Skip to content

Let group owners exclude users from "Git abuse rate limit"

Eugie Limpin requested to merge unique_project_download_limit_allowlist into master

What does this MR do and why?

Resolves https://gitlab.com/gitlab-org/modelops/anti-abuse/team-tasks/-/issues/36 and https://gitlab.com/gitlab-org/modelops/anti-abuse/team-tasks/-/issues/38.

This MR adds user allowlist input field to a top-level group's "Git abuse rate limit" settings page. This allows group owners to exclude users from being auto-banned when they exceed the allowed maximum number of project downloads set for the group.

Changelog

This MR does not have a changelog since the changes are behind a feature flag that is disabled by default.

Screenshots or screen recordings

Screen_Recording_2022-07-27_at_4.52.56_PM

How to set up and validate locally

Set up

  1. Ensure you are running GDK with an Ultimate license. The following command should log true if this is set up correctly
    echo "License.feature_available?(:unique_project_download_limit)" | rails c
  2. Turn on the feature flag:
    echo "Feature.enable(:limit_unique_project_downloads_per_namespace_user)" | rails c

Validate

  1. Create a top-level group (or use an existing one)
  2. Using the group owner as user, navigate to the groups Settings > Reporting page
  3. Validate that you can set and save the settings with Excluded users Screen_Shot_2022-07-27_at_5.04.08_PM

MR acceptance checklist

This checklist encourages us to confirm any changes have been analyzed to reduce risks in quality, performance, reliability, security, and maintainability.

Edited by Eugie Limpin

Merge request reports

Loading