Antoine GIRARD 8b24073713 Only serve attachments when linked to issue/release and if accessible by user (#9340) ... * test: add current attachement responses * refactor: check if attachement is linked and accessible by user * chore: clean TODO * fix: typo attachement -> attachment * revert un-needed go.sum change * refactor: move models logic to models * fix TestCreateIssueAttachment which was wrongly successful * fix unit tests with unittype added * fix unit tests with changes * use a valid uuid format for pgsql int. test * test: add unit test TestLinkedRepository * refactor: allow uploader to access unlinked attachement * add missing blank line * refactor: move to a separate function repo.GetAttachment * typo * test: remove err test return * refactor: use repo perm for access checking generally + 404 for all reject		2020-01-05 01:20:08 +02:00
..
access_token.yml	Hash App token (#6724)	2019-05-04 11:45:34 -04:00
access.yml	Add search mode option to /api/repo/search (#2756)	2017-10-27 00:16:13 +03:00
action.yml	Update heatmap fixtures to restore tests (#8615)	2019-10-21 21:19:53 +01:00
attachment.yml	Only serve attachments when linked to issue/release and if accessible by user (#9340)	2020-01-05 01:20:08 +02:00
collaboration.yml	Allow collaborators to view repo owned private org (#6965)	2019-05-16 11:48:40 -04:00
comment.yml	fix 500 when reviewer is deleted with integration tests (#6856)	2019-05-06 20:09:31 +08:00
commit_status.yml	Status-API (#1332)	2017-04-21 19:32:31 +08:00
deleted_branch.yml	Add deleted_branch table fixture (#2832)	2017-11-04 15:31:59 +02:00
deploy_key.yml	Writable deploy keys (closes #671) (#3225)	2018-01-07 00:55:53 +02:00
email_address.yml	test: Add user mail testing. (#833)	2017-02-04 09:20:56 +08:00
follow.yml	Fix and test for delete user (#1713)	2017-05-20 16:48:22 +08:00
gpg_key_import.yml	add .gpg url (match github behaviour) (#6610)	2019-04-14 12:43:56 -04:00
gpg_key.yml	Add missing fixture to clean gpg_key table (#2494)	2017-09-12 13:54:45 +03:00
hook_task.yml	API endpoint for testing webhook (#3550)	2018-04-29 14:21:33 +08:00
issue_assignees.yml	[UI] IssuePage multi repo select (#8741)	2019-12-01 22:50:36 -05:00
issue_label.yml	Bug fixes and unit tests for models/issue_label (#802)	2017-02-01 09:31:35 +08:00
issue_user.yml	Multiple assignees (#3705)	2018-05-09 19:29:04 +03:00
issue_watch.yml	Refactor Issues Subscription (#8738)	2019-11-20 22:50:54 +08:00
issue.yml	Fix #9189 - API Allow only specific Colums to be updated on Issue (#9539)	2020-01-01 17:51:10 -05:00
label.yml	Bug fixes and unit tests for models/issue_label (#802)	2017-02-01 09:31:35 +08:00
login_source.yml	Add LDAP integration tests (#3897)	2018-05-11 15:55:32 +08:00
milestone.yml	Fix #9189 - API Allow only specific Colums to be updated on Issue (#9539)	2020-01-01 17:51:10 -05:00
notice.yml	Unit tests for models/admin	2017-01-09 21:49:51 +01:00
notification.yml	Add 'mark all read' option to notifications (#3097)	2017-12-07 13:52:57 +08:00
oauth2_application.yml	Integrate OAuth2 Provider (#5378)	2019-03-08 11:42:50 -05:00
oauth2_authorization_code.yml	Integrate OAuth2 Provider (#5378)	2019-03-08 11:42:50 -05:00
oauth2_grant.yml	Integrate OAuth2 Provider (#5378)	2019-03-08 11:42:50 -05:00
org_user.yml	Team permission to create repository in organization (#8312)	2019-11-20 19:27:49 +08:00
protected_branch.yml	Don't recreate database in integration tests (#1697)	2017-05-11 23:32:43 +08:00
public_key.yml	test: command keys (#9357)	2019-12-15 08:11:31 +00:00
pull_request.yml	Redirect issue if repo has configured external tracker. (#9247)	2019-12-06 23:21:18 -05:00
reaction.yml	[API] Add Reactions (#9220)	2019-12-07 17:04:19 -05:00
release.yml	Only serve attachments when linked to issue/release and if accessible by user (#9340)	2020-01-05 01:20:08 +02:00
repo_indexer_status.yml	Code/repo search (#2582)	2017-10-27 09:10:54 +03:00
repo_redirect.yml	Unit tests for repo redirects (#961)	2017-02-17 08:55:33 +08:00
repo_topic.yml	Add API endpoint for accessing repo topics (#7963)	2019-09-03 23:46:24 +08:00
repo_unit.yml	Only serve attachments when linked to issue/release and if accessible by user (#9340)	2020-01-05 01:20:08 +02:00
repository.yml	Fix #9189 - API Allow only specific Colums to be updated on Issue (#9539)	2020-01-01 17:51:10 -05:00
review.yml	Branch protection: Possibility to not use whitelist but allow anyone with write access (#9055)	2019-12-03 20:08:56 -05:00
star.yml	Unit tests for models/star (#752)	2017-01-25 18:37:10 +08:00
stopwatch.yml	[API] extend StopWatch (#9196)	2019-12-11 23:23:05 -05:00
team_repo.yml	Restrict permission check on repositories and fix some problems (#5314)	2018-11-28 19:26:14 +08:00
team_unit.yml	Restrict permission check on repositories and fix some problems (#5314)	2018-11-28 19:26:14 +08:00
team_user.yml	Team permission to create repository in organization (#8312)	2019-11-20 19:27:49 +08:00
team.yml	Team permission to create repository in organization (#8312)	2019-11-20 19:27:49 +08:00
topic.yml	Add API endpoint for accessing repo topics (#7963)	2019-09-03 23:46:24 +08:00
tracked_time.yml	[API] Extend times API (#9200)	2019-12-27 20:30:58 +00:00
two_factor.yml	org/members: display 2FA members states + optimize sql requests (#7621)	2019-08-02 12:06:27 -04:00
u2f_registration.yml	Add support for FIDO U2F (#3971)	2018-05-19 17:12:37 +03:00
user_open_id.yml	Show user OpenID URIs in their profile (#1314)	2017-03-20 09:31:08 +01:00
user.yml	Redirect issue if repo has configured external tracker. (#9247)	2019-12-06 23:21:18 -05:00
watch.yml	Auto-subscribe user to repository when they commit/tag to it (#7657)	2019-11-10 09:22:19 +00:00
webhook.yml	Implement webhook branch filter (#7791)	2019-09-09 08:48:21 +03:00