Skip to content

Add control to limit guests and below to create project

What does this MR do and why?

Adds control which can be used to limit the behaviour of GUEST and lower Role users.

If the flag is set to true (default), the behaviour would be as current prod(GUEST and lower Role users can create personal projects), this flag will always be true for Gitlab.com.

If the flag is set to false , GUEST and lower Role Users would not be allowed to create projects and groups, as creating projects or group can promote them into a paid seat.

This setting is always on, and will be used by SelfManaged Ultimate customers to limit non billable users from self promoting to a paid Seat. For SelfManaged instances on Ultimate tier, GUEST and lower Role Users can create a project and group and promote themselves into a paid seat, without the Admin having any control over this, which directly impacts their billing. This setting allows admin to decide if they wish for GUEST and lower Role to create project or groups, and in doing so stopping them from Self Promoting.

ref: #426279 (closed)

Screenshots or screen recordings

Screenshots are required for UI changes, and strongly recommended for all other merge requests.

Before After

How to set up and validate locally

  1. Login as Admin and navigate to <local-gitlab setup>/admin/application_settings/general#js-account-settings

  2. Toggle this checkbox to off, should be (on) by default

    Screenshot 2023-11-11 at 9.31.16 PM.png

  3. Login through a guest user and verify you cannot see a "New Project" button on the Project Dashboard /dashboard/projects

  4. Verify you cannot see a "New Group" button on the Group Dashboard /dashboard/groups

  5. Toggle the checkbox back on

  6. Verify that you can now create Group and Projects by navigating to the routes mentioned on point 3 and 4

MR acceptance checklist

This checklist encourages us to confirm any changes have been analyzed to reduce risks in quality, performance, reliability, security, and maintainability.

Edited by Suraj Tripathi

Merge request reports