GitlabAppPolicy previously allowed any authenticated user to update, delete, and create GitLab sources. Align it with GithubAppPolicy, require Application create authorization on the private-repo wizard, and reject OAuth callbacks from non-admins so members cannot escalate privileges. |
||
|---|---|---|
| .. | ||
| Concerns | ||
| Bitbucket.php | ||
| Gitea.php | ||
| Github.php | ||
| Gitlab.php | ||
| Stripe.php | ||