Commit Graph

292 Commits

Author SHA1 Message Date
manojmj 6cfd13726f CE: Add project download & project export audit event
This change adds audit events for
download of repository and export of
project.
2019-07-26 12:25:56 +05:30
Sam Battalio 3457695b1e Change HTTP Status Code when repository disabled 2019-06-24 22:12:42 +00:00
Robert Speicher ea1b24cbe0 Merge branch 'pderichs-52123' into 'master'
Use NotesFinder to get Noteable

See merge request gitlab-org/gitlab-ce!28205
2019-06-19 15:58:43 +00:00
Patrick Derichs 932a9a0c77 Use NotesFinder to fetch notes on API and Controllers
Fix missing iid query on NotesFinder

Changed parameters of find_noteable, 
so changes across a few files were needed.
MergeRequest also requires iid instead of id query

Make NotesFinder fail with RecordNotFound again

Add specs for target_iid

Using RSpec tablesyntax for target_iid specs

Revert "Using RSpec tablesyntax for target_iid specs"

This reverts commit ba45c7f569a.

Allow find_by! here

Fix variable name

Add readable check

Revert "Add readable check"

This reverts commit 9e3a1a7aa39.

Remove unnecessary assignment

Add required changes for EE

Fix parameter count

Reduce code duplication by extracting a noteable module method

The call to find_noteable was redundant so
multiple files and lines have changed in that
commit to use the newly introduced module
method `noteable`.

Replace casecmp with include check

Add parent_type parameter


Revert "Reduce code duplication by extracting
a noteable module method"

This reverts commit 8c0923babf.

Method is no longer needed

Check whether noteable can be read by user
2019-06-19 10:56:55 +02:00
Manoj MJ 53b17f0301 Add documentation and tests
This commit adds
 - feature specs
  - to test the ability of a user with "developer" permission
    to delete tags in repositories.
 - documentation
2019-06-19 07:08:56 +00:00
Shinya Maeda 387a4f4b2c Remove legacy artifact related code
We've already migrated all the legacy artifacts to the new realm,
which is ci_job_artifacts table.
It's time to remove the old code base that is no longer used.
2019-05-31 10:49:17 +07:00
Rémy Coutable c563e29fb3
Get rid of the user_namespace API helper method
Signed-off-by: Rémy Coutable <remy@rymai.me>
2019-04-24 19:39:59 +02:00
Fabio Busatto 035c8af12e Resolve "Get milestone by title via API" 2019-03-27 09:01:07 +00:00
Bob Van Landuyt b0fac091ec Authenticate the internal API using a header
Instead of mixing in the shared secret into the querystring or body,
we could also specify it in a header.
2019-03-11 16:46:04 +01:00
Roger Rüttimann 4db8336786 API: delete job_artifacts of a single job 2019-03-06 11:06:21 +00:00
Nermin Vehabovic eccfab4445 Added: Specs for sort page breaks on notes 2019-02-16 16:11:31 +01:00
Nermin Vehabovic f43cb6e79d Fixed: Warnings from static code analysis 2019-02-16 11:52:21 +01:00
Nermin Vehabovic ff671366cb Added: Include order by ID desc for tie breakers in pagination 2019-02-16 11:03:42 +01:00
Sean McGivern d91b96458e Merge branch 'api-group-labels' into 'master'
API group labels

Closes #44901

See merge request gitlab-org/gitlab-ce!21368
2019-02-07 09:48:04 +00:00
Stan Hu 41b51c0656 Encode Content-Disposition filenames
Users downloading non-ASCII attachments would see garbled characters.
When used with object storage, AWS S3 would return an InvalidArgument
error: Header value cannot be represented using ISO-8859-1.

Per RFC 5987 and RFC 6266, Content-Disposition should be encoded
properly. This commit takes the Rails 6 implementation of
ActiveSuppport::Http::ContentDisposition
(https://github.com/rails/rails/pull/33829) and ports it here.

Closes https://gitlab.com/gitlab-org/gitlab-ce/issues/47673
2019-02-04 23:12:44 -08:00
Robert Schilling 0ce33f6b4f Factor out common label API 2019-01-31 13:49:52 +01:00
Robert Schilling a9fdc3118a Incorporate feedback from Robert 2019-01-31 13:49:51 +01:00
Robert Schilling 4e9aa7e2c0 Correctly search for labels in parent groups 2019-01-31 13:49:51 +01:00
Robert Schilling ee826ad4a1 Replace finders 2019-01-31 13:49:50 +01:00
Robert Schilling eed79986c9 Add subscription API for the group label API 2019-01-31 13:49:49 +01:00
Mayra Cabrera 8b2fe985dd Restrict multiple clusters through API
Modifies authorize! method to accept a third param, and then use it in
combination with 'add_cluster' policy to appropriately restrict adding
multiple clusters

