forgejo/routers/api/v1
Gusted 751a3da979 fix(api): allow collaborators to read their own permissions (#6856)
- Instead of checking the login name (which is not set in most cases and really the wrong thing to do here just like it is case sensitive) simply check that the requested user has the same ID as the doer.
- Resolves forgejo/forgejo#6837
- Add integration test.

Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/6856
Reviewed-by: Earl Warren <earl-warren@noreply.codeberg.org>
Reviewed-by: 0ko <0ko@noreply.codeberg.org>
Co-authored-by: Gusted <postmaster@gusted.xyz>
Co-committed-by: Gusted <postmaster@gusted.xyz>
2025-02-08 15:09:08 +00:00
..
activitypub [PORT] Remove SHA1 for support for ssh rsa signing (#31857) (#5303) 2025-01-17 03:17:10 +00:00
admin feat: add configurable cooldown to claim usernames (#6422) 2025-01-24 04:16:56 +00:00
misc Added alt's to <img> 2025-01-31 21:22:00 +00:00
notify drop log.Error in ReadRepoNotifications 2024-03-24 07:12:31 +01:00
org fix(sec): modify api route for variables 2025-02-08 07:21:14 +00:00
packages remove util.OptionalBool and related functions (#29513) 2024-03-06 12:10:46 +08:00
repo fix(api): allow collaborators to read their own permissions (#6856) 2025-02-08 15:09:08 +00:00
settings Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
shared Add search action jobs for API routes, repo, org and global level (#6300) 2025-01-14 11:17:42 +00:00
swagger Inclusion of rename organization api (#33303) 2025-02-02 12:01:58 +01:00
user fix(sec): modify api route for variables 2025-02-08 07:21:14 +00:00
utils Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
api.go Inclusion of rename organization api (#33303) 2025-02-02 12:01:58 +01:00