Skip to content

Only check ES index_exists? when modify Advanced Search settings

What does this MR do?

Any time the Application Admin Settings get updated, we check if the Elasticsearch index exists. This should only happen when changing a setting from the Advanced Search page. However, I couldn't find a great way to determine which controller or form was making these changes due to all of the settings being stored in one table and the update being done in a service. The only differentiation is that the field names almost all start with elasticsearch_* on the Advanced Search form.

This MR changes two fields which did not follow the elasticsearch_* naming convention and only does the index_exists? call if one of those fields are in the params.

Screenshots (strongly suggested)

Does this MR meet the acceptance criteria?

Conformity

Availability and Testing

Security

Does this MR contain changes to processing or storing of credentials or tokens, authorization and authentication methods or other items described in the security review guidelines? If not, then delete this Security section.

  • Label as security and @ mention @gitlab-com/gl-security/appsec
  • The MR includes necessary changes to maintain consistency between UI, API, email, or other methods
  • Security reports checked/validated by a reviewer from the AppSec team

Related to #321742 (closed)

Edited by Terri Chu

Merge request reports