Allows the auditor user to access the dependency proxy page
within a group.

Changelog: fixed
EE: true

Changelog: fixed
EE: true

Allow auditor users to access the merge request approvals get
configuration API endpoint for projects.

Changelog: changed
EE: true

This change contains the basic plumbing for self-managed SAML
group sync, including the policies needed to manage SAML Group
Links via the UI, and the mechanism that will eventually call
the Sidekiq worker.

EE: true
Changelog: added

- needed per business

Move incident timeline related model, services and files to Core

Steve Abrams authored 2 years ago and David Fernandez committed 2 years ago

Updates permissions to change container registry
cleanup policies (container expiration policies)
from developer to maintainer.

This aligns with settings permissions throughout
the rest of GitLab.

Changelog: changed

- When the group's subscription is not on a paid plan
  disable changing the setting for:
  prevent_sharing_groups_outside_hierarchy
  This is done so that once the plan is switched to free (or starts
  there) it cannot enable sharing outside of its hierarchy.

- This change only applies to the SaaS version of the product.

- refs:
  https://gitlab.com/gitlab-org/gitlab/-/issues/349817
  https://gitlab.com/gitlab-org/gitlab/-/merge_requests/84968#note_913609562

Changelog: changed
EE: true

Changelog: fixed
EE: true

The auditor role should be able to view MR analytics
of a project they are not a member of, as per our docs.

Changelog: fixed
EE: true

- remove threat monitoring sidebar option
- remove threat monitoring routes
- update tests for removal
- left the controller/views/UI code
  untouched because there is a lot of code there
  and I wanted to remove the references to them
  so that I could indiscriminately remove them in
  follow-up MRs

Changelog: removed

EE: true

This commit allows to create coverage-check approval rule using
gitlab premium plan.

Changelog: changed
EE: true

Anna Vovchenko authored 2 years ago and Anna Vovchenko committed 2 years ago

The auditor now can see
the infrastructure menu item,
Kubernetes clusters and Terraform sub-items.

Changelog: fixed
EE: true

- Services
- Policy
- etc

Changelog: changed

In this commit we're adding some of the necessary logic to
handle the backend part of this class.

Prevented create_package policy and added spec

EE: true

The auditor role should be able to view VSA analytics
of a group they are not a member of, as per our docs.

Changelog: fixed
EE: true

The auditor role should be able to view contribution analytics
of a group they are not a member of, as per our docs.

Changelog: fixed
EE: true

The auditor role should be able to view repository analytics
of a group they are not a member of, as per our docs.

Changelog: fixed
EE: true

Magdalena Frankiewicz authored 2 years ago and Vasilli Iakliushin committed 2 years ago

The auditor role should be able to view devops adoption analytics
of a group they are not a member of, as per our docs.

Changelog: fixed
EE: true

This MR updates the policy name with read_* prefix
for security orchestration policies.

EE: true

Changelog: changed
EE: true

Alexander Turinske authored 2 years ago and Alan (Maciej) Paruszewski committed 2 years ago

- add group security
    - routes
    - controller
    - sidebar menu
- update tests

Remove :corpus_management and :corpus_management_ui feature flags.

Changelog: other
EE: true

Changelog: other
EE: true

Adds permissions for reading and managing related epics. These will be
used similarly as issue_link permissions, but for epics. Also I added
these permissions to EpicPolicy instead of GroupPolicy as this
permission should be always called on a specific epic.

Changelog: fixed
EE: true

Changelog: fixed
EE: true

Sean Arnold authored 3 years ago and alex pooley committed 3 years ago

Changelog: added
EE: true

Jason Goodman authored 3 years ago and Daniel Davison committed 3 years ago

Test each role rather than just developer

Jason Goodman authored 3 years ago and Daniel Davison committed 3 years ago

Test each role rather than only developer

Jason Goodman authored 3 years ago and Imre (Admin) committed 3 years ago

Treat pending members of invited groups as if they are not members

* Use license check
License.feature_available?(:adjourned_deletion_for_projects_and_groups)
instead of policy check can?(current_user, :delay_project_deletions)
* Remove `index_projects_on_hidden` as it was not used
* Update documentation

Update 'delay_project_deletions' ability to rely only on global
license check

Jason Goodman authored 3 years ago and Imre (Admin) committed 3 years ago

Also handle permissions for pending group memberships for some cases

Changelog: added
EE: true