From 38e5589bd6e27272f42c8812e9e2a807b368b04e Mon Sep 17 00:00:00 2001 From: Giteabot Date: Tue, 13 Jun 2023 03:26:47 -0400 Subject: [PATCH] Hide limited users if viewed by anonymous ghost (#25214) (#25224) Backport #25214 by @KN4CK3R The ghost user leads to inclusion of limited users/orgs in `BuildCanSeeUserCondition`. Co-authored-by: KN4CK3R (cherry picked from commit a9ebf911faefb286d25c3731668740e0b2ed1904) --- models/packages/container/search.go | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/models/packages/container/search.go b/models/packages/container/search.go index b65c8634d6..e02aedfc9d 100644 --- a/models/packages/container/search.go +++ b/models/packages/container/search.go @@ -271,6 +271,10 @@ func GetRepositories(ctx context.Context, actor *user_model.User, n int, last st cond = cond.And(builder.Gt{"package_property.value": strings.ToLower(last)}) } + if actor.IsGhost() { + actor = nil + } + cond = cond.And(user_model.BuildCanSeeUserCondition(actor)) sess := db.GetEngine(ctx).