diff options
| author | Lauris BH <lauris@nix.lv> | 2018-07-05 01:45:15 +0300 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2018-07-05 01:45:15 +0300 |
| commit | 4a8ee0b5ccbdc75bab29836a54db4e7af7b7ff3f (patch) | |
| tree | ae7807472db7d6b4691a5cbfea6626dcf7af02d0 /integrations | |
| parent | b46066f17c79b4b4196a61e710120d874af6ee5a (diff) | |
| download | gitea-4a8ee0b5ccbdc75bab29836a54db4e7af7b7ff3f.tar.gz gitea-4a8ee0b5ccbdc75bab29836a54db4e7af7b7ff3f.zip | |
Check that repositories can only be migrated to own user or organizations (#4366)
* Repositories can only migrated to own user or organizations
* Add check for organization that user does not belong to
* Allow admin to migrate repositories for other users
Diffstat (limited to 'integrations')
| -rw-r--r-- | integrations/api_repo_test.go | 27 |
1 files changed, 27 insertions, 0 deletions
diff --git a/integrations/api_repo_test.go b/integrations/api_repo_test.go index 12429c88a8..c789cc9ee4 100644 --- a/integrations/api_repo_test.go +++ b/integrations/api_repo_test.go @@ -235,3 +235,30 @@ func TestAPIGetRepoByIDUnauthorized(t *testing.T) { req := NewRequestf(t, "GET", "/api/v1/repositories/2") sess.MakeRequest(t, req, http.StatusNotFound) } + +func TestAPIRepoMigrate(t *testing.T) { + testCases := []struct { + ctxUserID, userID int64 + cloneURL, repoName string + expectedStatus int + }{ + {ctxUserID: 1, userID: 2, cloneURL: "https://github.com/go-gitea/git.git", repoName: "git-admin", expectedStatus: http.StatusCreated}, + {ctxUserID: 2, userID: 2, cloneURL: "https://github.com/go-gitea/git.git", repoName: "git-own", expectedStatus: http.StatusCreated}, + {ctxUserID: 2, userID: 1, cloneURL: "https://github.com/go-gitea/git.git", repoName: "git-bad", expectedStatus: http.StatusForbidden}, + {ctxUserID: 2, userID: 3, cloneURL: "https://github.com/go-gitea/git.git", repoName: "git-org", expectedStatus: http.StatusCreated}, + {ctxUserID: 2, userID: 6, cloneURL: "https://github.com/go-gitea/git.git", repoName: "git-bad-org", expectedStatus: http.StatusForbidden}, + } + + prepareTestEnv(t) + for _, testCase := range testCases { + user := models.AssertExistsAndLoadBean(t, &models.User{ID: testCase.ctxUserID}).(*models.User) + session := loginUser(t, user.Name) + + req := NewRequestWithJSON(t, "POST", "/api/v1/repos/migrate", &api.MigrateRepoOption{ + CloneAddr: testCase.cloneURL, + UID: int(testCase.userID), + RepoName: testCase.repoName, + }) + session.MakeRequest(t, req, testCase.expectedStatus) + } +} |