ProjectFeatures not limited to PRIVATE for private projects when setting via API
When changing the visiblity of a project to private
in the UI, it automatically changes the ProjectFeatures
access_level
to PRIVATE
too. However, when using the API, it is possible to set to a value higher than PRIVATE
.
curl -X PUT --header "PRIVATE-TOKEN: $TOKEN" --data 'issues_enabled=true' http://localhost:3000/api/v4/projects/8
Response:
{...,"visibility":"private",...,"issues_enabled":true,...}
Thanks @sathieu for mentioning in https://gitlab.com/gitlab-org/gitlab-ce/merge_requests/28327#note_171167801
Edited by Imre Farkas