ynkmr/gitea
1
0
Fork 0
mirror of https://github.com/go-gitea/gitea.git synced 2026-09-24 13:43:43 +09:00
Code Issues Projects Releases Wiki Activity

fix(packages): restrict/limited/token-scope access (#39041, #39043, #39044, #39047, #39046) (#39058)

Browse Source
This commit is contained in:
Giteabot
2026-08-28 00:34:49 +08:00
committed by GitHub
parent 068355cabd
commit 1dab66b83c
21 changed files with 219 additions and 74 deletions
Download Patch File Download Diff File Expand all files Collapse all files
tests/integration/api_repo_teams_test.go
+15
View File
@@ -9,12 +9,14 @@ import (
"testing"
auth_model "gitea.dev/models/auth"
"gitea.dev/models/organization"
repo_model "gitea.dev/models/repo"
"gitea.dev/models/unit"
"gitea.dev/models/unittest"
user_model "gitea.dev/models/user"
api "gitea.dev/modules/structs"
"gitea.dev/modules/util"
repo_service "gitea.dev/services/repository"
"gitea.dev/tests"
"github.com/stretchr/testify/assert"
@@ -63,6 +65,19 @@ func TestAPIRepoTeams(t *testing.T) {
AddTokenAuth(token)
MakeRequest(t, req, http.StatusForbidden)
adminTeam := unittest.AssertExistsAndLoadBean(t, &organization.Team{ID: 12})
targetTeam := unittest.AssertExistsAndLoadBean(t, &organization.Team{ID: 2})
existingTeam := unittest.AssertExistsAndLoadBean(t, &organization.Team{ID: 7})
assert.NoError(t, repo_service.TeamAddRepository(t.Context(), adminTeam, publicOrgRepo))
user = unittest.AssertExistsAndLoadBean(t, &user_model.User{ID: 28})
token = getUserToken(t, user.Name, auth_model.AccessTokenScopeWriteRepository)
req = NewRequest(t, "PUT", fmt.Sprintf("/api/v1/repos/%s/teams/%s", publicOrgRepo.FullName(), targetTeam.Name)).AddTokenAuth(token)
MakeRequest(t, req, http.StatusForbidden)
assert.False(t, repo_service.HasRepository(t.Context(), targetTeam, publicOrgRepo.ID))
req = NewRequest(t, "DELETE", fmt.Sprintf("/api/v1/repos/%s/teams/%s", publicOrgRepo.FullName(), existingTeam.Name)).AddTokenAuth(token)
MakeRequest(t, req, http.StatusForbidden)
assert.True(t, repo_service.HasRepository(t.Context(), existingTeam, publicOrgRepo.ID))
// AddTeam with user2
user = unittest.AssertExistsAndLoadBean(t, &user_model.User{ID: 2})
session = loginUser(t, user.Name)