Skip to content

Fix confidential note attribute getter

Jarka Košanová requested to merge 217616-fix-note-confidential into master

What does this MR do?

Before we implemented confidential attribute on notes we had method confidential? on Note model that checked the value of noteable (issue).

During implementation of confidential notes we combined confidential check of a note and a notable. If either a note or a notable is confidential, the note is marked as confidential.

That is, however, against the purpose of confidential notes. We want to see confidential icon only when note itself is confidential.

I found one place where we want to see note as confidential when issue is confidential but note is not. I therefore introduced a param to the confidential? method.

I am open to renaming that method for that specific case but don't have a strong opinion here.

Screenshots

Does this MR meet the acceptance criteria?

Conformity

Availability and Testing

Security

If this MR contains changes to processing or storing of credentials or tokens, authorization and authentication methods and other items described in the security review guidelines:

  • Label as security and @ mention @gitlab-com/gl-security/appsec
  • The MR includes necessary changes to maintain consistency between UI, API, email, or other methods
  • Security reports checked/validated by a reviewer from the AppSec team

Issue #217616 (closed)

Edited by Yorick Peterse

Merge request reports