Add per-user daily rate limit on project and group creation
What does this MR do and why?
- Add per-user daily rate limit of 200/day on project and group creation to prevent abusive behaviour.
Screenshots or recordings
Groups API
Projects API
Steps to reproduce
- Enable the feature flag
Feature.enable(:namespace_create_rate_limit)-
Configure the rate limits by navigating to
Admin > Settings > Network > Projects API rate limits. Update the value to2for now. -
Restart GDK
-
Try to create multiple projects either using the UI or the API:
curl --request POST \
--header "PRIVATE-TOKEN: <your_token>" \
--header "Content-Type: application/json" \
--data '{"name": "Test <X>"}' \
"<GDK>/api/v4/projects"MR acceptance checklist
Evaluate this MR against the MR acceptance checklist. It helps you analyze changes to reduce risks in quality, performance, reliability, security, and maintainability.
Resolves #601717 (comment 3550482742)
Edited by Hinam Mehra

