Skip to content
Snippets Groups Projects
Commit 79d94b16 authored by Douwe Maan's avatar Douwe Maan Committed by Rémy Coutable
Browse files

Merge branch '22481-honour-issue-visibility-for-groups' into 'security' 

Honour issue and merge request visibility in their respective finders

This MR fixes a security issue with the IssuesFinder and MergeRequestFinder where they would return items the user did not have permission to see. This was most visible on the issue and merge requests page for a group containing projects that had set their issues or merge requests to "private".

Closes https://gitlab.com/gitlab-org/gitlab-ce/issues/22481

See merge request !2000
parent b77969ea
No related branches found
No related tags found
Hide whitespace changes
Inline Side-by-side
Showing
with 139 additions and 25 deletions
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment