Team members able to see issues for private repositories not part of team #1815

New Issue

GiteaMirror · 2025-11-02T04:14:08-06:00

GiteaMirror commented

2025-11-02 04:14:08 -06:00

Originally created by @bkraul on GitHub (May 23, 2018).

Gitea version (or commit ref): b574af2
Git version: 2.15.0
Operating system: Ubuntu 18.04 LTS (docker)
Database (use [x]):
- PostgreSQL
- MySQL
- MSSQL
- SQLite
Can you reproduce the bug at https://try.gitea.io:
- Yes (provide example URL)
- No
- Not relevant

Description

This issue was discovered trying to target the opposite situation. Basically what happens is that when a team is added to an organization, the user in the team can see the list of issues for all projects in the organization, but not able to click on them (getting instead a 404 error).

The correct behavior should be that no issues for private repositories should be visible if the repositories are not part of the team in question.

Screnshots

Originally created by @bkraul on GitHub (May 23, 2018).  - Gitea version (or commit ref): b574af2 - Git version: 2.15.0 - Operating system: Ubuntu 18.04 LTS (docker) - Database (use `[x]`): - [ ] PostgreSQL - [x] MySQL - [ ] MSSQL - [ ] SQLite - Can you reproduce the bug at https://try.gitea.io: - [ ] Yes (provide example URL) - [ ] No - [x] Not relevant ## Description This issue was discovered trying to target the opposite situation. Basically what happens is that when a team is added to an organization, the user in the team can see the list of issues for all projects in the organization, but not able to click on them (getting instead a 404 error). The correct behavior should be that no issues for private repositories should be visible if the repositories are not part of the team in question. ## Screnshots ![image](https://user-images.githubusercontent.com/14616851/40454592-f55202c8-5eae-11e8-8189-f7e6136c7a42.png) ![image](https://user-images.githubusercontent.com/14616851/40454597-fcffebc0-5eae-11e8-8d83-eb1b5fa0c557.png)

GiteaMirror added the type/bug label 2025-11-02 04:14:08 -06:00

GiteaMirror closed this issue

2025-11-02 04:14:08 -06:00

GiteaMirror commented

2025-11-02 04:14:09 -06:00

@techknowlogick commented on GitHub (Jun 21, 2018):

Closed with #4034

@techknowlogick commented on GitHub (Jun 21, 2018): Closed with #4034

GiteaMirror referenced this issue

2025-11-02 12:01:28 -06:00

[PR #1815] [MERGED] fix bug to deny to add orgnization as a member of an orgnization or team #16063

Sign in to join this conversation.