Dashboard shows all organization repositories, not respecting access rights

[Morlinest]

• Gitea version (or commit ref): f61a1d2
• Git version:
• Operating system:
• Database (use [x]):
  • PostgreSQL
  • MySQL
  • MSSQL
  • SQLite
• Can you reproduce the bug at https://try.gitea.io:
  • Yes (provide example URL)
  • No
  • Not relevant
• Log gist:

Description

See title.

[lunny]

Any further information?

[Morlinest]

@lunny You can reproduce this by creating repositories in organization, one public and one private. Create user and assign him to organization (invite as collaborator or create team without rights for any repo). On dashboard you will see every repository of organization, but if you try to open the private one, you will end with 404 page.