[PR #647] [MERGED] Fix permission bugs in team API #15511

New Issue

GiteaMirror · 2025-11-02T11:48:16-06:00

GiteaMirror commented

2025-11-02 11:48:16 -06:00

📋 Pull Request Information

Original PR: https://github.com/go-gitea/gitea/pull/647
Author: @ethantkoenig
Created: 1/11/2017
Status: ✅ Merged
Merged: 1/20/2017
Merged by: @lunny

Base: master ← Head: api/org_fixes

📝 Commits (1)

8aa3d1d Fix permission bugs in team API

📊 Changes

4 files changed (+137 additions, -121 deletions)

View changed files

📝 models/user.go (+1 -1)
➖ routers/api/v1/admin/org_team.go (+0 -88)
📝 routers/api/v1/api.go (+15 -19)
📝 routers/api/v1/org/team.go (+121 -13)

📄 Description

Some endpoints unnecessarily required the authenticated user to be an admin (basically everything removed from api/v1/admin/org_team.go).

Other endpoints didn't check that the authenticated user was an organization member.

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/go-gitea/gitea/pull/647 **Author:** [@ethantkoenig](https://github.com/ethantkoenig) **Created:** 1/11/2017 **Status:** ✅ Merged **Merged:** 1/20/2017 **Merged by:** [@lunny](https://github.com/lunny) **Base:** `master` ← **Head:** `api/org_fixes` --- ### 📝 Commits (1) - [`8aa3d1d`](https://github.com/go-gitea/gitea/commit/8aa3d1dc4c0a049b6f1b15498d26d83b53990900) Fix permission bugs in team API ### 📊 Changes **4 files changed** (+137 additions, -121 deletions) <details> <summary>View changed files</summary> 📝 `models/user.go` (+1 -1) ➖ `routers/api/v1/admin/org_team.go` (+0 -88) 📝 `routers/api/v1/api.go` (+15 -19) 📝 `routers/api/v1/org/team.go` (+121 -13) </details> ### 📄 Description Some endpoints unnecessarily required the authenticated user to be an admin (basically everything removed from `api/v1/admin/org_team.go`). Other endpoints didn't check that the authenticated user was an organization member. --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>

GiteaMirror added the pull-request label 2025-11-02 11:48:16 -06:00

GiteaMirror closed this issue

2025-11-02 11:48:16 -06:00

Sign in to join this conversation.

Branches Tags

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/gitea#15511