Scope feature flag to root namespace
What does this MR do and why?
This change scopes the usage of the :disable_developer_access_to_admin_vulnerability
to a root namespace to cover a full group hierarchy.
MR acceptance checklist
Please evaluate this MR against the MR acceptance checklist. It helps you analyze changes to reduce risks in quality, performance, reliability, security, and maintainability.
How to set up and validate locally
- In rails console enable the experiment on a root namespace
Feature.enable(:disable_developer_access_to_admin_vulnerability, group)
- Sign in as a Developer
- Visit any group or project vulnerability report underneath the root group
http://127.0.0.1:3000/groups/<root-group>/-/security/vulnerability_report
- The ability to change the vulnerability status should not be available.