mirror of
https://github.com/go-gitea/gitea
synced 2024-11-29 23:17:51 +01:00
Merge pull request #958 from phsmit/fix_mirror_access
Make sure that a mirror can't be written to by http or ssh
This commit is contained in:
commit
58e28e5d9d
2 changed files with 10 additions and 0 deletions
|
@ -164,6 +164,11 @@ func runServ(c *cli.Context) {
|
||||||
println("You have no right to write this repository")
|
println("You have no right to write this repository")
|
||||||
log.GitLogger.Fatal(2, "User %s has no right to write repository %s", user.Name, repoPath)
|
log.GitLogger.Fatal(2, "User %s has no right to write repository %s", user.Name, repoPath)
|
||||||
}
|
}
|
||||||
|
|
||||||
|
if repo.IsMirror {
|
||||||
|
println("You can't write to a mirror repository")
|
||||||
|
log.GitLogger.Fatal(2, "User %s tried to write to a mirror repository %s", user.Name, repoPath)
|
||||||
|
}
|
||||||
case isRead:
|
case isRead:
|
||||||
if !repo.IsPrivate {
|
if !repo.IsPrivate {
|
||||||
break
|
break
|
||||||
|
|
|
@ -158,6 +158,11 @@ func Http(ctx *middleware.Context) {
|
||||||
return
|
return
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
|
if !isPull && repo.IsMirror {
|
||||||
|
ctx.Handle(401, "can't push to mirror", nil)
|
||||||
|
return
|
||||||
|
}
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|
Loading…
Reference in a new issue