You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
gitea/modules
zeripath ef12b8de80
Ensure that restricted users can access repos for which they are members (#17460) (#17464)
Backport #17460

There is a small bug in the way that repo access is checked in
repoAssignment: Accessibility is checked by checking if the user has a
marked access to the repository instead of checking if the user has any
team granted access.

This PR changes this permissions check to use HasAccess() which does the
correct test. There is also a fix in the release api ListReleases where
it should return draft releases if the user is a member of a team with
write access to the releases.

The PR also adds a testcase.

Signed-off-by: Andrew Thornton <art27@cantab.net>
3 years ago
..
analyze Speed up `enry.IsVendor` (#15213) 4 years ago
auth Lock goth/gothic and Re-attempt OAuth2 registration on login if registration failed at startup (#16570) 4 years ago
avatar Add Image Diff for SVG files (#14867) 4 years ago
base Fixed assert statements. (#16089) 4 years ago
cache Add LRU mem cache implementation (#16226) 4 years ago
charset Read expected buffer size (#17409) (#17430) 3 years ago
context Ensure that restricted users can access repos for which they are members (#17460) (#17464) 3 years ago
convert API pull's head/base have correct permission(#17214) (#17245) 3 years ago
cron Fix archive error when rename repo or user (#16399) 4 years ago
csv Fix CSV render error (#17406) (#17431) 3 years ago
doctor Nicely handle missing user in collaborations (#17049) (#17166) 3 years ago
emoji Run processors on whole of text (#16155) 4 years ago
eventsource Hold the event source when there are no listeners (#15725) 4 years ago
generate Switch to maintained jwt lib (#16532) (#16533) 4 years ago
git Read expected buffer size (#17409) (#17430) 3 years ago
gitgraph Fix bug on commit graph (#15517) 4 years ago
graceful Use pointer for wrappedConn methods (#17295) (#17296) 3 years ago
hcaptcha hCaptcha Support (#12594) 4 years ago
highlight Prevent panic in Org mode HighlightCodeBlock (#17140) (#17141) 3 years ago
httpcache Add ETag header (#15370) 4 years ago
httplib Second attempt at preventing zombies (#16326) 4 years ago
indexer Fix data race in bleve indexer (#16474) (#16509) 4 years ago
lfs Fix various documentation, user-facing, and source comment typos (#16367) 4 years ago
log Fix race in log (#16490) (#16505) 4 years ago
markup Fix issue markdown bugs (#17413) 3 years ago
matchlist Add Allow-/Block-List for Migrate & Mirrors (#13610) 4 years ago
metrics Prometheus endpoint (#5256) 6 years ago
migrations Fix bug of migrate comments which only fetch one page (#17055) (#17058) 3 years ago
nosql Fix setting redis db path (#15698) 4 years ago
notification API pull's head/base have correct permission(#17214) (#17245) 3 years ago
options Add StatDir and replace com.StatDir (#14099) 4 years ago
password Fixed assert statements. (#16089) 4 years ago
pprof Add golangci (#6418) 6 years ago
private Fix dump and restore respository (#16698) (#16898) 3 years ago
process Code Formats, Nits & Unused Func/Var deletions (#15286) 4 years ago
public Improve assets handler middleware (#15961) 4 years ago
queue Fix race in log (#16490) (#16505) 4 years ago
recaptcha Migrate to use jsoniter instead of encoding/json (#14841) 4 years ago
references Fix various documentation, user-facing, and source comment typos (#16367) 4 years ago
repofiles Read expected buffer size (#17409) (#17430) 3 years ago
repository Ensure that git daemon export ok is created for mirrors (#17243) (#17306) 3 years ago
secret Fix various documentation, user-facing, and source comment typos (#16367) 4 years ago
session Migrate to use jsoniter instead of encoding/json (#14841) 4 years ago
setting Disable core.protectNTFS (#17300) (#17302) 3 years ago
ssh Offer rsa-sha2-512 and rsa-sha2-256 algorithms in internal SSH (#17281) (#17376) 3 years ago
storage Fix storage Iterate bug and Add storage doctor to delete garbage attachments (#16971) (#16977) 3 years ago
structs Add option to provide signature for a token to verify key ownership (#14054) 4 years ago
svg Fix filepath basename on Windows for SVG bindata (#12241) 5 years ago
sync Fix missing unlock in uniquequeue (#9790) 5 years ago
task Fix bug of migrated repository not index (#16991) (#16996) 3 years ago
templates Report the correct number of pushes on the feeds (#16811) (#16822) 3 years ago
test Move middlewares to web/middleware (#14480) 4 years ago
timeutil Allow mocking timeutil (#17354) (#17356) 3 years ago
translation Use index of the supported tags to choose user lang (#15452) 4 years ago
typesniffer Read expected buffer size (#17409) (#17430) 3 years ago
upload Update golangci-lint to version 1.31.0 (#13102) 4 years ago
uri Dump github/gitlab/gitea repository data to a local directory and restore to gitea (#12244) 4 years ago
user Add gitea-vet (#10948) 5 years ago
util Read expected buffer size (#17409) (#17430) 3 years ago
validation Fix various documentation, user-facing, and source comment typos (#16367) 4 years ago
web Restore CORS on git smart http protocol (#16496) (#16506) 4 years ago