Antoine GIRARD 8b24073713 Only serve attachments when linked to issue/release and if accessible by user (#9340) ...

* test: add current attachement responses

* refactor: check if attachement is linked and accessible by user

* chore: clean TODO

* fix: typo attachement -> attachment

* revert un-needed go.sum change

* refactor: move models logic to models

* fix TestCreateIssueAttachment which was wrongly successful

* fix unit tests with unittype added

* fix unit tests with changes

* use a valid uuid format for pgsql int. test

* test: add unit test TestLinkedRepository

* refactor: allow uploader to access unlinked attachement

* add missing blank line

* refactor: move to a separate function repo.GetAttachment

* typo

* test: remove err test return

* refactor: use repo perm for access checking generally + 404 for all reject

2020-01-05 01:20:08 +02:00

..

access_token.yml

Hash App token (#6724)

2019-05-04 11:45:34 -04:00

access.yml

Add search mode option to /api/repo/search (#2756)

2017-10-27 00:16:13 +03:00

action.yml

Update heatmap fixtures to restore tests (#8615)

2019-10-21 21:19:53 +01:00

attachment.yml

Only serve attachments when linked to issue/release and if accessible by user (#9340)

2020-01-05 01:20:08 +02:00

collaboration.yml

Allow collaborators to view repo owned private org (#6965)

2019-05-16 11:48:40 -04:00

comment.yml

fix 500 when reviewer is deleted with integration tests (#6856)

2019-05-06 20:09:31 +08:00

commit_status.yml

Status-API (#1332)

2017-04-21 19:32:31 +08:00

deleted_branch.yml

Add deleted_branch table fixture (#2832)

2017-11-04 15:31:59 +02:00

deploy_key.yml

Writable deploy keys (closes #671) (#3225)

2018-01-07 00:55:53 +02:00

email_address.yml

test: Add user mail testing. (#833)

2017-02-04 09:20:56 +08:00

follow.yml

Fix and test for delete user (#1713)

2017-05-20 16:48:22 +08:00

gpg_key_import.yml

add .gpg url (match github behaviour) (#6610)

2019-04-14 12:43:56 -04:00

gpg_key.yml

Add missing fixture to clean gpg_key table (#2494)

2017-09-12 13:54:45 +03:00

hook_task.yml

API endpoint for testing webhook (#3550)

2018-04-29 14:21:33 +08:00

issue_assignees.yml

[UI] IssuePage multi repo select (#8741)

2019-12-01 22:50:36 -05:00

issue_label.yml

Bug fixes and unit tests for models/issue_label (#802)

2017-02-01 09:31:35 +08:00

issue_user.yml

Multiple assignees (#3705)

2018-05-09 19:29:04 +03:00

issue_watch.yml

Refactor Issues Subscription (#8738)

2019-11-20 22:50:54 +08:00

issue.yml

Fix #9189 - API Allow only specific Colums to be updated on Issue (#9539)

2020-01-01 17:51:10 -05:00

label.yml

Bug fixes and unit tests for models/issue_label (#802)

2017-02-01 09:31:35 +08:00

login_source.yml

Add LDAP integration tests (#3897)

2018-05-11 15:55:32 +08:00

milestone.yml

Fix #9189 - API Allow only specific Colums to be updated on Issue (#9539)

2020-01-01 17:51:10 -05:00

notice.yml

Unit tests for models/admin

2017-01-09 21:49:51 +01:00

notification.yml

Add 'mark all read' option to notifications (#3097)

2017-12-07 13:52:57 +08:00

oauth2_application.yml

Integrate OAuth2 Provider (#5378)

2019-03-08 11:42:50 -05:00

oauth2_authorization_code.yml

Integrate OAuth2 Provider (#5378)

2019-03-08 11:42:50 -05:00

oauth2_grant.yml

Integrate OAuth2 Provider (#5378)

2019-03-08 11:42:50 -05:00

org_user.yml

Team permission to create repository in organization (#8312)

2019-11-20 19:27:49 +08:00

protected_branch.yml

Don't recreate database in integration tests (#1697)

2017-05-11 23:32:43 +08:00

public_key.yml

test: command keys (#9357)

2019-12-15 08:11:31 +00:00

pull_request.yml

Redirect issue if repo has configured external tracker. (#9247)

2019-12-06 23:21:18 -05:00

reaction.yml

[API] Add Reactions (#9220)

2019-12-07 17:04:19 -05:00

release.yml

Only serve attachments when linked to issue/release and if accessible by user (#9340)

2020-01-05 01:20:08 +02:00

repo_indexer_status.yml

Code/repo search (#2582)

2017-10-27 09:10:54 +03:00

repo_redirect.yml

Unit tests for repo redirects (#961)

2017-02-17 08:55:33 +08:00

repo_topic.yml

Add API endpoint for accessing repo topics (#7963)

2019-09-03 23:46:24 +08:00

repo_unit.yml

Only serve attachments when linked to issue/release and if accessible by user (#9340)

2020-01-05 01:20:08 +02:00

repository.yml

Fix #9189 - API Allow only specific Colums to be updated on Issue (#9539)

2020-01-01 17:51:10 -05:00

review.yml

Branch protection: Possibility to not use whitelist but allow anyone with write access (#9055)

2019-12-03 20:08:56 -05:00

star.yml

Unit tests for models/star (#752)

2017-01-25 18:37:10 +08:00

stopwatch.yml

[API] extend StopWatch (#9196)

2019-12-11 23:23:05 -05:00

team_repo.yml

Restrict permission check on repositories and fix some problems (#5314)

2018-11-28 19:26:14 +08:00

team_unit.yml

Restrict permission check on repositories and fix some problems (#5314)

2018-11-28 19:26:14 +08:00

team_user.yml

Team permission to create repository in organization (#8312)

2019-11-20 19:27:49 +08:00

team.yml

Team permission to create repository in organization (#8312)

2019-11-20 19:27:49 +08:00

topic.yml

Add API endpoint for accessing repo topics (#7963)

2019-09-03 23:46:24 +08:00

tracked_time.yml

[API] Extend times API (#9200)

2019-12-27 20:30:58 +00:00

two_factor.yml

org/members: display 2FA members states + optimize sql requests (#7621)

2019-08-02 12:06:27 -04:00

u2f_registration.yml

Add support for FIDO U2F (#3971)

2018-05-19 17:12:37 +03:00

user_open_id.yml

Show user OpenID URIs in their profile (#1314)

2017-03-20 09:31:08 +01:00

user.yml

Redirect issue if repo has configured external tracker. (#9247)

2019-12-06 23:21:18 -05:00

watch.yml

Auto-subscribe user to repository when they commit/tag to it (#7657)

2019-11-10 09:22:19 +00:00

webhook.yml

Implement webhook branch filter (#7791)

2019-09-09 08:48:21 +03:00