Skip to content

Repo listings include all repos of org for restricted user #16281

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Closed
1 of 4 tasks
noerw opened this issue Jun 28, 2021 · 2 comments
Closed
1 of 4 tasks

Repo listings include all repos of org for restricted user #16281

noerw opened this issue Jun 28, 2021 · 2 comments
Labels
issue/needs-feedback For bugs, we need more details. For features, the feature must be described in more detail type/bug

Comments

@noerw
Copy link
Member

noerw commented Jun 28, 2021 •
edited
Loading

  • Gitea version (or commit ref): 1.14.3
  • Database (use [x]):
    • PostgreSQL
    • MySQL
    • MSSQL
    • SQLite

Description

Context:
Have a restricted user that is member in an organization team with access to a subset of repos of that organization.

This restricted user will see all repos of that organization listed when visiting /explore/repos or /<org>.
Visiting the repo page of a repo that is listed, but not part of the team's access, will give a 404.

So there is a mistake in the repo list query for the explore & org page..
@noerw noerw added the type/bug label Jun 28, 2021
@noerw noerw changed the title Explore page lists all repos of org in explore page for restricted user Repo listings include all repos of org for restricted user Jun 28, 2021
@noerw noerw mentioned this issue Oct 2, 2021
Closed
6 tasks
@wolfogre
Copy link
Member

I can't reproduce it in the latest version(1.19.0+dev-234-g90237d8ab). Maybe it's an outdated issue?

@wolfogre wolfogre added the issue/needs-feedback For bugs, we need more details. For features, the feature must be described in more detail label Dec 27, 2022
@lunny
Copy link
Member

lunny commented Dec 27, 2022

Let's close it for now and please feel free to reopen it.

@lunny lunny closed this as completed Dec 27, 2022
@go-gitea go-gitea locked and limited conversation to collaborators May 3, 2023
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Assignees
No one assigned
Labels
issue/needs-feedback For bugs, we need more details. For features, the feature must be described in more detail type/bug
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
3 participants
@lunny @noerw @wolfogre