From ccc8cd3f62a16a291438cba56ad7e20149948921 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E2=98=99=E2=97=A6=20The=20Tablet=20=E2=9D=80=20GamerGirla?=
 =?UTF-8?q?ndCo=20=E2=97=A6=E2=9D=A7?= <i.am.the.tablet@proton.me>
Date: Fri, 8 May 2026 22:50:09 -0400
Subject: [PATCH] fix: repos in private groups being visible to non members

---
 services/context/repo.go | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/services/context/repo.go b/services/context/repo.go
index 96ab94c9d2..0eef8999f0 100644
--- a/services/context/repo.go
+++ b/services/context/repo.go
@@ -598,6 +598,15 @@ func repoAssignmentPrepareRepo(ctx *Context, data *repoAssignmentPrepareDataStru
 	if repo.GroupID != gid {
 		ctx.NotFound(nil)
 	}
+
+	if gid > 0 {
+		GroupAssignmentWeb(GroupAssignmentOptions{
+			RequireMember: true,
+		})(ctx)
+	}
+	if ctx.Written() {
+		return
+	}
 	repo.Owner = ctx.Repo.Owner
 	data.repo = repo
 }