Mirrors/gitea
0
0
Fork 0
mirror of https://github.com/go-gitea/gitea.git synced 2025-11-14 19:07:08 +01:00
Code Issues Activity

routers/web/repo.issue.go: prohibit set of due date for restricted users in web interface

Browse Source
This commit is contained in:
t-h-i-s 2025-09-25 14:58:07 +02:00
parent f91dff7390
commit c945223a5e
1 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
routers/web/repo/issue.go
View File

@ -24,6 +24,7 @@ import (
"code.gitea.io/gitea/modules/log"
"code.gitea.io/gitea/modules/markup/markdown"
"code.gitea.io/gitea/modules/optional"
"code.gitea.io/gitea/modules/setting"
api "code.gitea.io/gitea/modules/structs"
"code.gitea.io/gitea/modules/templates"
"code.gitea.io/gitea/modules/util"
@ -397,6 +398,11 @@ func UpdateIssueDeadline(ctx *context.Context) {
return
}
if ctx.Doer.IsRestricted && !setting.RestrictedUser.AllowEditDueDate {
ctx.HTTPError(http.StatusForbidden, "", "restricted users cannot modify due dates")
return
}
deadlineUnix, _ := common.ParseDeadlineDateToEndOfDay(ctx.FormString("deadline"))
if err := issues_model.UpdateIssueDeadline(ctx, issue, deadlineUnix, ctx.Doer); err != nil {
ctx.HTTPError(http.StatusInternalServerError, "UpdateIssueDeadline", err.Error())