Closes https://gitlab.com/gitlab-org/gitlab-ce/issues/56110
2019-01-10 18:20:04 -06:00
Francisco Javier López 40887a94bd Fix files/blob api endpoint content disposition 2019-01-10 12:30:19 +00:00
Stan Hu aff2b6e4eb Switch use of Rack::Request to ActionDispatch::Request
As mentioned in
https://gitlab.com/gitlab-org/gitlab-ee/issues/9035#note_129093444,
Rails 5 switched ActionDispatch::Request so that it no longer inherits
Rack::Request directly. A middleware that uses Rack::Request to
read the environment may see stale request parameters if
another middleware modifies the environment via ActionDispatch::Request.
To be safe, we should be using ActionDispatch::Request everywhere.
2019-01-07 00:35:53 -08:00
Francisco Javier López 2cd47bba9a
Fixed api content-disposition in blob and files endpoint 2018-12-31 13:02:32 +01:00
Stan Hu f5847911ca Bump Gitaly version to v1.12.0 2018-12-21 23:41:37 +00:00
Jasper Maes 56296f1eda Remove rails4 specific code 2018-12-16 10:48:41 +01:00
Kamil Trzciński 39c1731a53 Log and pass correlation-id between Unicorn, Sidekiq and Gitaly
The Correlation ID is taken or generated from received X-Request-ID.
Then it is being passed to all executed services (sidekiq workers
or gitaly calls).

The Correlation ID is logged in all structured logs as `correlation_id`.
2018-12-06 20:46:14 +01:00
Francisco Javier López 9a5703ec82 Set content disposition attachment to several endpoints 2018-11-23 16:44:09 +00:00
William George 1b153d497b Make getting a user by the username case insensitive 2018-10-18 09:06:44 +00:00
gfyoung 3836d69119 Enable frozen string in lib/api and lib/backup
Partially addresses #47424.

Had to make changes to spec files because
stubbing methods on frozen objects is a mess
in RSpec and leads to failures:

https://github.com/rspec/rspec-mocks/issues/1190
2018-09-29 21:04:50 -07:00
Robert Speicher c7d1eef671 Merge branch 'rubocop-code-reuse' into 'master'
Add RuboCop cops to enforce code reusing rules

See merge request gitlab-org/gitlab-ce!21391
2018-09-13 14:53:05 +00:00
🙈 jacopo beschi 🙉 8e52f56d8d Resolve "500 Internal Server Error: Deleting branch of deleted project" 2018-09-12 20:52:30 +00:00
Yorick Peterse 2039c8280d
Disable existing offenses for the CodeReuse cops
This whitelists all existing offenses for the various CodeReuse cops, of
which most are triggered by the CodeReuse/ActiveRecord cop.
2018-09-11 17:32:00 +02:00
Robert Schilling 4e39fc1a40 Fix rubocop 2018-09-08 11:44:55 +02:00
Robert Schilling a14e9cfde8 API: Use find_branch! in all places 2018-09-08 10:55:17 +02:00
Marko, Peter 6d72bb3832 Add min_access_level filter to projects API
Signed-off-by: Marko, Peter <peter.marko@siemens.com>
2018-07-23 20:57:50 +02:00
Marko, Peter 209fd86442 Fix archived parameter for projects API 2018-07-16 16:25:38 +02:00
Jasper Maes 876d43b9f5 Rails5 fix no implicit conversion of Hash into String. ActionController::Parameters no longer returns an hash in Rails 5 2018-06-13 23:49:44 +02:00
Jan Provaznik 7a76caa5a8 Merge request and commit discussions API 2018-05-01 12:39:44 +00:00
Andreas Brandl c4e4258721 Validate project path prior to hitting the database.
Closes #45247.
2018-04-13 15:59:45 +02:00
Douwe Maan 44f4a674e2 Merge branch 'jramsay-38830-tarball' into 'master'
Add alternative archive route

Closes #38830

See merge request gitlab-org/gitlab-ce!17225
2018-04-06 14:14:39 +00:00
Grzegorz Bizon dd271e2460 Merge branch 'direct-upload-of-artifacts' into 'master'
Direct upload of artifacts

See merge request gitlab-org/gitlab-ce!18160
2018-04-05 20:59:40 +00:00
Kamil Trzciński 678620cce6 Add `direct_upload` setting for artifacts 2018-04-05 15:01:14 +02:00
James Ramsay 0b1b9c409d Add option to suppress archive commit sha
Repository archives are always named `<project>-<ref>-<sha>` even if
the ref is a commit. A consequence of always including the sha even
for tags is that packaging a release is more difficult because both
the ref and sha must be known by the packager.

- add append_sha option (defaults true) to provide a method for
toggling this feature.

Support added to GitLab Workhorse by gitlab-org/gitlab-workhorse!232
2018-04-04 16:56:18 -04:00
Felipe Artur ad7148d9ea Allow assigning and filtering issuables by ancestor group labels 2018-04-04 15:40:29 +00:00
Micaël Bergeron fc6587f1f2 Add proxy_download to perform proxied sending of all files 2018-03-09 09:16:06 -05:00
Kamil Trzciński a2f375e8f7 Merge remote-tracking branch 'origin/master' into object-storage-ee-to-ce-backport 2018-02-28 21:28:43 +01:00
Kamil Trzciński 729391fbfc Merge commit '8af23def1d6' into object-storage-ee-to-ce-backport 2018-02-28 21:11:53 +01:00
Grzegorz Bizon b14c484bb1 Merge branch 'use-send-url-for-incompatible-runners' into 'master'
Support SendURL for performing indirect download of artifacts if clients does…

See merge request gitlab-org/gitlab-ee!4401
2018-02-28 20:58:56 +01:00
Kamil Trzciński 45d2c31643 Merge commit '4b92efd90cedaa0aff218d11fdce279701128bea' into object-storage-ee-to-ce-backport 2018-02-28 20:46:53 +01:00