tdsds.com/gitea
1
1
Fork 0
mirror of https://github.com/go-gitea/gitea synced 2025-08-16 06:28:27 +00:00
Code Releases Activity

Fix SQL Query for SearchTeam (#20844) (#20872)

Browse Source 
Backport #20844

Currently the function takes in the UserID option, but isn't being used within the SQL query. This patch fixes that by checking that only teams are being returned that the user belongs to.
 
Fix  #20829
This commit is contained in:
Gusted
2022-08-21 20:31:51 +02:00
committed by GitHub
parent 17d3a474e0
commit e6ec411491
7 changed files with 61 additions and 19 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
routers/web/org/teams.go
View File

@@ -339,7 +339,7 @@ func SearchTeam(ctx *context.Context) {
}
opts := &organization.SearchTeamOptions{
UserID: ctx.Doer.ID,
// UserID is not set because the router already requires the doer to be an org admin. Thus, we don't need to restrict to teams that the user belongs in
Keyword: ctx.FormTrim("q"),
OrgID: ctx.Org.Organization.ID,
IncludeDesc: ctx.FormString("include_desc") == "" || ctx.FormBool("include_desc"),