Revisit Pipeline visibility details
Issue
The changes add in !21297 (merged) are still not making this clear, and could even be wrong. We should double check everything and clarify it.
The initial research was tracked in https://gitlab.com/gitlab-org/gitlab/-/issues/25542#note_222947307, but I'm not convinced I got it all right and need to repeat it to make sure it's true.
The docs have been updated over time, and the key details are in https://docs.gitlab.com/ee/ci/pipelines/settings.html#change-which-users-can-view-your-pipelines, and probably should be double checked.
Table of permissions to check
| Action | Project Visibility | Pipeline Visibility | Non-member | Guest | Reporter | Developer | Maintainer | Owner |
|---|---|---|---|---|---|---|---|---|
| View pipelines page | Public | Public | Y | Y | Y | |||
| View pipelines page | Public | Private | N | N | Y | |||
| View pipelines page | Private | Public | N | Y | Y | |||
| View pipelines page | Private | Private | N | N | Y | |||
| View pipelines tab in MR | Public | Public | Y | Y | Y | |||
| View pipelines tab in MR | Public | Private | Y | Y ??? | Y | |||
| View pipelines tab in MR | Private | Public | N | N (from MR perms) | Y | |||
| View pipelines tab in MR | Private | Private | N | N | Y | |||
| View pipeline details | Public | Public | Y | Y | Y | |||
| View pipeline details | Public | Private | N | N | Y | |||
| View pipeline details | Private | Public | N | Y | Y | |||
| View pipeline details | Private | Private | N | N | Y | |||
| View a list of jobs | Public | Public | Y | Y | Y | |||
| View a list of jobs | Public | Private | N | N | Y | |||
| View a list of jobs | Private | Public | N | Y | Y | |||
| View a list of jobs | Private | Private | N | N | Y | |||
| View a job detail page (same as log?) | Public | Public | Y | Y | Y | |||
| View a job detail page | Public | Private | N | N | Y | |||
| View a job detail page | Private | Public | N | Y | Y | |||
| View a job detail page | Private | Private | N | N | Y | |||
| See that artifacts exist in MR pipelines tab | Public | Public | Y | Y | Y | |||
| See that artifacts exist in MR pipelines tab | Public | Private | Y | Y | Y | |||
| See that artifacts exist in MR pipelines tab | Private | Public | N | N | Y | |||
| See that artifacts exist in MR pipelines tab | Private | Private | N | N | Y | |||
| Download artifacts from the pipelines page | Public | Public | N | Y | Y | |||
| Download artifacts from the pipelines page | Public | Private | N | N | Y | |||
| Download artifacts from the pipelines page | Private | Public | N | Y | Y | |||
| Download artifacts from the pipelines page | Private | Private | N | N | Y | |||
| Download artifacts from the job detail page | Public | Public | N | Y | Y | |||
| Download artifacts from the job detail page | Public | Private | N | N | Y | |||
| Download artifacts from the job detail page | Private | Public | N | Y | Y | |||
| Download artifacts from the job detail page | Private | Private | N | N | Y | |||
| View a Job Log | Public | Public | Y | Y | Y | |||
| View a Job Log | Public | Private | N | N | Y | |||
| View a Job Log | Private | Public | N | Y | Y | |||
| View a Job Log | Private | Private | N | N | Y | |||
| View a job with debug logging | Public | Public | N | N | N | Y | ||
| View a job with debug logging | Public | Private | N | N | N | Y | ||
| View a job with debug logging | Private | Public | N | N | N | Y | ||
| View a job with debug logging | Private | Private | N | N | N | Y | ||
| View environments | Public | Public | Y | Y | Y | |||
| View environments | Public | Private | Y | Y | Y | |||
| View environments | Private | Public | N | N | Y | |||
| View environments | Private | Private | N | N | Y | |||
| View CI/CD settings | Public | Public | N | N | N | N | Y | |
| View CI/CD settings | Public | Private | N | N | N | N | Y | |
| View CI/CD settings | Private | Public | N | N | N | N | Y | |
| View CI/CD settings | Private | Private | N | N | N | N | Y | |
| View Pipeline Editor | Public | Public | N | N | N ? | Y | ||
| View Pipeline Editor | Public | Private | N | N | N | Y | ||
| View Pipeline Editor | Private | Public | N | N | N | Y | ||
| View Pipeline Editor | Private | Private | N | N | N | Y | ||
| View MR | Public | Public | Y | Y ? | Y | |||
| View MR | Public | Private | Y | Y ? | Y | |||
| View MR | Private | Public | N | N ? | Y | |||
| View MR | Private | Private | N | N ? | Y |
Edited by Marcel Amirault