thepaperpilot/forgejo
1
0
Fork 0
Code Issues Pull requests Releases Activity Actions

enforce reqRepoReader(unit.TypeIssues) POST /repos/{owner}/{repo}/issues

Browse source 
(cherry picked from commit d3db2fa8bc85e9d67f30854bba0a4c1e8b57b015)
This commit is contained in:
Loïc Dachary 2023-11-02 15:42:22 +01:00
parent cb6b7f1050
commit fec0754995
No known key found for this signature in database
GPG key ID: 992D23B392F9E4F2
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
routers/api/v1/api.go
View file

@ -1266,7 +1266,7 @@ func Routes() *web.Route {
m.Group("/{username}/{reponame}", func() {
m.Group("/issues", func() {
m.Combo("").Get(repo.ListIssues).
Post(reqToken(), mustNotBeArchived, bind(api.CreateIssueOption{}), repo.CreateIssue)
Post(reqToken(), mustNotBeArchived, bind(api.CreateIssueOption{}), reqRepoReader(unit.TypeIssues), repo.CreateIssue)
m.Get("/pinned", reqRepoReader(unit.TypeIssues), repo.ListPinnedIssues)
m.Group("/comments", func() {
m.Get("", repo.ListRepoIssueComments)