changelogs/unreleased/security-53543-user-keeps-access-to-mr-issue-when-removed-from-team.yml · ec4ade500e5eb7060b4b79f6bed2f474ce03a851 · nexedi / gitlab-ce · GitLab

Find file Blame History Permalink

Adds validation to check if user can read project · 52feca59
Tiago Botelho authored Dec 07, 2018
```
An issuable should not be available to a user if the
project is not visible to that specific user
```
52feca59

security-53543-user-keeps-access-to-mr-issue-when-removed-from-team.yml 117 Bytes