Add MR approval settings to Compliance Dashboard
Problem to solve
Organizations need visibility into the compliance status of their groups and projects. One element of compliance is the concept of "separation of duties". There isn't a single view for an admin or group owner to view the MR approval settings for their projects.
Intended users
Further details
The merge request approval settings are one of the most asked-about features of GitLab. In almost every customer conversation, concerns are raised about the need to set and enforce these settings across an instance or group.
Providing an indication that some baseline setting profile is enabled would be helpful for visibility.
Proposal
Add a visual indicator for a project's MR approval settings in the Compliance Dashboard to communicate whether or not the project is adhering to separation of duties.
- If
MR authors
are not allowed to approve MRs:✅ - If
MR committers
are not allowed to approve MRs:✅ - If
required approvers
is equal to or greater than 2:✅ - If all of the above are true:
✅ - If one of the above is false:
⚠ - If none of the above are true:
❌
Design
The indicators for this MVC should copy that of CI pipeline icons.
Pipeline + MR |
---|
Full spec to be added.