The feature you wanted - Expanded Guest capabilities in GitLab Ultimate
Mar 8, 2023Hannah Sutor
Summary
Introduced customizable roles for GitLab Ultimate customers, starting with an MVC that allows Guest users to view code in private projects. This involved technical discovery and performance testing to ensure a scalable backend implementation for role creation and usage. The custom role is created via API and can be assigned to users, effectively creating a 'Guest+1' role. This addresses a customer pain point regarding Guest user limitations in private projects.
More from the Security Control Framework trail
- Track organization-wide security risk in one dashboard
- Dependency Firewall: Block risky packages before the build
- Two front doors: Module-level access in a Django GRC app
- How GitLab tracks vulnerabilities through refactors and reformatting
- Shai-Hulud copycat campaign targets Python developers through PyPI typosquatting