From 49df677c475d6a20575b99b5af8323f65937dadb Mon Sep 17 00:00:00 2001
From: Ethan Koenig <etk39@cornell.edu>
Date: Sat, 29 Jul 2017 18:13:33 -0700
Subject: Check for access in /repositories/:id (#2227)

* Check for access in /repositories/:id

* Integration test
---
 routers/api/v1/repo/repo.go | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

(limited to 'routers')

diff --git a/routers/api/v1/repo/repo.go b/routers/api/v1/repo/repo.go
index 178f1005e5..edd6a72637 100644
--- a/routers/api/v1/repo/repo.go
+++ b/routers/api/v1/repo/repo.go
@@ -293,7 +293,10 @@ func GetByID(ctx *context.APIContext) {
 
 	access, err := models.AccessLevel(ctx.User.ID, repo)
 	if err != nil {
-		ctx.Error(500, "GetRepositoryByID", err)
+		ctx.Error(500, "AccessLevel", err)
+		return
+	} else if access < models.AccessModeRead {
+		ctx.Status(404)
 		return
 	}
 	ctx.JSON(200, repo.APIFormat(access))
-- 
cgit v1.2.3