Skip to content

Check if current user is present in Events api

What does this MR do?

!19816 (merged) added a scope parameter to /events.

However, the API returns a 500 error when scope is passed and current_user is not present. This is because a user's projects are used in the query that returns all events.

This change adds a check to confirm that current_user is provided before trying to run the query when scope is passed

Screenshots

Does this MR meet the acceptance criteria?

Conformity

Availability and Testing

Security

If this MR contains changes to processing or storing of credentials or tokens, authorization and authentication methods and other items described in the security review guidelines:

  • [-] Label as security and @ mention @gitlab-com/gl-security/appsec
  • [-] The MR includes necessary changes to maintain consistency between UI, API, email, or other methods
  • [-] Security reports checked/validated by a reviewer from the AppSec team

#18999 (closed)

Edited by Brian Kabiro

Merge request reports