lavender-legacy/gitea
7
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity
gitea/routers/api/v1/repo
History
zeripath ef12b8de80
Ensure that restricted users can access repos for which they are members (#17460) (#17464) 
Backport #17460

There is a small bug in the way that repo access is checked in
repoAssignment: Accessibility is checked by checking if the user has a
marked access to the repository instead of checking if the user has any
team granted access.

This PR changes this permissions check to use HasAccess() which does the
correct test. There is also a fix in the release api ListReleases where
it should return draft releases if the user is a member of a team with
write access to the releases.

The PR also adds a testcase.

Signed-off-by: Andrew Thornton <art27@cantab.net>
2021-10-28 11:33:18 +08:00
..
blob.go Swagger info corrections (#9441) 2019-12-20 19:07:12 +02:00
branch.go Merge all deleteBranch as one function and also fix bug when delete branch don't close related PRs (#16067) 2021-06-07 22:52:59 +08:00
collaborators.go [API] expose repo.GetReviewers() & repo.GetAssignees() (#16168) 2021-06-17 16:02:34 +02:00
commits.go Let package git depend on setting but not opposite (#15241) 2021-06-26 13:28:55 +02:00
file.go Add caller to cat-file batch calls (#17082) (#17089) 2021-09-20 00:07:35 +08:00
fork.go Move macaron to chi (#14293) 2021-01-26 16:36:53 +01:00
git_hook.go Move macaron to chi (#14293) 2021-01-26 16:36:53 +01:00
git_ref.go Let branch/tag name be a valid ref to get CI status (#16400) 2021-07-13 08:14:14 +01:00
hook.go Implemented head_commit for webhooks (#16282) 2021-06-29 15:34:03 +02:00
hook_test.go API endpoint for testing webhook (#3550) 2018-04-29 14:21:33 +08:00
issue.go API: don't allow merged PRs to be reopened (#17271) 2021-10-08 13:54:26 -04:00
issue_comment.go Move macaron to chi (#14293) 2021-01-26 16:36:53 +01:00
issue_label.go Move macaron to chi (#14293) 2021-01-26 16:36:53 +01:00
issue_reaction.go [refactor] Unify the export of user data via API (#15144) 2021-03-27 17:45:26 +01:00
issue_stopwatch.go Refactor: move Commit To APIFormat Code & Lot of StopWatch related things (#12729) 2020-09-18 20:09:26 +08:00
issue_subscription.go [refactor] Unify the export of user data via API (#15144) 2021-03-27 17:45:26 +01:00
issue_tracked_time.go Fix various documentation, user-facing, and source comment typos (#16367) 2021-07-08 13:38:13 +02:00
key.go Move macaron to chi (#14293) 2021-01-26 16:36:53 +01:00
label.go Move macaron to chi (#14293) 2021-01-26 16:36:53 +01:00
language.go Add language statistics API endpoint (#11737) 2020-06-07 14:48:41 +03:00
main_test.go API endpoint for testing webhook (#3550) 2018-04-29 14:21:33 +08:00
migrate.go Add Status Updates whilst Gitea migrations are occurring (#15076) 2021-06-16 18:02:24 -04:00
milestone.go Move macaron to chi (#14293) 2021-01-26 16:36:53 +01:00
mirror.go Refactor api repo dir (#10048) 2020-01-29 13:55:23 +08:00
pull.go API: don't allow merged PRs to be reopened (#17271) 2021-10-08 13:54:26 -04:00
pull_review.go API: Allow COMMENT reviews to not specify a body (#16229) 2021-06-25 00:05:51 +02:00
release.go Ensure that restricted users can access repos for which they are members (#17460) (#17464) 2021-10-28 11:33:18 +08:00
release_attachment.go Move macaron to chi (#14293) 2021-01-26 16:36:53 +01:00
release_tags.go [API] Add delete release by tag & fix unreleased inconsistency (#14563) 2021-02-07 19:32:18 +01:00
repo.go Check user instead of organization when creating a repo from a template via API (#16346) (#17195) 2021-10-01 10:16:28 +02:00
repo_test.go Move macaron to chi (#14293) 2021-01-26 16:36:53 +01:00
star.go [refactor] Unify the export of user data via API (#15144) 2021-03-27 17:45:26 +01:00
status.go Let branch/tag name be a valid ref to get CI status (#16400) 2021-07-13 08:14:14 +01:00
subscriber.go [refactor] Unify the export of user data via API (#15144) 2021-03-27 17:45:26 +01:00
tag.go [API] Add repoGetTag (#16166) 2021-06-23 17:08:47 -04:00
teams.go [API] List, Check, Add & delete endpoints for repository teams (#13630) 2021-02-01 22:57:12 +01:00
topic.go Move macaron to chi (#14293) 2021-01-26 16:36:53 +01:00
transfer.go Repository transfer has to be confirmed, if user can not create repo for new owner (#14792) 2021-03-01 01:47:30 +01:00
tree.go Remove page size limit comment from swagger (#11806) 2020-06-09 00:57:38 -04:00