Public repository permissions
Created by: ghost
Summary:
When public repositories are created, users that are not part of the project are expected to have guest access. In short they should not be allowed to 'push' into this public repository. However, this does not seem to be the case. Users not part of the project (and non-admin) are able to push to public repository.
Steps to reproduce: (1) Create a public repository on Glitab 5.2 (2) Clone this repo on a client machine (3) Push into the public repository.
Expected result: It should throw an error saying permission denied or the likes.
Observed result: The push is accepted by the GitLab server and is the latest commit is listed on the guest repository along with the commit logs.