Skip to content
Snippets Groups Projects
  1. Jan 08, 2024
  2. Jan 03, 2024
  3. Dec 21, 2023
  4. Dec 19, 2023
  5. Dec 18, 2023
  6. Dec 15, 2023
  7. Dec 14, 2023
  8. Dec 13, 2023
    • Jessie Young's avatar
      Consolidate policy-related LLM auth · 5bed4e6f
      Jessie Young authored
      - Previously, each policy was checking the following things:
        - ai_global_switch ops FF enabled
        - AI license available
        - AI feature available via StageCheck
        - Is the user actually a member of the parent resource? (only members
        can use AI features)
      - Now, any permissions checks related to AI features can call
        `Llm::FeatureAuthorizer` and be confident that they are making all of
        the correct checks.
      - Follow-up to !137362
      Verified
      5bed4e6f
  9. Dec 12, 2023
  10. Dec 11, 2023
  11. Dec 10, 2023
    • Pam Artiaga's avatar
      Fetch group and project after session has been loaded · f662289f
      Pam Artiaga authored and Thong Kuah's avatar Thong Kuah committed
      The group and project objects are called in a `prepend_before_action`
      so that they are fetched before the authorization checks
      (e.g.: authorize_admin_cluster, authorize_update_cluster).
      
      However, this results in a bug because fetching the group or project
      requires the session to be loaded already, and `prepend_before_action`
      calls happen before the session is loaded.
      
      To resolve the problem, we will instead load the group or project
      object in the very first `before_action` in the ClustersController
      call stack.
      
      Changelog: fixed
      f662289f
  12. Dec 08, 2023
  13. Dec 07, 2023
  14. Dec 06, 2023
  15. Dec 01, 2023
  16. Nov 30, 2023
  17. Nov 28, 2023
  18. Nov 24, 2023
  19. Nov 21, 2023
  20. Nov 20, 2023
  21. Nov 15, 2023
  22. Nov 14, 2023
    • Hordur Freyr Yngvason's avatar
      Add settings to allow merge without pipeline · 6a5a0bcc
      Hordur Freyr Yngvason authored and Alper Akgun's avatar Alper Akgun committed
      Split out of
      !135276, as it was
      getting too large and we should start getting parts of this merged. This
      only adds a feature flagged project setting (it does not implement the
      updated mergeability check).
      
      When "Pipelines must succeed" is selected, it is currently not possible
      to merge without a pipeline. This includes cases where the configuration
      is technically valid, but the pipeline is intentionally not created, such
      as:
      
      - pipeline was omitted because no jobs matched `rules` and `only/except`
      - pipeline was omitted via `workflow:rules`
      - there was no `.gitlab-ci.yml`
      
      Changing this behavior is not backwards-compatible, because there is no
      way of knowing if an external CI system is running for a given change.
      So we add a project setting instead.
      
      See #334281
      
      Changelog: changed
      6a5a0bcc
  23. Nov 13, 2023
  24. Nov 10, 2023
Loading