mirror of
https://github.com/go-gitea/gitea
synced 2025-08-09 02:58:20 +00:00
Improve permission check of packages (#23879)
At first, we have one unified team unit permission which is called `Team.Authorize` in DB. But since https://github.com/go-gitea/gitea/pull/17811, we allowed different units to have different permission. The old code is only designed for the old version. So after #17811, if org users have write permission of other units, but have no permission of packages, they can also get write permission of packages. Co-authored-by: delvh <dev.lh@web.de>
This commit is contained in:
@@ -268,3 +268,9 @@
|
||||
team_id: 9
|
||||
type: 1 # code
|
||||
access_mode: 1
|
||||
|
||||
-
|
||||
id: 46
|
||||
team_id: 17
|
||||
type: 9 # package
|
||||
access_mode: 0
|
||||
|
Reference in New Issue
Block a user