3 ms·
Not working on the feature, but it seems to be available in CE. We disable it for GitLab.com because the feature has some potential to be abused: - CE: https:/
by leipert 6y ago
Not working on the feature, but it seems to be available in CE. We disable it for GitLab.com because the feature has some potential to be abused:
- CE: https://gitlab.com/gitlab-org/gitlab/-/blob/d0b75f214f67345c7c733d43c40698d24b83f9db/app/policies/project_policy.rb#L701-703 https://gitlab.com/gitlab-org/gitlab/-/blob/d0b75f214f67345c...
- EE: https://gitlab.com/gitlab-org/gitlab/-/blob/d0b75f214f67345c7c733d43c40698d24b83f9db/ee/app/policies/ee/project_policy.rb#L405-414 https://gitlab.com/gitlab-org/gitlab/-/blob/d0b75f214f67345c...
(I think Project Access Tokens create bot users under the hood that are associated with the token. So if one were to create hundreds of tokens that means hundreds of users.)
- TavsiE9s 6y agoThanks!