Skip to content

Update GraphQL project type field container_registry_enabled [RUN ALL RSPEC] [RUN AS-IF-FOSS]

Reuben Pereira requested to merge 18792-update-graphql-api into master

What does this MR do?

Project#container_registry_enabled is being migrated to ProjectFeature#container_registry_access_level to allow the visibility of the Container Registry to be independent of the project visibility. Currently, if a user has access to a project, the user has access to the Container Registry as well. Once the migration is complete, admins will be able to set the visibility of the Container Registry to private even if the project is public. See #18792 (comment 624799727) for the current state of the migration.

This MR updates the container_registry_enabled field in GraphQL to return false if the container registry is enabled but the user does not have access to it.

Screenshots or Screencasts (strongly suggested)

Does this MR meet the acceptance criteria?

Conformity

Availability and Testing

Security

Does this MR contain changes to processing or storing of credentials or tokens, authorization and authentication methods or other items described in the security review guidelines? If not, then delete this Security section.

  • Label as security and @ mention @gitlab-com/gl-security/appsec
  • The MR includes necessary changes to maintain consistency between UI, API, email, or other methods
  • Security reports checked/validated by a reviewer from the AppSec team

Related to #18792 (closed)

Edited by Mayra Cabrera

Merge request reports