forgejo/services/issue
Gusted 693f7731f9
fix: check read permissions for code owner review requests
- Only send a review request based on the code owner file if the code
owner user has read permissions to the pull requests of that repository.
- This avoids leaking title of PRs from private repository when a
CODEOWNER file is present which contains users that do not have access
to the private repository.
- Found by @oliverpool.
- Integration test added.
2024-11-17 20:12:59 +01:00
..
assignee.go
assignee_test.go
comments.go [BUG] Don't fire notification for comment of pending review 2024-08-18 17:04:00 +02:00
comments_test.go [BUG] Don't fire notification for comment of pending review 2024-08-18 17:04:00 +02:00
commit.go
commit_test.go
content.go
issue.go
issue_test.go
label.go
label_test.go
main_test.go [BUG] Don't fire notification for comment of pending review 2024-08-18 17:04:00 +02:00
milestone.go
milestone_test.go
pull.go fix: check read permissions for code owner review requests 2024-11-17 20:12:59 +01:00
reaction.go
status.go
template.go refactor: remove redundant err declarations (#32381) 2024-11-05 09:33:15 +01:00