1. 11 May, 2016 2 commits
  2. 10 May, 2016 1 commit
    • Sean McGivern's avatar
      Restrict starred projects to viewable ones · 97424ea5
      Sean McGivern authored
      `User#starred_projects` doesn't perform any visibility checks. This has
      a couple of problems:
      
      1. It assumes a user can always view all of their starred projects in
         perpetuity (project not changed to private, access revoked, etc.).
      2. It assumes that we'll only ever allow a user to star a project they
         can view. This is currently the case, but bugs happen.
      
      Add `User#viewable_starred_projects` to filter the starred projects by
      those the user either has explicit access to, or are public or
      internal. Then use that in all places where we list the user's starred
      projects.
      97424ea5
  3. 09 May, 2016 1 commit
  4. 06 May, 2016 2 commits
  5. 04 May, 2016 1 commit
  6. 03 May, 2016 1 commit
  7. 26 Apr, 2016 1 commit
  8. 19 Apr, 2016 1 commit
  9. 18 Apr, 2016 2 commits
  10. 08 Apr, 2016 1 commit
  11. 31 Mar, 2016 1 commit
  12. 30 Mar, 2016 3 commits
  13. 24 Mar, 2016 1 commit
  14. 19 Mar, 2016 2 commits
  15. 17 Mar, 2016 1 commit
  16. 15 Mar, 2016 1 commit
  17. 13 Mar, 2016 2 commits
  18. 12 Mar, 2016 1 commit
    • Yorick Peterse's avatar
      Removed User#project_relations · 3b76b73a
      Yorick Peterse authored
      GitLab EE adds an extra relation that selects a "project_id" column
      instead of an "id" column, making it very hard for this method to be
      re-used in EE. Since using User#authorized_groups in
      ProjectsFinder#all_groups apparently has no performance impact we can
      just use it and keep everything compatible with EE.
      3b76b73a
  19. 11 Mar, 2016 4 commits
  20. 10 Mar, 2016 1 commit
  21. 29 Feb, 2016 3 commits
  22. 24 Feb, 2016 1 commit
  23. 20 Feb, 2016 2 commits
  24. 18 Feb, 2016 1 commit
  25. 17 Feb, 2016 1 commit
  26. 09 Feb, 2016 2 commits