mirror of
https://github.com/go-gitea/gitea.git
synced 2026-04-04 03:35:05 +02:00
ensure visited repo's group owner is the same as the repo's owner, otherwise return 404
This commit is contained in:
parent
e6ee1a248f
commit
d37bbd29d5
@ -282,10 +282,6 @@ func GetGroup(ctx *context.APIContext) {
|
||||
ctx.APIErrorNotFound()
|
||||
return
|
||||
}
|
||||
if group.OwnerID != ctx.Org.Organization.ID {
|
||||
ctx.APIErrorNotFound()
|
||||
return
|
||||
}
|
||||
if err != nil {
|
||||
ctx.APIErrorInternal(err)
|
||||
return
|
||||
@ -299,7 +295,7 @@ func GetGroup(ctx *context.APIContext) {
|
||||
}
|
||||
|
||||
func DeleteGroup(ctx *context.APIContext) {
|
||||
// swagger:operation DELETE /groups/{group_id} repositoryGroup groupDelete
|
||||
// swagger:operation DELETE /groups/{group_id} repository-group groupDelete
|
||||
// ---
|
||||
// summary: Delete a repository group
|
||||
// produces:
|
||||
|
||||
Loading…
x
Reference in New Issue
Block a user