation-issue' into 'master' ...

Prevent privilege escalation via "impersonate" feature

Closes https://gitlab.com/gitlab-org/gitlab-ce/issues/15548

See merge request !1956

2016-04-25 16:55:12 -04:00

..

abuse_reports_controller.rb

Block the reported user before destroying the record

2016-01-12 20:59:55 -05:00

appearances_controller.rb

Merge branch '11489-branded-appearance-to-ce' into 'master'

2016-03-01 11:41:03 +01:00

application_controller.rb

Merge branch 'fix-impersonation-issue' into 'master'

2016-04-25 16:55:12 -04:00

application_settings_controller.rb

Add option to include the sender name in body of Notify email. fix #7824

2016-02-09 12:58:13 +01:00

applications_controller.rb

Small improvements to CI

2015-01-17 16:17:34 -08:00

background_jobs_controller.rb

Use Gitlab.config instead of Settings everywhere

2014-10-15 23:01:31 +02:00

broadcast_messages_controller.rb

Allow limited Markdown in Broadcast Messages

2016-02-06 14:30:07 -05:00

builds_controller.rb

Show 'All' tab by default in the builds page

2016-01-04 10:21:10 -02:00

dashboard_controller.rb

Explicitly define ordering in models using default_scope

2015-02-05 14:20:55 -08:00

deploy_keys_controller.rb

Remove show actions from Admin and Project DeployKeys

2015-06-03 18:03:04 -04:00

groups_controller.rb

Wrap group removal into service

2015-06-03 14:07:20 +02:00

hooks_controller.rb

Redirect to a default path if HTTP_REFERER is not set

2015-10-20 07:45:48 -07:00

identities_controller.rb

Code style fixes and some code simplified

2016-01-08 16:26:04 -02:00

impersonations_controller.rb

Merge branch 'fix-impersonation-issue' into 'master'

2016-04-25 16:55:12 -04:00

keys_controller.rb

Fixed the Rails/ActionFilter cop

2015-04-20 15:39:37 +02:00

labels_controller.rb

Merge branch 'visibletrap/gitlab-ce-label'

2016-02-21 21:04:31 +01:00

logs_controller.rb

Added the correct hierarchy of controllers for the administrative part

2013-01-24 22:31:24 +02:00

projects_controller.rb

Allow listing of archived projects

2015-08-19 13:46:59 +02:00

runner_projects_controller.rb

Remove ci_ prefix from all ci related things

2015-12-11 18:02:09 +01:00

runners_controller.rb

Migrate CI::Project to Project

2015-12-11 18:02:09 +01:00

services_controller.rb

Improve invalidation of stored service password if the endpoint URL is changed

2015-10-15 12:07:59 +02:00

spam_logs_controller.rb

Refactor Admin::SpamLogsController to block user before destroying

2016-02-02 11:25:44 -02:00

users_controller.rb

Merge branch 'fix-impersonation-issue' into 'master'

2016-04-25 16:55:12 -04:00