Rollback-setting modification via insufficient authorization checks

Authorization bypass in GitLab EE allows remote authenticated users to modify CI/CD deployment rollback settings via project settings. The project CI/CD settings update path accepts rollback-setting changes without sufficient permission checks; the specific endpoint and faulty code are not publicly established by the accessible sources. An authenticated account is required, but the exact role and additional conditions are undisclosed; the documented consequence is unauthorized modification of rollback configuration, not code execution.