Prevent users from creating projects outside of the group level
Description
Provide a way to prevent users from being able to create or access any projects outside of those available at the group level.
Proposal
Only users with the proper group level permission should be able to create projects, and then only at the group level. No indidvidual projects whether created, imported, mirrored, etc.
Several prospects in the financial services industry have asked for this. They do not want their users to be able to do anything that is not shared at the group level. There may be some sort of governmental or regulatory requirements that led to their request.
Technical implementation
- Add a settings in
/admin/application_settings
, which is checked by default: - When unchecked, If Guest, Reporter or Developer:
- Hide the "+" button in the header
- Hide the
New project
button in/dashboard/projects
- Hide the
New project
button in/
- When unchecked, If Master or Owner:
- In
/projects/new
, a project can only be created under a group.
- In
- Only new projects will be prevented from being created - individual existing projects will have to be manually removed.
Links / references
This CE issue seems related: https://gitlab.com/gitlab-org/gitlab-ce/issues/18342
Edited by 🤖 GitLab Bot 🤖