Skip to content
Snippets Groups Projects

Expose project settings in REST API only for maintainer+ users

Merged Hinam Mehra requested to merge 442899-update-project-rest-api into master

What does this MR do and why?

Expose project settings in REST API only for maintainer+ users

MR acceptance checklist

Please evaluate this MR against the MR acceptance checklist. It helps you analyze changes to reduce risks in quality, performance, reliability, security, and maintainability.

How to set up and validate locally

  1. Add a user to as a Guest to a project.
  2. Create a personal access token as that user and then query the REST API curl --header "Authorization: Bearer <ACCESS-TOKEN>" "http://127.0.0.1:3000/api/v4/projects/<PROJECT_ID>"
  3. You shouldn't see any project settings.
  4. However, if you upgraded that user to the Maintainer of the project, you should see all the project settings

Related to #442899 (closed)

Edited by Hinam Mehra

Merge request reports

Loading
Loading

Activity

Filter activity
  • Approvals
  • Assignees & reviewers
  • Comments (from bots)
  • Comments (from users)
  • Commits & branches
  • Edits
  • Labels
  • Lock status
  • Mentions
  • Merge request status
  • Tracking
  • Hinam Mehra added 1 commit

    added 1 commit

    • 2664eda7 - Fix failures in project's grape entity

    Compare with previous version

  • Hinam Mehra added 1 commit

    added 1 commit

    • fcefac54 - Fix failures in project's grape entity

    Compare with previous version

  • Hinam Mehra added 442 commits

    added 442 commits

    • fcefac54...4a39e2ac - 440 commits from branch master
    • 609b62bd - Expose project settings in REST API only for maintainer+ users
    • 943f9850 - Fix failures in project's grape entity

    Compare with previous version

  • Hinam Mehra requested review from @dgruzd

    requested review from @dgruzd

  • Dmitry Gruzd approved this merge request

    approved this merge request

  • added pipelinetier-3 label and removed pipelinetier-2 label

  • Dmitry Gruzd resolved all threads

    resolved all threads

  • Dmitry Gruzd enabled an automatic merge when the pipeline for 96d96119 succeeds

    enabled an automatic merge when the pipeline for 96d96119 succeeds

  • merged

  • Dmitry Gruzd mentioned in commit 8342ab49

    mentioned in commit 8342ab49

  • Loading
  • Loading
  • Loading
  • Loading
  • Loading
  • Loading
  • Loading
  • Loading
  • Loading
  • Loading
  • Please register or sign in to reply
    Loading