gitea/routers/api/v1/repo
Gusted 6162fb0a19
Check for permission when fetching user controlled issues (#20133) (#20196)
* Check if project has the same repository id with issue when assign project to issue

* Check if issue's repository id match project's repository id

* Add more permission checking

* Remove invalid argument

* Fix errors

* Add generic check

* Remove duplicated check

* Return error + add check for new issues

* Apply suggestions from code review

Co-authored-by: Gusted <williamzijl7@hotmail.com>
Co-authored-by: KN4CK3R <admin@oldschoolhack.me>
Co-authored-by: 6543 <6543@obermui.de>
2022-07-01 17:39:10 +02:00
..
blob.go Move repofiles from modules/repofiles to services/repository/files (#17774) 2021-11-24 15:56:24 +08:00
branch.go Don't error when branch's commit doesn't exist (#19547) (#19548) 2022-04-29 12:25:19 +02:00
collaborators.go Move repository model into models/repo (#17933) 2021-12-10 09:27:50 +08:00
commits.go Add API to get file commit history (#17652) 2021-12-22 06:17:33 +00:00
file.go Fix various typos (#18219) 2022-01-10 17:32:37 +08:00
fork.go - name: new parameter in CreateForkOption to give the forked repository (#18066) 2021-12-24 22:43:00 +08:00
git_hook.go Move macaron to chi (#14293) 2021-01-26 16:36:53 +01:00
git_ref.go Multiple Escaping Improvements (#17551) 2021-11-16 18:18:25 +00:00
hook.go Move accessmode into models/perm (#17828) 2021-11-28 12:58:28 +01:00
hook_test.go Decouple unit test, remove intermediate `unittestbridge` package (#17662) 2021-11-16 16:53:21 +08:00
issue.go User specific repoID or xorm builder conditions for issue search (#19475) (#19476) 2022-04-25 15:28:47 +02:00
issue_comment.go Fix PR comments UI (#18323) 2022-01-19 01:28:38 +08:00
issue_label.go Calculate label URL on API (#16186) 2021-09-10 18:03:16 +02:00
issue_reaction.go Add missing `X-Total-Count` and fix some related bugs (#17968) 2021-12-15 13:39:34 +08:00
issue_stopwatch.go Fix close issue but time watcher still running (#17643) 2021-11-21 17:11:48 +08:00
issue_subscription.go When attempting to subscribe other user to issue report why access denied (#18091) 2021-12-24 21:47:42 +08:00
issue_tracked_time.go Move user related model into models/user (#17781) 2021-11-24 17:49:20 +08:00
key.go Fix the bug: deploy key with write access can not push (#19010) (#19182) 2022-03-23 13:44:41 +00:00
label.go Calculate label URL on API (#16186) 2021-09-10 18:03:16 +02:00
language.go Move repository model into models/repo (#17933) 2021-12-10 09:27:50 +08:00
main_test.go Decouple unit test code from business code (#17623) 2021-11-12 22:36:47 +08:00
migrate.go Update object repo with the migrated repository (#18684) (#18726) 2022-02-11 17:23:41 +01:00
milestone.go [API] generalize list header (#16551) 2021-08-12 14:43:08 +02:00
mirror.go Move unit into models/unit/ (#17576) 2021-11-09 20:57:58 +01:00
notes.go Add an api endpoint to fetch git notes (#15373) (#16649) 2021-08-11 03:01:40 +02:00
pull.go Move checks for pulls before merge into own function (#19271) (#19277) 2022-03-31 16:57:13 +02:00
pull_review.go Check for permission when fetching user controlled issues (#20133) (#20196) 2022-07-01 17:39:10 +02:00
release.go fix permission check for delete tag (#19985) (#20001) 2022-06-17 22:52:47 +01:00
release_attachment.go Move attachment into models/repo/ (#17650) 2021-11-19 21:39:57 +08:00
release_tags.go fix permission check for delete tag (#19985) (#20001) 2022-06-17 22:52:47 +01:00
repo.go Mark TemplateLoading error as "UnprocessableEntity" (#19445) (#19446) 2022-04-22 21:07:57 +02:00
repo_test.go Move repository model into models/repo (#17933) 2021-12-10 09:27:50 +08:00
star.go Some repository refactors (#17950) 2021-12-12 23:48:20 +08:00
status.go Add missing `X-Total-Count` and fix some related bugs (#17968) 2021-12-15 13:39:34 +08:00
subscriber.go Some repository refactors (#17950) 2021-12-12 23:48:20 +08:00
tag.go fix permission check for delete tag (#19985) (#20001) 2022-06-17 22:52:47 +01:00
teams.go Move repository model into models/repo (#17933) 2021-12-10 09:27:50 +08:00
topic.go Some repository refactors (#17950) 2021-12-12 23:48:20 +08:00
transfer.go Add API to manage repo tranfers (#17963) 2021-12-23 23:26:52 -05:00
tree.go Add missing `X-Total-Count` and fix some related bugs (#17968) 2021-12-15 13:39:34 +08:00
wiki.go Add missing `X-Total-Count` and fix some related bugs (#17968) 2021-12-15 13:39:34 +08:00