Investigate/Fix: Quick actions for reviewers allow groups assignment
Problem to Solve
GitLab does not support groups in the assignee
or reviewer
fields for issues or merge requests. However, in some cases the /assign_reviewer
quick action allowed specifying a group which would then add all those users as reviewers.
This is unexpected behavior because the UI elements of reviewers do not have this same capability and users can build expectation around undocumented or unsupported "features".
Additional details
This can also lead to unintended and potentially abuse vectors if someone were to specify @all
in a quick action.
Proposal
It is possible that this functionality no longer works and may have been fixed by other work in an unrelated way. We should:
- Investigate if this behavior is still supported
- Correct this behavior so that quick actions do not support groups and are consistent with the UI
Edited by Kai Armstrong