Allow public projects to disable SPP
Problem to solve
Once SPP has been enabled by default for for public projects, Free and Premium projects should be able to disable SPP.
Proposal
Maintainers and Owners will continue to be able to toggle on/off secret push protection via:
- The REST API endpoint or the GraphQL mutation on a per project level
- Via the UI in Security Configuration Page1
1. The Security Configuration Page IS available for GitLab Free and GitLab Premium.
Security Configuration Page
If the project is public, for all tiers, add the following tile, so users can disable secret push protection on the Security Configuration Page:
For GitLab Free or GitLab Premium private projects, users should not be able to turn on secret push protection. Instead, they will see:
Text in the upper right hand corner is still being finalized, please reference this comment for updates!
For GitLab Ultimate private projects, users can turn on/off secret push protection, this is existing functionality today.