Nulo/gitea
Archived
1
0
Fork 0
Code Issues Pull requests Projects Releases Activity

auth fix

Browse source
This commit is contained in:
Unknown 2014-03-26 07:42:08 -04:00
parent 3cc860a46f
commit 409e4cde7a
1 changed files with 5 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

10
routers/repo/issue.go
View file

@ -117,11 +117,6 @@ func ViewIssue(ctx *middleware.Context, params martini.Params) {
} }
func UpdateIssue(ctx *middleware.Context, params martini.Params, form auth.CreateIssueForm) { func UpdateIssue(ctx *middleware.Context, params martini.Params, form auth.CreateIssueForm) {
if !ctx.Repo.IsOwner {
ctx.Handle(404, "issue.UpdateIssue", nil)
return
}
index, err := base.StrTo(params["index"]).Int() index, err := base.StrTo(params["index"]).Int()
if err != nil { if err != nil {
ctx.Handle(404, "issue.UpdateIssue", err) ctx.Handle(404, "issue.UpdateIssue", err)
@ -138,6 +133,11 @@ func UpdateIssue(ctx *middleware.Context, params martini.Params, form auth.Creat
return return
} }
if ctx.User.Id != issue.PosterId {
ctx.Handle(404, "issue.UpdateIssue", nil)
return
}
issue.Name = form.IssueName issue.Name = form.IssueName
issue.MilestoneId = form.MilestoneId issue.MilestoneId = form.MilestoneId
issue.AssigneeId = form.AssigneeId issue.AssigneeId = form.AssigneeId