Skip to content
代码片段 群组 项目
  • Andrew Evans's avatar
    a2ec5c40
    Service accounts can be added to LDAP-synced groups · a2ec5c40
    Andrew Evans 创作于
    See [425947](https://gitlab.com/gitlab-org/gitlab/-/issues/425947) for
    details.
    
    Allows adding service account users to groups even when LDAP sync is
    enabled. To do this, we make some major changes:
    
    - Add a new permission: `admin_service_account_members` ; this way we
      can check for group admin permissions even when those have been
      mostly disabled by setting the group to LDAP syncing
    - Switch which permission we check in the service layer when creating
      new `Member` objects for groups <-> service account users
    - Remove multiple layers of duplicative permission checking from the API
      and upper-level services
    
    The new permission is only valid when the `service_accounts` licensed
    feature is enabled.
    
    Added some additional error handling to ensure there are no changes in
    the API status codes or object returns.
    
    Changelog: changed
    EE: true
    未验证
    a2ec5c40
    历史
    Service accounts can be added to LDAP-synced groups
    Andrew Evans 创作于
    See [425947](https://gitlab.com/gitlab-org/gitlab/-/issues/425947) for
    details.
    
    Allows adding service account users to groups even when LDAP sync is
    enabled. To do this, we make some major changes:
    
    - Add a new permission: `admin_service_account_members` ; this way we
      can check for group admin permissions even when those have been
      mostly disabled by setting the group to LDAP syncing
    - Switch which permission we check in the service layer when creating
      new `Member` objects for groups <-> service account users
    - Remove multiple layers of duplicative permission checking from the API
      and upper-level services
    
    The new permission is only valid when the `service_accounts` licensed
    feature is enabled.
    
    Added some additional error handling to ensure there are no changes in
    the API status codes or object returns.
    
    Changelog: changed
    EE: true
代码所有者
将用户和群组指定为特定文件更改的核准人。 了解更多。