Andras Bacsai 6f557cf17f fix(security): enforce GitLab App authorization parity with GitHub ...

GitlabAppPolicy previously allowed any authenticated user to update,
delete, and create GitLab sources. Align it with GithubAppPolicy, require
Application create authorization on the private-repo wizard, and reject
OAuth callbacks from non-admins so members cannot escalate privileges.

2026-07-20 23:21:40 +02:00

..

Application

feat: self-hosted GitLab Apps OAuth integration

2026-07-20 23:21:40 +02:00

Database

fix(backups): pin S3 per volume execution and harden deletes

2026-07-16 14:30:58 +02:00

New

fix(security): enforce GitLab App authorization parity with GitHub

2026-07-20 23:21:40 +02:00

Resource

feat(v5): gate V5 to development environments only

2026-07-19 11:44:12 +02:00

Service

fix(backups): enforce authorization and safe retention

2026-07-19 23:15:55 +02:00

Shared

fix(backups): enforce authorization and safe retention

2026-07-19 23:15:55 +02:00

AddEmpty.php

fix(security): enforce team access on mutable actions

2026-06-04 11:03:06 +02:00

CloneMe.php

fix(resources): clarify build server hosting restrictions (#10961)

2026-07-16 21:35:23 +02:00

DeleteEnvironment.php

Merge remote-tracking branch 'origin/next' into audit-policies

2026-06-02 12:03:38 +02:00

DeleteProject.php

Merge remote-tracking branch 'origin/next' into audit-policies

2026-04-19 15:19:37 +02:00

Edit.php

refactor(auth): enforce team member authorization across app

2026-02-27 11:41:01 +01:00

EnvironmentEdit.php

refactor(auth): enforce team member authorization across app

2026-02-27 11:41:01 +01:00

Index.php

refactor: replace queries with cached versions for performance improvements

2025-12-08 13:39:33 +01:00

Show.php

fix(security): enforce team access on mutable actions

2026-06-04 11:03:06 +02:00