Inconsistency between Git clients and GitLab API regarding commits
On the commits API, you use /projects/:id/repository/commits. See https://gitlab.com/gitlab-org/gitlab-ee/blob/master/doc//api/commits.md
However, for ID, you can only provide the ID of a project or namespace/project_name which the currently authenticated user actually owns.
Otherwise, you get a HTTP 403 as return value.
I would expect that you could list get the list of repository commits of projects which you can also get the list of commit through the web frontend or which you can clone/fork.
Is it possible to alleviate the privileges such that the behaviour in the web frontend is identical to the behaviour of API (i.e. extend the possibilities of the API).