diff options
| author | Unknown <joe2010xtmf@163.com> | 2014-07-04 01:25:06 -0400 |
|---|---|---|
| committer | Unknown <joe2010xtmf@163.com> | 2014-07-04 01:25:06 -0400 |
| commit | 36292060d603452deaad03e5e686fae3f7c3f8a8 (patch) | |
| tree | 6abb9c79c44c0014b9c6e80aea059de86e2091f6 /cmd/web.go | |
| parent | cdffdeddc90a69e88fab92487ff5ccf90eb47c08 (diff) | |
| download | gitea-36292060d603452deaad03e5e686fae3f7c3f8a8.tar.gz gitea-36292060d603452deaad03e5e686fae3f7c3f8a8.zip | |
Fix bug that collaborators are able to modify settings of repository
Diffstat (limited to 'cmd/web.go')
| -rw-r--r-- | cmd/web.go | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/cmd/web.go b/cmd/web.go index 9056029570..2f552d8667 100644 --- a/cmd/web.go +++ b/cmd/web.go @@ -186,7 +186,7 @@ func runWeb(*cli.Context) { m.Get("/template/**", dev.TemplatePreview) } - reqOwner := middleware.RequireOwner() + reqTrueOwner := middleware.RequireTrueOwner() m.Group("/org", func(r martini.Router) { r.Get("/create", org.New) @@ -218,7 +218,7 @@ func runWeb(*cli.Context) { r.Get("/hooks/:id", repo.WebHooksEdit) r.Post("/hooks/:id", bindIgnErr(auth.NewWebhookForm{}), repo.WebHooksEditPost) }) - }, reqSignIn, middleware.RepoAssignment(true), reqOwner) + }, reqSignIn, middleware.RepoAssignment(true), reqTrueOwner) m.Group("/:username/:reponame", func(r martini.Router) { r.Get("/action/:action", repo.Action) |