]> source.dussan.org Git - gitea.git/commit
Check for permission when fetching user controlled issues (#20133) (#20196)
authorGusted <williamzijl7@hotmail.com>
Fri, 1 Jul 2022 15:39:10 +0000 (17:39 +0200)
committerGitHub <noreply@github.com>
Fri, 1 Jul 2022 15:39:10 +0000 (17:39 +0200)
commit6162fb0a1923b03ca10e5dc0b6cb5c33a40f66a5
tree0b16938b972eea7eee199c339b6d7f37f864facf
parentdf0b330af7df933d48d8c04c40f445a9ff316960
Check for permission when fetching user controlled issues (#20133) (#20196)

* Check if project has the same repository id with issue when assign project to issue

* Check if issue's repository id match project's repository id

* Add more permission checking

* Remove invalid argument

* Fix errors

* Add generic check

* Remove duplicated check

* Return error + add check for new issues

* Apply suggestions from code review

Co-authored-by: Gusted <williamzijl7@hotmail.com>
Co-authored-by: KN4CK3R <admin@oldschoolhack.me>
Co-authored-by: 6543 <6543@obermui.de>
models/issue_milestone.go
models/project_issue.go
routers/api/v1/repo/pull_review.go
routers/web/repo/issue.go
routers/web/repo/projects.go
routers/web/repo/pull_review.go
services/pull/review.go