Gusted 6162fb0a19

Check for permission when fetching user controlled issues (#20133) (#20196) ...

* Check if project has the same repository id with issue when assign project to issue

* Check if issue's repository id match project's repository id

* Add more permission checking

* Remove invalid argument

* Fix errors

* Add generic check

* Remove duplicated check

* Return error + add check for new issues

* Apply suggestions from code review

Co-authored-by: Gusted <williamzijl7@hotmail.com>
Co-authored-by: KN4CK3R <admin@oldschoolhack.me>
Co-authored-by: 6543 <6543@obermui.de>

2022-07-01 17:39:10 +02:00

..

blob.go

Move repofiles from modules/repofiles to services/repository/files (#17774)

2021-11-24 15:56:24 +08:00

branch.go

Don't error when branch's commit doesn't exist (#19547) (#19548)

2022-04-29 12:25:19 +02:00

collaborators.go

Move repository model into models/repo (#17933)

2021-12-10 09:27:50 +08:00

commits.go

Add API to get file commit history (#17652)

2021-12-22 06:17:33 +00:00

file.go

Fix various typos (#18219)

2022-01-10 17:32:37 +08:00

fork.go

- name: new parameter in CreateForkOption to give the forked repository (#18066)

2021-12-24 22:43:00 +08:00

git_hook.go

Move macaron to chi (#14293)

2021-01-26 16:36:53 +01:00

git_ref.go

Multiple Escaping Improvements (#17551)

2021-11-16 18:18:25 +00:00

hook_test.go

Decouple unit test, remove intermediate unittestbridge package (#17662)

2021-11-16 16:53:21 +08:00

hook.go

Move accessmode into models/perm (#17828)

2021-11-28 12:58:28 +01:00

issue_comment.go

Fix PR comments UI (#18323)

2022-01-19 01:28:38 +08:00

issue_label.go

Calculate label URL on API (#16186)

2021-09-10 18:03:16 +02:00

issue_reaction.go

Add missing X-Total-Count and fix some related bugs (#17968)

2021-12-15 13:39:34 +08:00

issue_stopwatch.go

Fix close issue but time watcher still running (#17643)

2021-11-21 17:11:48 +08:00

issue_subscription.go

When attempting to subscribe other user to issue report why access denied (#18091)

2021-12-24 21:47:42 +08:00

issue_tracked_time.go

Move user related model into models/user (#17781)

2021-11-24 17:49:20 +08:00

issue.go

User specific repoID or xorm builder conditions for issue search (#19475) (#19476)

2022-04-25 15:28:47 +02:00

key.go

Fix the bug: deploy key with write access can not push (#19010) (#19182)

2022-03-23 13:44:41 +00:00

label.go

Calculate label URL on API (#16186)

2021-09-10 18:03:16 +02:00

language.go

Move repository model into models/repo (#17933)

2021-12-10 09:27:50 +08:00

main_test.go

Decouple unit test code from business code (#17623)

2021-11-12 22:36:47 +08:00

migrate.go

Update object repo with the migrated repository (#18684) (#18726)

2022-02-11 17:23:41 +01:00

milestone.go

[API] generalize list header (#16551)

2021-08-12 14:43:08 +02:00

mirror.go

Move unit into models/unit/ (#17576)

2021-11-09 20:57:58 +01:00

notes.go

Add an api endpoint to fetch git notes (#15373) (#16649)

2021-08-11 03:01:40 +02:00

pull_review.go

Check for permission when fetching user controlled issues (#20133) (#20196)

2022-07-01 17:39:10 +02:00

pull.go

Move checks for pulls before merge into own function (#19271) (#19277)

2022-03-31 16:57:13 +02:00

release_attachment.go

Move attachment into models/repo/ (#17650)

2021-11-19 21:39:57 +08:00

release_tags.go

fix permission check for delete tag (#19985) (#20001)

2022-06-17 22:52:47 +01:00

release.go

fix permission check for delete tag (#19985) (#20001)

2022-06-17 22:52:47 +01:00

repo_test.go

Move repository model into models/repo (#17933)

2021-12-10 09:27:50 +08:00

repo.go

Mark TemplateLoading error as "UnprocessableEntity" (#19445) (#19446)

2022-04-22 21:07:57 +02:00

star.go

Some repository refactors (#17950)

2021-12-12 23:48:20 +08:00

status.go

Add missing X-Total-Count and fix some related bugs (#17968)

2021-12-15 13:39:34 +08:00

subscriber.go

Some repository refactors (#17950)

2021-12-12 23:48:20 +08:00

tag.go

fix permission check for delete tag (#19985) (#20001)

2022-06-17 22:52:47 +01:00

teams.go

Move repository model into models/repo (#17933)

2021-12-10 09:27:50 +08:00

topic.go

Some repository refactors (#17950)

2021-12-12 23:48:20 +08:00

transfer.go

Add API to manage repo tranfers (#17963)

2021-12-23 23:26:52 -05:00

tree.go

Add missing X-Total-Count and fix some related bugs (#17968)

2021-12-15 13:39:34 +08:00

wiki.go

Add missing X-Total-Count and fix some related bugs (#17968)

2021-12-15 13:39:34 +08:00