thepaperpilot/forgejo
1
0
Fork 0
Code Issues Pull requests Releases Activity Actions

Restricted users only see repos in orgs which their team was assigned to (#28025) (#28050)

Browse source 
Backport #28025 by @6543

---
*Sponsored by Kithara Software GmbH*

Co-authored-by: 6543 <m.huber@kithara.com>
(cherry picked from commit 439e071acf)
This commit is contained in:
Giteabot 2023-11-14 23:44:38 +08:00 committed by Earl Warren
parent 5d18f4b19f
commit f302373eb4
No known key found for this signature in database
GPG key ID: 0579CB2928A78A00
1 changed files with 5 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

10
models/repo/repo_list.go
View file

@ -637,12 +637,12 @@ func AccessibleRepositoryCondition(user *user_model.User, unitType unit.Type) bu
userOrgTeamUnitRepoCond("`repository`.id", user.ID, unitType), userOrgTeamUnitRepoCond("`repository`.id", user.ID, unitType),
) )
} }
cond = cond.Or( // 4. Repositories that we directly own
// 4. Repositories that we directly own cond = cond.Or(builder.Eq{"`repository`.owner_id": user.ID})
builder.Eq{"`repository`.owner_id": user.ID}, if !user.IsRestricted {
// 5. Be able to see all public repos in private organizations that we are an org_user of // 5. Be able to see all public repos in private organizations that we are an org_user of
userOrgPublicRepoCond(user.ID), cond = cond.Or(userOrgPublicRepoCond(user.ID))
) }
} }
return cond return cond