Skip to content

Add rate limits to Bulk Import API

Currently Bulk Import API and controller actions are not rate limited. This allows for an unlimited number of import requests.

Controller: https://gitlab.com/gitlab-org/gitlab/blob/06f5762b5177752d4adf5319e2354c9e9e9b98c4/app/controllers/import/bulk_imports_controller.rb#L1-1

API: https://gitlab.com/gitlab-org/gitlab/blob/06f5762b5177752d4adf5319e2354c9e9e9b98c4/lib/api/bulk_imports.rb#L1-1

We should limit the number of import requests per user to a reasonable number. For instance, project import is currently rate limited to default 6 requests per minute (application setting).