Mirrors/gitea
0
0 Fork 0
mirror of https://github.com/go-gitea/gitea.git synced 2026-10-06 03:52:36 +02:00
Code Issues Activity

Prevent anonymous container access if RequireSignInView is enabled (#28877)

Browse Source 
Fixes #28875

If `RequireSignInView` is enabled, the ghost user has no access rights.
This commit is contained in:
KN4CK3R authored and GitHub committed 2024-01-21 16:31:29 +00:00
1 parent b693611b35
commit caad931385
3 files changed
+24 -6
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

modules/context/package.go
+1 -1
View File
@@ -93,7 +93,7 @@ func packageAssignment(ctx *packageAssignmentCtx, errCb func(int, string, any))
}
func determineAccessMode(ctx *Base, pkg *Package, doer *user_model.User) (perm.AccessMode, error) {
if setting.Service.RequireSignInView && doer == nil {
if setting.Service.RequireSignInView && (doer == nil || doer.IsGhost()) {
return perm.AccessModeNone, nil
}