Problem to solve
I would like to setup a user, with which I can audit all projects, especially the merge request approval settings via the api.
I added a user to a couple of groups as maintainer and then the user is able to call /api/v4/projects/123/approval_rules.
As I don’t want to setup the user in all projects, I wanted to create an audit user which has read access to all projects and let them run the script.
Unfortunately, no matter which scopes I grant to the token, I’m getting 403 in the call above.
Also in the UI, the settings are not available.
This makes the audit user quite powerless, if settings cannot be read.
Steps to reproduce
- Setup a user of type Audit user.
- Login with the user
- check a project
- Try to access the settings.
- Optional: try
curl --header "PRIVATE-TOKEN XXXXXXX" --url "https://example.com/api/v4/projects/1234/approval_rules"
Versions
GitLab v17.11.4-ee
- Self-managed
-
GitLab.comSaaS - Dedicated