0
Fork 0
mirror of https://codeberg.org/forgejo/forgejo.git synced 2025-03-14 15:41:30 -05:00
forgejo/routers/api/v1/repo
Gusted 751a3da979 fix(api): allow collaborators to read their own permissions (#6856)
- Instead of checking the login name (which is not set in most cases and really the wrong thing to do here just like it is case sensitive) simply check that the requested user has the same ID as the doer.
- Resolves forgejo/forgejo#6837
- Add integration test.

Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/6856
Reviewed-by: Earl Warren <earl-warren@noreply.codeberg.org>
Reviewed-by: 0ko <0ko@noreply.codeberg.org>
Co-authored-by: Gusted <postmaster@gusted.xyz>
Co-committed-by: Gusted <postmaster@gusted.xyz>
2025-02-08 15:09:08 +00:00
..
action.go fix(sec): modify api route for variables 2025-02-08 07:21:14 +00:00
avatar.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
blob.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
branch.go Implement update branch API (#32433) 2024-12-15 09:24:31 +01:00
collaborators.go fix(api): allow collaborators to read their own permissions (#6856) 2025-02-08 15:09:08 +00:00
commits.go Return 404 instead of error when commit not exist (#31977) 2024-09-09 20:54:47 +02:00
compare.go feat: add files to compare (#6461) 2025-01-05 02:32:46 +00:00
download.go Add github compatible tarball download API endpoints (#32572) 2024-12-03 10:19:22 +01:00
file.go Use gitrepo.GetTreePathLatestCommit to get file lastest commit instead from latest commit cache (#32987) 2025-01-05 12:13:48 +00:00
flags.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
fork.go fix: don't show private forks in forks list 2024-11-15 10:59:36 +01:00
git_hook.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
git_ref.go Add codespell support and fix a good number of typos with its help (#3270) 2024-05-09 13:49:37 +00:00
hook.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
hook_test.go [TESTS] Fix usage of LoadRepoCommit 2024-08-26 08:03:48 +02:00
issue.go API: enhance SearchIssues swagger docs (#32208) 2024-10-20 09:44:18 +02:00
issue_attachment.go feat(quota): Quota enforcement 2024-08-02 11:10:34 +02:00
issue_comment.go Load attachments for /issues/comments/{id} 2024-07-16 11:09:54 +02:00
issue_comment_attachment.go feat(quota): Quota enforcement 2024-08-02 11:10:34 +02:00
issue_dependency.go Fix missed doer (#30231) 2024-04-15 20:01:35 +02:00
issue_label.go Support org labels when adding labels by label names (#32988) 2024-12-28 19:32:09 +00:00
issue_pin.go Fix missed doer (#30231) 2024-04-15 20:01:35 +02:00
issue_reaction.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
issue_stopwatch.go Improve Swagger documentation for user endpoints 2024-11-23 10:33:55 +01:00
issue_subscription.go Add codespell support and fix a good number of typos with its help (#3270) 2024-05-09 13:49:37 +00:00
issue_tracked_time.go Improve Swagger documentation for user endpoints 2024-11-23 10:33:55 +01:00
key.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
label.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
language.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
main_test.go make writing main test easier (#27270) 2023-09-28 01:38:53 +00:00
migrate.go fix: enable releases and/or wiki if user set the options in repo migration (#6051) 2025-01-12 09:16:45 +00:00
milestone.go remove util.OptionalBool and related functions (#29513) 2024-03-06 12:10:46 +08:00
mirror.go [FIX] Don't allow SSH authentication without ssh executable 2024-08-26 08:58:35 +02:00
notes.go [FEAT]Allow changing git notes (#4753) 2024-11-18 22:56:17 +00:00
patch.go feat(quota): Quota enforcement 2024-08-02 11:10:34 +02:00
pull.go fmt 2024-11-16 18:12:40 +01:00
pull_review.go Fix the logic of finding the latest pull review commit ID (#32139) 2024-10-06 07:44:28 +02:00
release.go feat: Add Search to Releases Page 2024-11-02 10:24:35 +01:00
release_attachment.go feat(quota): Quota enforcement 2024-08-02 11:10:34 +02:00
release_tags.go Protected tag is no internal server error (#30962) 2024-05-19 13:12:35 +02:00
repo.go feat: allow changing default branch update style 2024-12-23 18:55:25 +03:00
repo_test.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
star.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
status.go Cache repository default branch commit status to reduce query on commit status table (#29444) 2024-03-11 23:36:58 +07:00
subscriber.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
tag.go feat(quota): Quota enforcement 2024-08-02 11:10:34 +02:00
teams.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
topic.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
transfer.go feat(quota): Quota enforcement 2024-08-02 11:10:34 +02:00
tree.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
wiki.go feat(quota): Quota enforcement 2024-08-02 11:10:34 +02:00