Repository stars and watchers routes are allowed to access for all users even with no access to repository #791

Closed
opened 2025-11-02 03:36:55 -06:00 by GiteaMirror · 3 comments
Owner

Originally created by @lafriks on GitHub (Jun 8, 2017).

Repository stars and watchers routes are allowed to access for all users even with no any unit rights to repository where all other repository URL's would return 404

Originally created by @lafriks on GitHub (Jun 8, 2017). Repository stars and watchers routes are allowed to access for all users even with no any unit rights to repository where all other repository URL's would return 404
Author
Owner

@lunny commented on GitHub (Jun 8, 2017):

There is no unit to include this two routes.

@lunny commented on GitHub (Jun 8, 2017): There is no unit to include this two routes.
Author
Owner

@lafriks commented on GitHub (Jun 8, 2017):

Yes, but at least it should be checked just like home handler on len repository units > 0

@lafriks commented on GitHub (Jun 8, 2017): Yes, but at least it should be checked just like home handler on len repository units > 0
Author
Owner

@lunny commented on GitHub (Nov 28, 2018):

Should be fixed by #5314, close now and please feel free to reopen it.

@lunny commented on GitHub (Nov 28, 2018): Should be fixed by #5314, close now and please feel free to reopen it.
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/gitea#791