forgejo/routers
Gusted 421cfba3cf fix: return error when user is not repo writer (#8690)
- If the doer isn't a issue/pull writer, return a error.
- Fixes a panic (NPE), because the callers of `prepareForReplaceOrAdd` simply checked if there was a error returned to see if the user was allowed. It didn't check if a statuscode was written. This is specifically a issue when the automatic token by Forgejo actions is used.

Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/8690
Reviewed-by: Earl Warren <earl-warren@noreply.codeberg.org>
Co-authored-by: Gusted <postmaster@gusted.xyz>
Co-committed-by: Gusted <postmaster@gusted.xyz>
2025-07-27 10:17:33 +02:00
..
api fix: return error when user is not repo writer (#8690) 2025-07-27 10:17:33 +02:00
common feat: add tracing logs after process is complete (#8680) 2025-07-26 05:44:58 +02:00
install chore: use sharp to generate images (#7512) 2025-04-11 15:12:50 +00:00
private feat: add a EXCLUSION to the logger (#8212) 2025-07-04 00:08:23 +02:00
utils [PORT] drop utils.IsExternalURL (and expand IsRiskyRedirectURL tests) (#3167) 2024-04-15 13:03:08 +00:00
web fix: don't mark files in AGit PRs as editable (#8642) 2025-07-27 10:05:55 +02:00
init.go chore: branding import path (#7337) 2025-03-27 19:40:14 +00:00