natalie/indefero
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Fixed security issue, read access on a git project marked as private and source access marked as login in/all access.

Browse Source
This commit is contained in:
Loic d'Anterroches 2010-02-19 17:43:29 +01:00
parent c486ca928b
commit a5a5c7b2b6
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
src/IDF/Plugin/SyncGit/Serve.php
View File

@ -162,7 +162,7 @@ class IDF_Plugin_SyncGit_Serve
$request->user = $user; $request->user = $user;
$request->conf = $conf; $request->conf = $conf;
$request->project = $project; $request->project = $project;
if (true === IDF_Precondition::accessTabGeneric($request, 'source_access_rights')) { if (true === IDF_Precondition::accessSource($request)) {
if ($mode == 'readonly') { if ($mode == 'readonly') {
return array(Pluf::f('idf_plugin_syncgit_base_repositories', '/home/git/repositories'), return array(Pluf::f('idf_plugin_syncgit_base_repositories', '/home/git/repositories'),
$project->shortname); $project->shortname);