Skip to content

Change security policy project setting name

What does this MR do and why?

This renames the security policy override project setting:

- Block users from unprotecting branches
+ Block users from modifying protected branches

The change is based on this discussion that came to the conclusion that it is necessary to prevent unprotecting and deletion of a protected branch in order to close the loophole described in Prevent deletion of protected branches via secu... (#420728 - closed).

The backend part of the feature is not implemented yet and the feature is behind the scan_result_policy_settings feature flag.

Screenshots or screen recordings

Screenshots are required for UI changes, and strongly recommended for all other merge requests.

Before After
Screenshot_2023-08-21_at_14.16.16 Screenshot_2023-08-21_at_14.16.40

How to set up and validate locally

  1. Enable the feature flag Feature.enable(:scan_result_policy_settings)
  2. Open the scan result policy editor

MR acceptance checklist

This checklist encourages us to confirm any changes have been analyzed to reduce risks in quality, performance, reliability, security, and maintainability.

Merge request reports

Loading