Antoine GIRARD 8b24073713 Only serve attachments when linked to issue/release and if accessible by user (#9340) ...

* test: add current attachement responses

* refactor: check if attachement is linked and accessible by user

* chore: clean TODO

* fix: typo attachement -> attachment

* revert un-needed go.sum change

* refactor: move models logic to models

* fix TestCreateIssueAttachment which was wrongly successful

* fix unit tests with unittype added

* fix unit tests with changes

* use a valid uuid format for pgsql int. test

* test: add unit test TestLinkedRepository

* refactor: allow uploader to access unlinked attachement

* add missing blank line

* refactor: move to a separate function repo.GetAttachment

* typo

* test: remove err test return

* refactor: use repo perm for access checking generally + 404 for all reject

2020-01-05 01:20:08 +02:00

..

activity.go

Add additional periods to activity page (#8829)

2019-11-05 00:45:48 -05:00

attachment.go

Only serve attachments when linked to issue/release and if accessible by user (#9340)

2020-01-05 01:20:08 +02:00

blame.go

Respect LFS File Lock on UI (#8719)

2019-10-29 23:32:21 +02:00

branch.go

Push update after branch is restored (#9416)

2019-12-26 15:17:31 +02:00

commit.go

enable lazy-loading of gitgraph.js (#9036)

2019-11-17 23:39:06 +02:00

compare.go

Add SimpleMDE to compare page for PRs (#9376)

2019-12-16 14:57:30 -05:00

download.go

Add missed close in ServeBlobLFS (#8527)

2019-10-16 06:55:31 +01:00

editor_test.go

Add Close() method to gogitRepository (#8901)

2019-11-13 07:01:19 +00:00

editor.go

Fix some SimpleMDE (#9400)

2019-12-17 22:59:59 -05:00

http.go

Push to create repo (#8419)

2019-12-15 10:49:52 +08:00

issue_dependency.go

adding calls to issue.LoadRepo() prior to calling issue.HTMLURL() (#9484)

2019-12-25 01:46:16 +02:00

issue_label_test.go

fix go vet error (#3740)

2018-03-30 07:21:27 +08:00

issue_label.go

Move issue label operations to issue service package (#8553)

2019-10-19 12:48:29 +03:00

issue_lock.go

Implement "conversation lock" for issue comments (#5073)

2019-02-18 22:55:04 +02:00

issue_stopwatch.go

Automatically clear stopwatch on merging a PR (#4327)

2019-02-05 13:38:11 +02:00

issue_timetrack.go

[API] Extend times API (#9200)

2019-12-27 20:30:58 +00:00

issue_watch.go

Fix PR/issue redirects when having external tracker (#9339)

2019-12-14 01:53:32 +01:00

issue.go

Add branch protection option to block merge on requested changes. (#9592)

2020-01-03 19:47:09 +02:00

lfs.go

Make repository management section handle lfs locks (#8726)

2019-12-12 21:18:07 +08:00

main_test.go

Unit tests for wiki routers (#3022)

2017-11-30 17:52:15 +02:00

middlewares.go

fix wrong system notice when repository is empty (#9010)

2019-11-15 10:53:20 +00:00

milestone.go

Display ui time with customize time location (#7792)

2019-08-15 22:46:21 +08:00

pull_review.go

Refactor pull request review (#8954)

2019-11-14 10:57:36 +08:00

pull.go

[Fix] AllowedReaction code (#9518)

2019-12-27 18:43:56 -05:00

release_test.go

Add Close() method to gogitRepository (#8901)

2019-11-13 07:01:19 +00:00

release.go

Extract actions on deletereleasebyid from models to release service (#8219)

2019-10-01 00:10:00 +08:00

repo.go

[Fix] Release attachment should use DownloadURL() not Name (#9529)

2019-12-28 23:33:13 +00:00

search.go

Refactor code indexer (#9313)

2019-12-23 20:31:16 +08:00

setting_protected_branch.go

Add branch protection option to block merge on requested changes. (#9592)

2020-01-03 19:47:09 +02:00

setting.go

Move some repository methods from models to modules/repository (#9353)

2019-12-14 18:30:01 +01:00

settings_test.go

Stop various tests from adding to the source tree (#9515)

2019-12-28 10:08:05 +08:00

topic.go

Add API endpoint for accessing repo topics (#7963)

2019-09-03 23:46:24 +08:00

view.go

Respect LFS File Lock on UI (#8719)

2019-10-29 23:32:21 +02:00

webhook.go

Move more webhook codes from models to webhook module (#8802)

2019-11-03 22:13:25 +00:00

wiki_test.go

Add Close() method to gogitRepository (#8901)

2019-11-13 07:01:19 +00:00

wiki.go

Add Close() method to gogitRepository (#8901)

2019-11-13 07:01:19 +00:00