Mirrors/gitea
0
0
Fork 0
mirror of https://github.com/go-gitea/gitea.git synced 2026-05-06 23:38:48 +02:00
Code Issues Activity

routers/api/v1/repo/issue.go: prohibit set of due date for restricted users in swagger API

Browse Source
This commit is contained in:
t-h-i-s 2025-09-25 14:58:07 +02:00
parent c945223a5e
commit 793b45d1d6
1 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
routers/api/v1/repo/issue.go
View File

@ -845,6 +845,11 @@ func EditIssue(ctx *context.APIContext) {
// Update or remove the deadline, only if set and allowed
if (form.Deadline != nil || form.RemoveDeadline != nil) && canWrite {
if ctx.Doer.IsRestricted && !setting.RestrictedUser.AllowEditDueDate {
ctx.APIError(http.StatusForbidden, "restricted users cannot modify due dates")
return
}
var deadlineUnix timeutil.TimeStamp
if form.RemoveDeadline == nil || !*form.RemoveDeadline {