forgejo/routers/api/v1/repo
Gusted 751a3da979 fix(api): allow collaborators to read their own permissions (#6856)
- Instead of checking the login name (which is not set in most cases and really the wrong thing to do here just like it is case sensitive) simply check that the requested user has the same ID as the doer.
- Resolves forgejo/forgejo#6837
- Add integration test.

Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/6856
Reviewed-by: Earl Warren <earl-warren@noreply.codeberg.org>
Reviewed-by: 0ko <0ko@noreply.codeberg.org>
Co-authored-by: Gusted <postmaster@gusted.xyz>
Co-committed-by: Gusted <postmaster@gusted.xyz>
2025-02-08 15:09:08 +00:00
..
action.go fix(sec): modify api route for variables 2025-02-08 07:21:14 +00:00
avatar.go
blob.go
branch.go Implement update branch API (#32433) 2024-12-15 09:24:31 +01:00
collaborators.go fix(api): allow collaborators to read their own permissions (#6856) 2025-02-08 15:09:08 +00:00
commits.go Return 404 instead of error when commit not exist (#31977) 2024-09-09 20:54:47 +02:00
compare.go feat: add files to compare (#6461) 2025-01-05 02:32:46 +00:00
download.go Add github compatible tarball download API endpoints (#32572) 2024-12-03 10:19:22 +01:00
file.go Use gitrepo.GetTreePathLatestCommit to get file lastest commit instead from latest commit cache (#32987) 2025-01-05 12:13:48 +00:00
flags.go
fork.go fix: don't show private forks in forks list 2024-11-15 10:59:36 +01:00
git_hook.go
git_ref.go Add codespell support and fix a good number of typos with its help (#3270) 2024-05-09 13:49:37 +00:00
hook.go
hook_test.go [TESTS] Fix usage of LoadRepoCommit 2024-08-26 08:03:48 +02:00
issue.go API: enhance SearchIssues swagger docs (#32208) 2024-10-20 09:44:18 +02:00
issue_attachment.go feat(quota): Quota enforcement 2024-08-02 11:10:34 +02:00
issue_comment.go Load attachments for /issues/comments/{id} 2024-07-16 11:09:54 +02:00
issue_comment_attachment.go feat(quota): Quota enforcement 2024-08-02 11:10:34 +02:00
issue_dependency.go Fix missed doer (#30231) 2024-04-15 20:01:35 +02:00
issue_label.go Support org labels when adding labels by label names (#32988) 2024-12-28 19:32:09 +00:00
issue_pin.go Fix missed doer (#30231) 2024-04-15 20:01:35 +02:00
issue_reaction.go
issue_stopwatch.go Improve Swagger documentation for user endpoints 2024-11-23 10:33:55 +01:00
issue_subscription.go Add codespell support and fix a good number of typos with its help (#3270) 2024-05-09 13:49:37 +00:00
issue_tracked_time.go Improve Swagger documentation for user endpoints 2024-11-23 10:33:55 +01:00
key.go
label.go
language.go
main_test.go
migrate.go fix: enable releases and/or wiki if user set the options in repo migration (#6051) 2025-01-12 09:16:45 +00:00
milestone.go
mirror.go [FIX] Don't allow SSH authentication without ssh executable 2024-08-26 08:58:35 +02:00
notes.go [FEAT]Allow changing git notes (#4753) 2024-11-18 22:56:17 +00:00
patch.go feat(quota): Quota enforcement 2024-08-02 11:10:34 +02:00
pull.go fmt 2024-11-16 18:12:40 +01:00
pull_review.go Fix the logic of finding the latest pull review commit ID (#32139) 2024-10-06 07:44:28 +02:00
release.go feat: Add Search to Releases Page 2024-11-02 10:24:35 +01:00
release_attachment.go feat(quota): Quota enforcement 2024-08-02 11:10:34 +02:00
release_tags.go Protected tag is no internal server error (#30962) 2024-05-19 13:12:35 +02:00
repo.go feat: allow changing default branch update style 2024-12-23 18:55:25 +03:00
repo_test.go
star.go
status.go
subscriber.go
tag.go feat(quota): Quota enforcement 2024-08-02 11:10:34 +02:00
teams.go
topic.go
transfer.go feat(quota): Quota enforcement 2024-08-02 11:10:34 +02:00
tree.go
wiki.go feat(quota): Quota enforcement 2024-08-02 11:10:34 +02:00