[go: up one dir, main page]

Add rate limits to Bulk Import API

Currently Bulk Import API and controller actions are not rate limited. This allows for an unlimited number of import requests.

Controller: https://gitlab.com/gitlab-org/gitlab/blob/06f5762b5177752d4adf5319e2354c9e9e9b98c4/app/controllers/import/bulk_imports_controller.rb#L1-1

API: https://gitlab.com/gitlab-org/gitlab/blob/06f5762b5177752d4adf5319e2354c9e9e9b98c4/lib/api/bulk_imports.rb#L1-1

We should limit the number of import requests per user to a reasonable number. For instance, project import is currently rate limited to default 6 requests per minute (application setting).