Developer can create projects in group
HackerOne report #446683 by ashish_r_padelkar on 2018-11-18:
Summary:
Hello,
As per documentation of group permissions, A Developer
can not create Projects within a Group.
https://gitlab.com/help/user/permissions
Description:
A user with Developer
role should not be able to create projects within a group if we go as per documentation.
However, they are allowed to create projects directly at https://gitlab.com/<PrivateGroupName>
Steps To Reproduce:
- As a developer in a group go to
https://gitlab.com/<PrivateGroupName>
- You will find a button to create project
New Project
- Click on it and give a appropriate name to the project
- Project will be successfully created!
Regards, Ashish
Impact
Developer can create projects within a group
Attachments
Warning: Attachments received through HackerOne, please exercise caution!
Edited by Dennis Appelt