Prevent Access to Project in Pending Deletion State

Proposal

Prevent access to a pending deletion project except via "Click Ops"

Details

  1. A Gitlab Project is selected for deletion and marked pending deletion.

  2. After X time the project is permanently deleted. However, in this pending phase, it is possible to still access the project, in particular, automation can still access packages if a company houses packages in one project (per this Gitlab doc)

  3. Once the project is deleted, automation breaks, npm/yarn install sees 404. It is not possible to restore the project at this point.

  4. Much is required to restore packages and MRs created to point to the new Project ID.

Background

A Gitlab project was marked as deleted internal by accident since it seemed empty and the associated NPM packages don't directly appear attached to a project. No one noticed until the project was deleted and everything broke (404). Had there been a 403 enforced on the pending deletion state, we could've prevented a several day fix by simply restoring the project.

Edited by Brad Beggs