forks/forgejo
1
0
Fork 0
Code Releases Activity
forgejo/models/fixtures
History
Antoine GIRARD 8b24073713 Only serve attachments when linked to issue/release and if accessible by user (#9340) 
* test: add current attachement responses

* refactor: check if attachement is linked and accessible by user

* chore: clean TODO

* fix: typo attachement -> attachment

* revert un-needed go.sum change

* refactor: move models logic to models

* fix TestCreateIssueAttachment which was wrongly successful

* fix unit tests with unittype added

* fix unit tests with changes

* use a valid uuid format for pgsql int. test

* test: add unit test TestLinkedRepository

* refactor: allow uploader to access unlinked attachement

* add missing blank line

* refactor: move to a separate function repo.GetAttachment

* typo

* test: remove err test return

* refactor: use repo perm for access checking generally + 404 for all reject
2020-01-05 01:20:08 +02:00
..
access.yml
access_token.yml Hash App token (#6724) 2019-05-04 11:45:34 -04:00
action.yml Update heatmap fixtures to restore tests (#8615) 2019-10-21 21:19:53 +01:00
attachment.yml Only serve attachments when linked to issue/release and if accessible by user (#9340) 2020-01-05 01:20:08 +02:00
collaboration.yml Allow collaborators to view repo owned private org (#6965) 2019-05-16 11:48:40 -04:00
comment.yml fix 500 when reviewer is deleted with integration tests (#6856) 2019-05-06 20:09:31 +08:00
commit_status.yml
deleted_branch.yml Add deleted_branch table fixture (#2832) 2017-11-04 15:31:59 +02:00
deploy_key.yml Writable deploy keys (closes #671) (#3225) 2018-01-07 00:55:53 +02:00
email_address.yml
follow.yml
gpg_key.yml
gpg_key_import.yml add .gpg url (match github behaviour) (#6610) 2019-04-14 12:43:56 -04:00
hook_task.yml API endpoint for testing webhook (#3550) 2018-04-29 14:21:33 +08:00
issue.yml Fix #9189 - API Allow only specific Colums to be updated on Issue (#9539) 2020-01-01 17:51:10 -05:00
issue_assignees.yml [UI] IssuePage multi repo select (#8741) 2019-12-01 22:50:36 -05:00
issue_label.yml
issue_user.yml Multiple assignees (#3705) 2018-05-09 19:29:04 +03:00
issue_watch.yml Refactor Issues Subscription (#8738) 2019-11-20 22:50:54 +08:00
label.yml
login_source.yml Add LDAP integration tests (#3897) 2018-05-11 15:55:32 +08:00
milestone.yml Fix #9189 - API Allow only specific Colums to be updated on Issue (#9539) 2020-01-01 17:51:10 -05:00
notice.yml
notification.yml Add 'mark all read' option to notifications (#3097) 2017-12-07 13:52:57 +08:00
oauth2_application.yml Integrate OAuth2 Provider (#5378) 2019-03-08 11:42:50 -05:00
oauth2_authorization_code.yml Integrate OAuth2 Provider (#5378) 2019-03-08 11:42:50 -05:00
oauth2_grant.yml Integrate OAuth2 Provider (#5378) 2019-03-08 11:42:50 -05:00
org_user.yml Team permission to create repository in organization (#8312) 2019-11-20 19:27:49 +08:00
protected_branch.yml
public_key.yml test: command keys (#9357) 2019-12-15 08:11:31 +00:00
pull_request.yml Redirect issue if repo has configured external tracker. (#9247) 2019-12-06 23:21:18 -05:00
reaction.yml [API] Add Reactions (#9220) 2019-12-07 17:04:19 -05:00
release.yml Only serve attachments when linked to issue/release and if accessible by user (#9340) 2020-01-05 01:20:08 +02:00
repo_indexer_status.yml Code/repo search (#2582) 2017-10-27 09:10:54 +03:00
repo_redirect.yml
repo_topic.yml Add API endpoint for accessing repo topics (#7963) 2019-09-03 23:46:24 +08:00
repo_unit.yml Only serve attachments when linked to issue/release and if accessible by user (#9340) 2020-01-05 01:20:08 +02:00
repository.yml Fix #9189 - API Allow only specific Colums to be updated on Issue (#9539) 2020-01-01 17:51:10 -05:00
review.yml Branch protection: Possibility to not use whitelist but allow anyone with write access (#9055) 2019-12-03 20:08:56 -05:00
star.yml
stopwatch.yml [API] extend StopWatch (#9196) 2019-12-11 23:23:05 -05:00
team.yml Team permission to create repository in organization (#8312) 2019-11-20 19:27:49 +08:00
team_repo.yml Restrict permission check on repositories and fix some problems (#5314) 2018-11-28 19:26:14 +08:00
team_unit.yml Restrict permission check on repositories and fix some problems (#5314) 2018-11-28 19:26:14 +08:00
team_user.yml Team permission to create repository in organization (#8312) 2019-11-20 19:27:49 +08:00
topic.yml Add API endpoint for accessing repo topics (#7963) 2019-09-03 23:46:24 +08:00
tracked_time.yml [API] Extend times API (#9200) 2019-12-27 20:30:58 +00:00
two_factor.yml org/members: display 2FA members states + optimize sql requests (#7621) 2019-08-02 12:06:27 -04:00
u2f_registration.yml Add support for FIDO U2F (#3971) 2018-05-19 17:12:37 +03:00
user.yml Redirect issue if repo has configured external tracker. (#9247) 2019-12-06 23:21:18 -05:00
user_open_id.yml
watch.yml Auto-subscribe user to repository when they commit/tag to it (#7657) 2019-11-10 09:22:19 +00:00
webhook.yml Implement webhook branch filter (#7791) 2019-09-09 08:48:21 +03:00