1
0
Fork 0
mirror of https://codeberg.org/forgejo/forgejo.git synced 2024-12-26 13:29:12 -05:00
forgejo/routers/api/v1/repo
Gusted 5488ec7d96
security: add permission check to 'delete branch after merge'
- Add a permission check that the doer has write permissions to the head
repository if the the 'delete branch after merge' is enabled when
merging a pull request.
- Unify the checks in the web and API router to `DeleteBranchAfterMerge`.
- Added integration tests.

(cherry picked from commit 266e0b2ce9)

Conflicts:
	tests/integration/pull_merge_test.go
  trivial context conflict
2024-10-28 06:32:10 +01:00
..
action.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
avatar.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
blob.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
branch.go Fix branch_protection api shows users/teams who has no readAccess (#30291) (#30544) 2024-04-21 18:10:34 +02:00
collaborators.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
commits.go [BUG] Use correct SHA in GetCommitPullRequest 2024-07-06 21:00:31 +00:00
file.go Add an immutable tarball link to archive download headers for Nix 2024-05-29 18:50:14 +00:00
flags.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
fork.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
git_hook.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
git_ref.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
hook.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
hook_test.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
issue.go fix(api): issue state change is not idempotent 2024-07-25 14:21:00 +00:00
issue_attachment.go Catch and handle unallowed file type errors in issue attachment API (#30791) 2024-05-07 08:12:34 +01:00
issue_comment.go Load attachments for /issues/comments/{id} 2024-07-16 12:44:47 +00:00
issue_comment_attachment.go Catch and handle unallowed file type errors in issue attachment API (#30791) 2024-05-07 08:12:34 +01:00
issue_dependency.go Fix missed doer (#30231) (#30343) 2024-04-15 16:21:45 +02:00
issue_label.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
issue_pin.go Fix missed doer (#30231) (#30343) 2024-04-15 16:21:45 +02:00
issue_reaction.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
issue_stopwatch.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
issue_subscription.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
issue_tracked_time.go Fix missed doer (#30231) (#30343) 2024-04-15 16:21:45 +02:00
key.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
label.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
language.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
main_test.go make writing main test easier (#27270) 2023-09-28 01:38:53 +00:00
migrate.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
milestone.go remove util.OptionalBool and related functions (#29513) 2024-03-06 12:10:46 +08:00
mirror.go Add missed return after ctx.ServerError (#31130) (partial) 2024-06-02 15:45:31 +00:00
notes.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
patch.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
pull.go security: add permission check to 'delete branch after merge' 2024-10-28 06:32:10 +01:00
pull_review.go Prevent re-review and dismiss review actions on closed and merged PRs (#30065) 2024-03-30 07:17:32 +01:00
release.go Fix release published actions not triggering for releases created from existing tags 2024-04-16 18:28:53 +00:00
release_attachment.go Add support for API blob upload of release attachments (#29507) 2024-03-06 12:10:46 +08:00
release_tags.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
repo.go Simplify mirror repository API logic (#30963) 2024-05-24 15:15:07 +02:00
repo_test.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
runners.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
star.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
status.go Cache repository default branch commit status to reduce query on commit status table (#29444) 2024-03-11 23:36:58 +07:00
subscriber.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
tag.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
teams.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
topic.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
transfer.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
tree.go Move context from modules to services (#29440) 2024-03-06 12:10:43 +08:00
wiki.go Fix an actions schedule bug (#28942) 2024-03-25 16:27:32 +01:00