• Alexandru Croitor's avatar
    Prevent non-owners to set system_note_timestamp · daeb7d83
    Alexandru Croitor authored
    When an issue is created or updated though API for import
    purposes we allow providing created_at and updated_at params
    these would then be reflected also in system notes. Only admins
    and project owners should be able to set these dates.
    daeb7d83
security-disallow-changing-timestamps-on-issue-create-update.yml 98 Bytes