Not shared private repos are shown in the explore page #628

New Issue

GiteaMirror · 2025-11-02T03:30:52-06:00

GiteaMirror commented

2025-11-02 03:30:52 -06:00

Originally created by @yusefmaali on GitHub (Apr 9, 2017).

Private repos not shared with me and owned by an organization I'm part of, are shown in the explore page. If I try to access to these repos, result in a 404.

Expected behaviour: private repos should not be visibile to users not allowed to access them, even if they are part of the organization.
This can reveal private informations and be confusing for the users.

I've created a test case in try.gitea.io, but I need a list of users to add and show the bug.

Originally created by @yusefmaali on GitHub (Apr 9, 2017). Private repos not shared with me and owned by an organization I'm part of, are shown in the explore page. If I try to access to these repos, result in a 404. Expected behaviour: private repos should not be visibile to users not allowed to access them, even if they are part of the organization. This can reveal private informations and be confusing for the users. I've created a test case in try.gitea.io, but I need a list of users to add and show the bug.

GiteaMirror added the issue/stale label 2025-11-02 03:30:52 -06:00

GiteaMirror closed this issue

2025-11-02 03:30:53 -06:00

GiteaMirror commented

2025-11-02 03:30:53 -06:00

@stale[bot] commented on GitHub (Feb 16, 2019):

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs during the next 2 weeks. Thank you for your contributions.

@stale[bot] commented on GitHub (Feb 16, 2019): This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs during the next 2 weeks. Thank you for your contributions.

GiteaMirror commented

2025-11-02 03:30:54 -06:00

@stale[bot] commented on GitHub (Mar 2, 2019):

This issue has been automatically closed because of inactivity. You can re-open it if needed.

@stale[bot] commented on GitHub (Mar 2, 2019): This issue has been automatically closed because of inactivity. You can re-open it if needed.

GiteaMirror referenced this issue

2025-11-02 11:47:56 -06:00

[PR #628] [MERGED] Unit tests for models/admin #15498

Sign in to join this conversation.