1
0
mirror of https://github.com/go-gitea/gitea.git synced 2025-05-02 05:35:24 +00:00
gitea/services
Gusted 6162fb0a19
Check for permission when fetching user controlled issues () ()
* Check if project has the same repository id with issue when assign project to issue

* Check if issue's repository id match project's repository id

* Add more permission checking

* Remove invalid argument

* Fix errors

* Add generic check

* Remove duplicated check

* Return error + add check for new issues

* Apply suggestions from code review

Co-authored-by: Gusted <williamzijl7@hotmail.com>
Co-authored-by: KN4CK3R <admin@oldschoolhack.me>
Co-authored-by: 6543 <6543@obermui.de>
2022-07-01 17:39:10 +02:00
..
agit Fix various typos () 2022-01-10 17:32:37 +08:00
asymkey Refactor auth package () 2022-01-02 21:12:35 +08:00
attachment Simplify parameter types () 2021-12-20 04:41:31 +00:00
auth Respect DefaultUserIsRestricted system default when creating new user ( ) () 2022-04-30 15:00:14 +02:00
comments Move repository model into models/repo () 2021-12-10 09:27:50 +08:00
cron Some repository refactors () 2021-12-12 23:48:20 +08:00
externalaccount Refactor auth package () 2022-01-02 21:12:35 +08:00
forms Move checks for pulls before merge into own function () () 2022-03-31 16:57:13 +02:00
gitdiff Bump to build with go1.18 ( et al) () 2022-03-19 18:46:47 +01:00
issue Fix bug () 2022-05-20 00:03:52 +02:00
lfs Support webauthn () 2022-01-14 16:03:31 +01:00
mailer Set Setpgid on child git processes () () 2022-06-03 23:39:15 -04:00
migrations ignore DNS error when doing migration allow/block check () 2022-05-02 08:11:45 +03:00
mirror Use full output of git show-ref --tags to get tags for PushUpdateAddTag () () 2022-03-29 23:19:57 +03:00
org Move repository model into models/repo () 2021-12-10 09:27:50 +08:00
pull Check for permission when fetching user controlled issues () () 2022-07-01 17:39:10 +02:00
release fix permission check for delete tag () () 2022-06-17 22:52:47 +01:00
repository Avoid MoreThanOne Error () () 2022-05-03 20:36:58 +08:00
task Some repository refactors () 2021-12-12 23:48:20 +08:00
user Move keys to models/asymkey () 2021-12-10 16:14:24 +08:00
webhook Only send webhook events to active system webhooks and only deliver to active hooks () () 2022-03-29 14:12:56 +02:00
wiki Fix various typos () 2022-01-10 17:32:37 +08:00