Skip to content

Update permissions for Dependencies and Dependency list

Tetiana Chupryna requested to merge 13247-dependencies-permissions into master

What does this MR do?

A part of #13247 (closed)

  1. We remove dependency_list license feature to simplify permissions. Dependency list feature is based on Dependency scanning so we just check if this second feature is available. That will help to simplify rules and make fewer mistakes with permissions. Although, permission levels stay the same.

Does this MR meet the acceptance criteria?

Conformity

Availability and Testing

Security

If this MR contains changes to processing or storing of credentials or tokens, authorization and authentication methods and other items described in the security review guidelines:

  • Label as security and @ mention @gitlab-com/gl-security/appsec
  • The MR includes necessary changes to maintain consistency between UI, API, email, or other methods
  • Security reports checked/validated by a reviewer from the AppSec team
Edited by Tetiana Chupryna

Merge request reports