0
0
mirror of https://github.com/go-gitea/gitea.git synced 2024-12-15 20:20:44 +01:00
gitea/models/fixtures
zeripath 0b4a8be26b
Ensure that restricted users can access repos for which they are members (#17460)
There is a small bug in the way that repo access is checked in
repoAssignment: Accessibility is checked by checking if the user has a
marked access to the repository instead of checking if the user has any
team granted access.

This PR changes this permissions check to use HasAccess() which does the
correct test. There is also a fix in the release api ListReleases where
it should return draft releases if the user is a member of a team with
write access to the releases.

The PR also adds a testcase.

Signed-off-by: Andrew Thornton <art27@cantab.net>
2021-10-28 10:54:40 +08:00
..
access_token.yml
access.yml
action.yml Fix heatmap activity (#15252) 2021-06-25 12:59:25 -04:00
attachment.yml Add repo_id for attachment (#16958) 2021-09-08 17:19:30 +02:00
collaboration.yml
comment.yml
commit_status_index.yml Fix commit status index problem (#17061) 2021-09-23 18:50:06 +08:00
commit_status.yml
deleted_branch.yml
deploy_key.yml
email_address.yml
follow.yml
gpg_key_import.yml
gpg_key.yml
hook_task.yml
issue_assignees.yml
issue_index.yml
issue_label.yml
issue_user.yml [API] ListIssues add more filters (#16174) 2021-06-16 18:33:37 -04:00
issue_watch.yml
issue.yml Add filter by owner and team to issue/pulls search endpoint (#16662) 2021-08-13 22:47:25 +02:00
label.yml
login_source.yml
milestone.yml
notice.yml
notification.yml
oauth2_application.yml
oauth2_authorization_code.yml
oauth2_grant.yml Fix wrong user in OpenID response (#16736) 2021-08-19 12:11:30 -04:00
org_user.yml
project_board.yml
project_issue.yml
project.yml
protected_branch.yml
public_key.yml
pull_request.yml
reaction.yml
release.yml [API] ListReleases add filter for draft and pre-releases (#16175) 2021-06-17 10:58:10 +02:00
renamed_branch.yml Add a simple way to rename branch like gh (#15870) 2021-10-08 19:03:04 +02:00
repo_archiver.yml Rework repository archive (#14723) 2021-06-23 17:12:38 -04:00
repo_indexer_status.yml
repo_redirect.yml
repo_topic.yml
repo_transfer.yml
repo_unit.yml
repository.yml Ensure that restricted users can access repos for which they are members (#17460) 2021-10-28 10:54:40 +08:00
review.yml
star.yml
stopwatch.yml
team_repo.yml
team_unit.yml
team_user.yml
team.yml
topic.yml
tracked_time.yml
two_factor.yml
u2f_registration.yml
user_open_id.yml
user_redirect.yml
user.yml Add user status filter to admin user management page (#16770) 2021-10-12 20:11:35 +02:00
watch.yml
webhook.yml