mirror of
https://github.com/go-gitea/gitea
synced 2025-08-09 11:08:19 +00:00
Improve permission check of packages (#23879)
At first, we have one unified team unit permission which is called `Team.Authorize` in DB. But since https://github.com/go-gitea/gitea/pull/17811, we allowed different units to have different permission. The old code is only designed for the old version. So after #17811, if org users have write permission of other units, but have no permission of packages, they can also get write permission of packages. Co-authored-by: delvh <dev.lh@web.de>
This commit is contained in:
@@ -99,3 +99,9 @@
|
||||
org_id: 3
|
||||
team_id: 14
|
||||
uid: 2
|
||||
|
||||
-
|
||||
id: 18
|
||||
org_id: 23
|
||||
team_id: 17
|
||||
uid: 5
|
||||
|
Reference in New Issue
Block a user