Repo listings include all repos of org for restricted user

[noerw]

• Gitea version (or commit ref): 1.14.3
• Database (use [x]):
  • PostgreSQL
  • MySQL
  • MSSQL
  • SQLite

Description

Context:
Have a restricted user that is member in an organization team with access to a subset of repos of that organization.

This restricted user will see all repos of that organization listed when visiting /explore/repos or /<org>.
Visiting the repo page of a repo that is listed, but not part of the team's access, will give a 404.

So there is a mistake in the repo list query for the explore & org page..

[wolfogre]

I can't reproduce it in the latest version(1.19.0+dev-234-g90237d8ab). Maybe it's an outdated issue?

[lunny]

Let's close it for now and please feel free to reopen it.