3 people 6bb6ce678b fix(api): hide limited users from restricted viewers (#39004) ...

Use the canonical profile-visibility check for user API content and
prevent restricted users from enumerating public repositories owned by
limited users.

This keeps feeds, heatmaps, keys, and issue search consistent with
profile visibility.

---------

Co-authored-by: silverwind <me@silverwind.io>

2026-08-22 08:08:36 +00:00

..

assignees_test.go

feat(api): Add assignees APIs (#37330)

2026-06-09 06:12:09 +00:00

assignees.go

feat(api): Add assignees APIs (#37330)

2026-06-09 06:12:09 +00:00

comment_code.go

perf: Various performance regression fixes (#38078)

2026-06-21 14:34:07 +00:00

comment_list.go

fix(issues): fix label bulk-load key and reduce log noise in LoadLabel (#38632)

2026-07-26 12:31:30 +00:00

comment_test.go

fix: various security fixes (#38406)

2026-07-12 17:14:09 +00:00

comment.go

fix(issues): fix label bulk-load key and reduce log noise in LoadLabel (#38632)

2026-07-26 12:31:30 +00:00

content_history_test.go

…

content_history.go

…

dependency_test.go

…

dependency.go

…

issue_index.go

…

issue_label_test.go

…

issue_label.go

…

issue_list_test.go

perf: Various performance regression fixes (#38078)

2026-06-21 14:34:07 +00:00

issue_list.go

perf: Various performance regression fixes (#38078)

2026-06-21 14:34:07 +00:00

issue_lock.go

…

issue_pin.go

…

issue_project_multi_test.go

…

issue_project.go

feat(api): add project APIs (#38691)

2026-08-08 13:53:28 +00:00

issue_search.go

fix(api): hide limited users from restricted viewers (#39004)

2026-08-22 08:08:36 +00:00

issue_stats.go

…

issue_test.go

…

issue_update_test.go

fix: various security fixes (#38406)

2026-07-12 17:14:09 +00:00

issue_update.go

enhance: inherit team access for all units (#38938)

2026-08-17 20:30:24 +00:00

issue_user_test.go

…

issue_user.go

…

issue_watch_test.go

…

issue_watch.go

chore: fix repo watch (#38921)

2026-08-16 03:00:59 +00:00

issue_xref_test.go

…

issue_xref.go

refactor: Use db.Get[] instead of db.GetEngine(ctx).Get(bean) to avoid zero value fetching wrong database record (#37977)

2026-06-27 10:24:02 -07:00

issue.go

refactor: Use db.Get[] instead of db.GetEngine(ctx).Get(bean) to avoid zero value fetching wrong database record (#37977)

2026-06-27 10:24:02 -07:00

label_test.go

fix(issues): sort scoped labels by exclusive order in dropdowns (#38893)

2026-08-17 18:47:28 +00:00

label.go

fix(issues): sort scoped labels by exclusive order in dropdowns (#38893)

2026-08-17 18:47:28 +00:00

main_test.go

…

milestone_list.go

…

milestone_test.go

…

milestone.go

…

pull_list_test.go

…

pull_list.go

feat(org): add team visibility so org members can discover teams (#37680)

2026-06-14 19:07:25 +00:00

pull_test.go

fix: bound CODEOWNERS regex match time (#38011)

2026-06-07 15:30:18 +00:00

pull.go

feat: add watch options (#37571)

2026-08-08 07:35:13 +00:00

reaction.go

…

review_list.go

…

review_test.go

enhance: add permalinks to pull request reviews (#38849)

2026-08-22 02:13:43 +00:00

review.go

enhance: add permalinks to pull request reviews (#38849)

2026-08-22 02:13:43 +00:00

stopwatch_test.go

…

stopwatch.go

…

tracked_time_test.go

…

tracked_time.go

…