mirrors/forgejo
1
0
Fork 0
mirror of https://codeberg.org/forgejo/forgejo.git synced 2025-03-15 00:02:44 +00:00
Code Issues Projects Releases Packages Wiki Activity
forgejo/models/fixtures
History
Gusted a2958f5a26 fix: consider public issues for project boards () 
- The security patch of  fixed the issue where project boards loaded all issues without considering if the doer actually had permission to view that issue. Within that patch the call to `Issues` was modified to include this permission checking.
- The query being generated was not entirely correct. Issues in public repositories weren't considered correctly (partly the fault of not setting `AllPublic` unconditionally) in the cause an authenticated user loaded the project.
- This is now fixed by setting `AllPublic` unconditionally and subsequently fixing the `Issue` function to ensure that the combination of setting `AllPublic` and `User` generates the correct query, by combining the permission check and issues in public repositories as one `AND` query.
- Added unit testing.
- Added integration testing.
- Resolves 
- Regression of https://codeberg.org/forgejo/forgejo/pulls/6843

Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/7143
Reviewed-by: Otto <otto@codeberg.org>
Co-authored-by: Gusted <postmaster@gusted.xyz>
Co-committed-by: Gusted <postmaster@gusted.xyz>
2025-03-06 23:26:08 +00:00
..
PrivateIssueProjects fix: consider public issues for project boards () 2025-03-06 23:26:08 +00:00
TestGetUnmergedPullRequestsByHeadInfoMax Add codespell support and fix a good number of typos with its help () 2024-05-09 13:49:37 +00:00
TestParseCommitWithSSHSignature [GITEA] Add noreply email address as verified for SSH signed Git commits 2024-02-05 16:09:40 +01:00
access.yml Allow non-admin users to delete review requests () 2024-02-26 22:30:27 +01:00
access_token.yml Fix more yaml lint errors () 2023-09-26 12:56:42 -04:00
action.yml fix action fixtures 2024-03-24 07:12:31 +01:00
action_artifact.yml Add artifacts test fixture () 2024-11-05 09:33:15 +01:00
action_run.yml Fix bug on action list deleted branch () 2024-12-22 07:21:38 +01:00
action_run_job.yml Add search action jobs for API routes, repo, org and global level () 2025-01-14 11:17:42 +00:00
action_runner.yml feat(cli): add --keep-labels flag to forgejo actions register () 2024-07-22 07:33:45 +00:00
action_runner_token.yml Add unit tests for action runner token () 2023-10-19 07:24:24 +00:00
action_task.yml Fix missing outputs for jobs with matrix () 2024-12-15 10:14:21 +01:00
action_task_output.yml Fix missing outputs for jobs with matrix () 2024-12-15 10:14:21 +01:00
attachment.yml Allow get release download files and lfs files with oauth2 token format () 2023-10-01 10:41:52 +00:00
branch.yml Fix bug on action list deleted branch () 2024-12-22 07:21:38 +01:00
collaboration.yml Allow non-admin users to delete review requests () 2024-02-26 22:30:27 +01:00
comment.yml Fix the logic of finding the latest pull review commit ID () 2024-10-06 07:44:28 +02:00
commit_status.yml feat: improve GetLatestCommitStatusForPairs 2024-11-16 13:23:40 +01:00
commit_status_index.yml Fix more yaml lint errors () 2023-09-26 12:56:42 -04:00
deploy_key.yml Writable deploy keys (closes ) () 2018-01-07 00:55:53 +02:00
email_address.yml Allow non-admin users to delete review requests () 2024-02-26 22:30:27 +01:00
external_login_user.yml add test coverage for original author conversion during migrations () 2022-02-01 13:20:28 -05:00
federated_user.yml tests: improve actvititypub integration test code 2024-11-01 22:39:49 +01:00
federation_host.yml tests: improve actvititypub integration test code 2024-11-01 22:39:49 +01:00
follow.yml Fix user visible check () 2022-09-20 15:59:20 +08:00
forgejo_blocked_user.yml [MODERATION] User blocking 2024-02-05 15:56:45 +01:00
gpg_key.yml Fix verifyCommits error when push a new branch () 2023-08-30 02:27:53 +00:00
gpg_key_import.yml add .gpg url (match github behaviour) () 2019-04-14 12:43:56 -04:00
hook_task.yml test: check hook_task deletion 2024-05-24 10:31:41 +02:00
issue.yml [FEAT] Adds x-mode-only anchor styles to display images based if the theme is light or dark mode. () 2024-06-09 10:50:53 +00:00
issue_assignees.yml Fix issue overview for teams () 2022-05-16 17:49:17 +08:00
