Skip to content
代码片段 群组 项目
该项目从 https://gitlab.com/gitlab-org/gitlab.git 镜像。 拉取镜像更新于
  1. 7月 27, 2024
  2. 7月 26, 2024
  3. 7月 25, 2024
  4. 7月 24, 2024
  5. 7月 23, 2024
  6. 7月 22, 2024
  7. 7月 20, 2024
  8. 7月 19, 2024
  9. 7月 18, 2024
  10. 7月 17, 2024
  11. 7月 16, 2024
  12. 7月 15, 2024
  13. 7月 14, 2024
  14. 7月 13, 2024
    • Nick Malcolm's avatar
      Create bot users with indefinite group and project membership · 65496a65
      Nick Malcolm 创作于
      When a Resource (Group or Project) Access Token is created for, the
      following occurrs:
      
      - a User is created (a bot)
      - a PAT is created for the bot (known as a Group or Project Access Token)
      - a Member record is created to associate the bot and the resource
      
      Previously, the membership would expire when the token expired. When
      the Membership expired, the `RemoveExpiredMembersWorker` would destroy
      the Member and bot User records. Expired tokens would no longer have
      any association with the resource, making auditing and security reviews
      more challenging.
      
      Now, when the Feature Flag
      `retain_resource_access_token_user_after_revoke` is enabled for a
      Resource, new Resource Access Tokens will have Member records that do
      not expire. When the token expires, the Member and User records are
      retained. (In a different MR these inactive tokens are displayed in
      Group and Project Settings).
      
      This is part of https://gitlab.com/gitlab-org/gitlab/-/issues/462217
      未验证
      65496a65
加载中