Antoine GIRARD 8b24073713 Only serve attachments when linked to issue/release and if accessible by user (#9340) ... * test: add current attachement responses * refactor: check if attachement is linked and accessible by user * chore: clean TODO * fix: typo attachement -> attachment * revert un-needed go.sum change * refactor: move models logic to models * fix TestCreateIssueAttachment which was wrongly successful * fix unit tests with unittype added * fix unit tests with changes * use a valid uuid format for pgsql int. test * test: add unit test TestLinkedRepository * refactor: allow uploader to access unlinked attachement * add missing blank line * refactor: move to a separate function repo.GetAttachment * typo * test: remove err test return * refactor: use repo perm for access checking generally + 404 for all reject		2020-01-05 01:20:08 +02:00
..
setting
auth_openid.go
auth.go
avatar.go	[BugFix] use default avatar for ghost user (fix 500 error) (#9536)	2019-12-29 16:24:50 +02:00
home_test.go	Only serve attachments when linked to issue/release and if accessible by user (#9340)	2020-01-05 01:20:08 +02:00
home.go	Fix error logged when repos qs is empty (#9591)	2020-01-03 23:39:12 +02:00
main_test.go
notification.go
oauth.go
profile.go	site admin could view org's members (#9346)	2019-12-14 01:36:59 -05:00