Fix issue pasted image missing if no release permission (#16520) (#16527)

* Fix issue pasted image missing if no release permission

Co-authored-by: zeripath <art27@cantab.net>
Co-authored-by: 6543 <6543@obermui.de>

diff --git a/routers/web/web.go b/routers/web/web.go
index 9baef52962c9d62c3ad8ea43838833bcead131d2..d8b4a0eebc6dfe5eadc84cb15485fa4c6f9e284f 100644 (file)
--- a/routers/web/web.go
+++ b/routers/web/web.go
@@ -822,9 +822,14 @@ func RegisterRoutes(m *web.Route) {
                        }
                        ctx.Data["CommitsCount"] = ctx.Repo.CommitsCount
                })
-               m.Get("/attachments/{uuid}", repo.GetAttachment)
+
        }, ignSignIn, context.RepoAssignment, context.UnitTypes(), reqRepoReleaseReader)
 
+       // to maintain compatibility with old attachments
+       m.Group("/{username}/{reponame}", func() {
+               m.Get("/attachments/{uuid}", repo.GetAttachment)
+       }, ignSignIn, context.RepoAssignment, context.UnitTypes())
+
        m.Group("/{username}/{reponame}", func() {
                m.Post("/topics", repo.TopicsPost)
        }, context.RepoAssignment, context.RepoMustNotBeArchived(), reqRepoAdmin)