issue_index.yml [MODERATION] User blocking 2024-02-05 15:56:45 +01:00
issue_label.yml Add Organization Wide Labels () 2020-04-01 01:14:46 -03:00
issue_user.yml [API] ListIssues add more filters () 2021-06-16 18:33:37 -04:00
issue_watch.yml Refactor Issues Subscription () 2019-11-20 22:50:54 +08:00
label.yml Support org labels when adding labels by label names () 2024-12-28 19:32:09 +00:00
lfs_meta_object.yml test: LFS gc should not delete all metadata objects 2024-04-26 10:16:59 +02:00
login_source.yml Add LDAP integration tests () 2018-05-11 15:55:32 +08:00
milestone.yml Add some api integration tests () 2022-10-18 00:23:27 +08:00
mirror.yml Fix bug of branches API with tests () 2023-07-01 10:52:52 +08:00
notice.yml Unit tests for models/admin 2017-01-09 21:49:51 +01:00
notification.yml [API] Add notification endpoint () 2020-01-09 11:56:32 +00:00
oauth2_application.yml test(oauth): RFC 6749 Section 10.2 conformance 2024-06-05 17:50:15 +02:00
oauth2_authorization_code.yml Record OAuth client type at registration () 2022-10-24 15:59:24 +08:00
oauth2_grant.yml Record OAuth client type at registration () 2022-10-24 15:59:24 +08:00
org_user.yml Allow non-admin users to delete review requests () 2024-02-26 22:30:27 +01:00
project.yml Add default board to new projects, remove uncategorized pseudo-board () 2024-03-30 07:17:31 +01:00
project_board.yml Add default board to new projects, remove uncategorized pseudo-board () 2024-03-30 07:17:31 +01:00
project_issue.yml Kanban board () 2020-08-16 23:07:38 -04:00
protected_branch.yml Don't recreate database in integration tests () 2017-05-11 23:32:43 +08:00
protected_tag.yml Protected tag is no internal server error () 2024-05-19 13:12:35 +02:00
public_key.yml Fix more yaml lint errors () 2023-09-26 12:56:42 -04:00
pull_request.yml fix(ui): hide extra PR property labels on title edit () 2025-02-12 08:31:20 +00:00
push_mirror.yml tests(api): POST /repos/{owner}/{repo}/push_mirrors coverage 2024-06-02 16:31:41 +02:00
reaction.yml Fix more yaml lint errors () 2023-09-26 12:56:42 -04:00
release.yml [GITEA] Improve HTML title on repositories 2024-02-05 16:05:50 +01:00
renamed_branch.yml Add a simple way to rename branch like gh () 2021-10-08 19:03:04 +02:00
repo_archiver.yml Rework repository archive () 2021-06-23 17:12:38 -04:00
repo_indexer_status.yml Code/repo search () 2017-10-27 09:10:54 +03:00
repo_redirect.yml Unit tests for repo redirects () 2017-02-17 08:55:33 +08:00
repo_topic.yml Add API endpoint for accessing repo topics () 2019-09-03 23:46:24 +08:00
repo_transfer.yml Repository transfer has to be confirmed, if user can not create repo for new owner () 2021-03-01 01:47:30 +01:00
repo_unit.yml fix artifact range requests () 2024-07-10 05:28:01 +00:00
repository.yml fix: Add created_unix and updated_unix to repo1 fixture 2024-11-10 22:24:12 +01:00
review.yml Fix the logic of finding the latest pull review commit ID () 2024-10-06 07:44:28 +02:00
secret.yml chore: add empty secret table fixtures 2025-02-24 01:00:51 +01:00
star.yml Unit tests for models/star () 2017-01-25 18:37:10 +08:00
stopwatch.yml [API] extend StopWatch () 2019-12-11 23:23:05 -05:00
system_setting.yml disable gravatar in test () 2024-11-24 15:42:36 +00:00
team.yml Allow non-admin users to delete review requests () 2024-02-26 22:30:27 +01:00
team_repo.yml Allow non-admin users to delete review requests () 2024-02-26 22:30:27 +01:00
team_unit.yml fix(sec): add tests for private issues on projects 2025-02-08 07:22:10 +00:00
team_user.yml Allow non-admin users to delete review requests () 2024-02-26 22:30:27 +01:00
topic.yml Add some api integration tests () 2022-10-18 00:23:27 +08:00
tracked_time.yml [API] Extend times API () 2019-12-27 20:30:58 +00:00
two_factor.yml feat: migrate TOTP secrets to keying 2024-11-27 00:34:16 +01:00
user.yml feat: add pronoun privacy option () 2025-02-15 13:07:15 +00:00
user_open_id.yml Show user OpenID URIs in their profile () 2017-03-20 09:31:08 +01:00
user_redirect.yml feat: add configurable cooldown to claim usernames () 2025-01-24 04:16:56 +00:00
watch.yml [MODERATION] User blocking 2024-02-05 15:56:45 +01:00
webauthn_credential.yml [FEAT] Add support for webauthn credential level 3 2024-08-29 10:05:03 +02:00
webhook.yml test: webhook fix branch filter tests 2024-04-30 09:38:35 +02:00