Skip to content

Fix Namespace list API for compliance framework

Aishwarya Subramanian requested to merge fix_compliance_framework_list_api into master

What does this MR do?

!54088 (merged) updated feature flag and license check for compliance_framework attribute to namespace level. This change was made to support the enablement of the feature for individual namespaces in gitlab.com.

compliance_frameworks attribute in Namespace list API is currently guarded by a global FF check.

This MR adds a resolver for compliance_framework attribute and checks if the current user has the ability to admin compliance frameworks in the namespace under consideration.

Screenshots (strongly suggested)

Before After
before after

Does this MR meet the acceptance criteria?

Conformity

Availability and Testing

Security

If this MR contains changes to processing or storing of credentials or tokens, authorization and authentication methods and other items described in the security review guidelines:

  • Label as security and @ mention @gitlab-com/gl-security/appsec
  • The MR includes necessary changes to maintain consistency between UI, API, email, or other methods
  • Security reports checked/validated by a reviewer from the AppSec team
Edited by Aishwarya Subramanian

Merge request reports