mirror of
https://github.com/go-gitea/gitea
synced 2025-08-04 08:38:37 +00:00
Improve permission check of packages (#23879)
At first, we have one unified team unit permission which is called `Team.Authorize` in DB. But since https://github.com/go-gitea/gitea/pull/17811, we allowed different units to have different permission. The old code is only designed for the old version. So after #17811, if org users have write permission of other units, but have no permission of packages, they can also get write permission of packages. Co-authored-by: delvh <dev.lh@web.de>
This commit is contained in:
@@ -75,3 +75,9 @@
|
||||
uid: 31
|
||||
org_id: 19
|
||||
is_public: true
|
||||
|
||||
-
|
||||
id: 14
|
||||
uid: 5
|
||||
org_id: 23
|
||||
is_public: false
|
||||
|
Reference in New Issue
Block a user