Skip to content

Allow public access to some Project API endpoints

Rémy Coutable requested to merge 4269-public-api into master

What does this MR do?

This opens up a few endpoints in the Project API:

  • GET /projects/visible (returns public projects only)
  • GET /projects/search/:query (returns results only for public projects)
  • GET /projects/:id (only if the project is public)
  • GET /projects/:id/events (only if the project is public)
  • GET /projects/:id/users (only if the project is public)

Are there points in the code the reviewer needs to double check?

I've chosen to explicitly add authenticate! to GET methods that still need a current user.

Does this MR meet the acceptance criteria?

Part of #4269 (closed)

Merge request reports