Skip to content

Add user callout for instances with registration enabled by default

Peter Hegman requested to merge 237905-add-signup-enabled-alert into master

What does this MR do?

See #237905

Adds an alert to warn admins that anybody can register on their GitLab instance. The alert is only shown when the logged in user is an admin and the "Sign-up enabled" (will be renamed to "Registration enabled" in future MR) setting is checked.

Once closed a record is added to the user_callouts table with a feature_name of 25. If you delete this record the alert will show again.

Screenshots (strongly suggested)

Desktop

Screen_Shot_2020-11-11_at_7.17.33_PM

Mobile

Screen_Shot_2020-11-11_at_7.18.04_PM

Does this MR meet the acceptance criteria?

Conformity

Availability and Testing

Security

If this MR contains changes to processing or storing of credentials or tokens, authorization and authentication methods and other items described in the security review guidelines:

  • [-] Label as security and @ mention @gitlab-com/gl-security/appsec
  • [-] The MR includes necessary changes to maintain consistency between UI, API, email, or other methods
  • [-] Security reports checked/validated by a reviewer from the AppSec team
Edited by Peter Hegman

Merge request reports

Loading