From 74cc3c5e18083ef65699c4c0268cea6c7f5781b5 Mon Sep 17 00:00:00 2001 From: Shashvat Kedia Date: Tue, 21 Apr 2020 20:52:04 +0530 Subject: [PATCH] Allow list collaborators for users with Read access to repo (#9995) Co-authored-by: Lunny Xiao --- routers/api/v1/api.go | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/routers/api/v1/api.go b/routers/api/v1/api.go index 4b20c3e7c0..cd451c1d5b 100644 --- a/routers/api/v1/api.go +++ b/routers/api/v1/api.go @@ -652,11 +652,11 @@ func RegisterRoutes(m *macaron.Macaron) { }, reqGitHook(), context.ReferencesGitRepo(true)) }, reqToken(), reqAdmin()) m.Group("/collaborators", func() { - m.Get("", repo.ListCollaborators) - m.Combo("/:collaborator").Get(repo.IsCollaborator). - Put(bind(api.AddCollaboratorOption{}), repo.AddCollaborator). - Delete(repo.DeleteCollaborator) - }, reqToken(), reqAdmin()) + m.Get("", reqAnyRepoReader(), repo.ListCollaborators) + m.Combo("/:collaborator").Get(reqAnyRepoReader(), repo.IsCollaborator). + Put(reqAdmin(), bind(api.AddCollaboratorOption{}), repo.AddCollaborator). + Delete(reqAdmin(), repo.DeleteCollaborator) + }, reqToken()) m.Get("/raw/*", context.RepoRefByType(context.RepoRefAny), reqRepoReader(models.UnitTypeCode), repo.GetRawFile) m.Get("/archive/*", reqRepoReader(models.UnitTypeCode), repo.GetArchive) m.Combo("/forks").Get(repo.ListForks).