From: Eric Davis <edavis@littlestreamsoftware.com>
Date: Thu, 8 Jul 2010 03:46:19 +0000 (+0000)
Subject: Check the browse repository or commit access permissions in Redmine.pm with LDAP... 
X-Git-Tag: 1.0.0~15
X-Git-Url: https://source.dussan.org/?a=commitdiff_plain;h=69af1515d1fd7e9cf2ae01b19f075d5483f46cc1;p=redmine.git

Check the browse repository or commit access permissions in Redmine.pm with LDAP. #5797

git-svn-id: svn+ssh://rubyforge.org/var/svn/redmine/trunk@3832 e93f8b46-1217-0410-a6f0-8f06a7374b81
---

diff --git a/extra/svn/Redmine.pm b/extra/svn/Redmine.pm
index f608ee124..091e21930 100644
--- a/extra/svn/Redmine.pm
+++ b/extra/svn/Redmine.pm
@@ -338,7 +338,9 @@ sub is_member {
                 bindpw  =>      $rowldap[4] ? $rowldap[4] : "",
                 filter  =>      "(".$rowldap[6]."=%s)"
             );
-            $ret = 1 if ($ldap->authenticate($redmine_user, $redmine_pass));
+            my $method = $r->method;
+            $ret = 1 if ($ldap->authenticate($redmine_user, $redmine_pass) && ((defined $read_only_methods{$method} && $permissions =~ /:browse_repository/) || $permissions =~ /:commit_access/));
+
           }
           $sthldap->finish();
           undef $sthldap;