Prevent namespace creation on enabled BSO and on user limit
What does this MR do and why?
This change introduces seat management controls to prevent users from creating groups and projects when block seat overages is activated and no seats are available.
The user interface text was also updated to clarify that the "Restricted access" setting now prevents both exceeding the licensed seat count and stops non-members from creating groups and projects when seats aren't available.
This helps organizations better control their GitLab usage and ensures they don't accidentally exceed their licensed capacity through new group and project creation.
References
Screenshots or screen recordings
When BSO is enabled, user limit is reached and general setting Allow users with up to Guest role to create groups and personal projects
is activated, we now still deny the creation of groups and projects for non-billable users.
Before | After | |
---|---|---|
How to set up and validate locally
- Activate Self-Managed BSO
- Ensure all seats are taken, for example, by using an Ultimate license with only one seat
- Activate general setting
Allow users to Guest role to create groups and personal projects
here - Log in as a user who has only a guest role
- Try to create a group or project in your own user namespace
- It should not be possible any longer, and with that, the user can't become billable
🎉
MR acceptance checklist
Evaluate this MR against the MR acceptance checklist. It helps you analyze changes to reduce risks in quality, performance, reliability, security, and maintainability.