Skip to content

Confirm VR Filtering Permissions for Group and Instance Level

This is how the the VR filtering ability is currently being displayed in the Group and Instance level based on the respective GitLab duo setting.

The changes will take effect after this MR has been merged: Enable VR filter in vulnerability report for Gr... (!167460 - merged).

Permissions Docs:

Note: There is an ongoing discussion regarding what expected behavior at both the Group and Instance levels: &15036 (comment 2142114823) should actually be. While we wait for a final decision on that discussion, for now, we only need to document the current behavior in the handbook for clarity.

Group Vulnerability Report

The Group only has ONE project

Group: it displays the VR filtering ability only when the Group's duo setting is on

Group Setting

Group Vulnerability Report +

Project's GitLab Duo on

Group Vulnerability Report +

Project's GitLab Duo off

On by default

image

Yes VR filter

image.png

Yes VR filter


image

Off by default


image

No VR filter

image.png

No VR filter


image

Never on


image

No VR filter


image

No VR filter


image

Instance Vulnerability Report

The Instance only has ONE project

Instance: it displays the VR filtering ability based on the lowest denominator, meaning that the settings applied at the project level take precedence.

Instance Setting

Instance Vulnerability Report +

Project's GitLab Duo on

Instance Vulnerability Report +

Project's GitLab Duo off

On by default


image

Yes VR filter


image

No VR filter


image

Off by default


image

Yes VR filter


image

No VR filter


image

Never on


image

Yes VR filter

image.png

No VR filter


image

Project Vulnerability Report

For reference, this Is how the project vulnerability report behaves based on the setting. It only displays if the GitLab Duo is on.

Setting Project Vulnerability Report

On

image.png

Yes VR filter

image.png

Off

image.png

No VR filter

image.png

Edited by Samantha Ming