Merge pull request #8741 from artoscinote/ma_SCI_12197

Fix user management for shared repositories [SCI-12197]
This commit is contained in:
Martin Artnik 2025-08-05 10:00:17 +02:00 committed by GitHub
commit 0ddd743a34
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
2 changed files with 2 additions and 3 deletions

View file

@ -15,7 +15,7 @@ module AccessPermissions
end
def check_read_permissions
render_403 unless can_read_repository?(@model) || can_manage_team?(@model.team)
render_403 unless can_manage_repository_users?(@model) || can_read_repository?(@model)
end
end
end

View file

@ -131,8 +131,7 @@ Canaid::Permissions.register_for(Repository) do
end
can :manage_repository_users do |user, repository|
repository.team.permission_granted?(user, TeamPermissions::MANAGE) ||
repository.can_manage_shared?(user) ||
repository.can_manage_shared?(user) ||
repository.permission_granted?(user, RepositoryPermissions::USERS_MANAGE)
end
end