diff options
| -rw-r--r-- | routers/web/web.go | 5 |
1 files changed, 3 insertions, 2 deletions
diff --git a/routers/web/web.go b/routers/web/web.go index 6a17c19821..5fb1ce0e80 100644 --- a/routers/web/web.go +++ b/routers/web/web.go @@ -1125,6 +1125,9 @@ func registerRoutes(m *web.Route) { // user/org home, including rss feeds m.Get("/{username}/{reponame}", ignSignIn, context.RepoAssignment, context.RepoRef(), repo.SetEditorconfigIfExists, repo.Home) + // TODO: maybe it should relax the permission to allow "any access" + m.Post("/{username}/{reponame}/markup", ignSignIn, context.RepoAssignment, context.RequireRepoReaderOr(unit.TypeCode, unit.TypeIssues, unit.TypePullRequests, unit.TypeReleases, unit.TypeWiki), web.Bind(structs.MarkupOption{}), misc.Markup) + m.Group("/{username}/{reponame}", func() { m.Get("/find/*", repo.FindFiles) m.Group("/tree-list", func() { @@ -1236,8 +1239,6 @@ func registerRoutes(m *web.Route) { m.Post("/reactions/{action}", web.Bind(forms.ReactionForm{}), repo.ChangeCommentReaction) }, context.RepoMustNotBeArchived()) - m.Post("/markup", web.Bind(structs.MarkupOption{}), misc.Markup) - m.Group("/labels", func() { m.Post("/new", web.Bind(forms.CreateLabelForm{}), repo.NewLabel) m.Post("/edit", web.Bind(forms.CreateLabelForm{}), repo.UpdateLabel) |