forgejo/modules
zeripath 0b4a8be26b
Ensure that restricted users can access repos for which they are members (#17460)
There is a small bug in the way that repo access is checked in
repoAssignment: Accessibility is checked by checking if the user has a
marked access to the repository instead of checking if the user has any
team granted access.

This PR changes this permissions check to use HasAccess() which does the
correct test. There is also a fix in the release api ListReleases where
it should return draft releases if the user is a member of a team with
write access to the releases.

The PR also adds a testcase.

Signed-off-by: Andrew Thornton <art27@cantab.net>
2021-10-28 10:54:40 +08:00
..
activitypub
analyze
appstate
auth
avatar
base
cache
charset
context Ensure that restricted users can access repos for which they are members (#17460) 2021-10-28 10:54:40 +08:00
convert In many cases user avatar link should be an absolute URL with http host (#17420) 2021-10-25 13:01:16 +08:00
cron
csv Fixes #16559 - Do not trim leading spaces for tab delimited (#17442) 2021-10-26 16:46:56 -05:00
doctor
emoji
eventsource
generate
git
gitgraph
graceful
hcaptcha
highlight
httpcache
httplib
indexer
json
lfs
log
markup
matchlist
metrics
migrations Upgrade go-github to v39 (#17437) 2021-10-26 08:19:21 +01:00
nosql
notification
options
password
pprof
private
process
proxy
public
queue
recaptcha
references
repofiles
repository
secret
session
setting
ssh
storage
structs Add API to get/edit wiki (#17278) 2021-10-25 11:43:40 +08:00
svg
sync
task
templates
test
timeutil
translation
typesniffer
updatechecker
upload
uri
user
util
validation
web