thepaperpilot/forgejo
1
0
Fork 0
Code Issues Pull requests Releases Activity Actions 3

Merge pull request #958 from phsmit/fix_mirror_access

Browse source 
Make sure that a mirror can't be written to by http or ssh
This commit is contained in:
无闻 2015-02-17 23:09:53 -05:00
commit 58e28e5d9d
2 changed files with 10 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
cmd/serve.go
View file

@ -164,6 +164,11 @@ func runServ(c *cli.Context) {
println("You have no right to write this repository") println("You have no right to write this repository")
log.GitLogger.Fatal(2, "User %s has no right to write repository %s", user.Name, repoPath) log.GitLogger.Fatal(2, "User %s has no right to write repository %s", user.Name, repoPath)
} }
if repo.IsMirror {
println("You can't write to a mirror repository")
log.GitLogger.Fatal(2, "User %s tried to write to a mirror repository %s", user.Name, repoPath)
}
case isRead: case isRead:
if !repo.IsPrivate { if !repo.IsPrivate {
break break

5
routers/repo/http.go
View file

@ -158,6 +158,11 @@ func Http(ctx *middleware.Context) {
return return
} }
} }
if !isPull && repo.IsMirror {
ctx.Handle(401, "can't push to mirror", nil)
return
}
} }
} }