project_count size in /groups/???/-/children.json does not take user access permissions into account and returns the full size.

Summary

project_count size in /groups/???/-/children.json does not take user access permissions into account and returns the full size. This then manifests in a UI issue which states that there are X more items, however clicking on this only returns the subset that the user can see.

Steps to reproduce

• Change permissions for a user so that they can only see a subset of the projects in a folder.
• Expand the folder in the UI, you should see an additional button that says 'X more items' and the JSON response will have an incorrect number in the project_count field.

Example Project

N/A

What is the current bug behavior?

project_count size in /groups/???/-/children.json does not take user access permissions into account and returns the full size.

What is the expected correct behavior?

project_count should take user permissions into account and display the total number of projects the user can see in that folder.

Output of checks

This bug happens on GitLab.com

Possible fixes

Probably missing a filter when calculating the total.

~bug

changed the description

mentioned in issue #118608 (closed)

added groupauthentication and authorization [DEPRECATED] typebug + 1 deleted label

added severity3 label

added devopsmanage label and removed 1 deleted label

mentioned in issue #121479 (closed)

mentioned in issue #193026 (closed)

mentioned in issue #195098 (closed)

Setting ~"Category:Authentication and Authorization" based on ~"group::access".

Setting ~"Category:Authentication and Authorization" based on ~"group::access".

Setting ~"Category:Authentication and Authorization" based on ~"group::access".

added 1 deleted label

mentioned in issue #196462 (closed)

mentioned in issue #197796 (closed)

mentioned in issue #201613 (closed)

changed the description

added sectiondev label

added vintage label

Hi @CoolName1993 ,

Thanks for raising this bug.

Contributions like this are vital to help make GitLab a better product.

We would be grateful for your help in verifying whether your bug report requires further attention from the team. If you think this bug still exists, and is reproducible with the latest stable version of GitLab, please comment on this issue.

This issue has been inactive for more than 12 months now and based on the policy for inactive bugs, will be closed in 7 days.

Thanks for your contributions to make GitLab better!

added stale label

Hi @CoolName1993 ,

Based on the policy for inactive bugs, this issue is now being closed.

If you think this bug still exists, and is reproducible with the latest stable version of GitLab, please reopen this issue.

Thanks for your contributions to make GitLab better!

closed

added auto closed label