Fix user management for shared repositories [SCI-12197]

This commit is contained in:
Martin Artnik 2025-08-05 09:52:27 +02:00
parent c8f5b8abaf
commit 4cbc54a73e
2 changed files with 2 additions and 3 deletions

View file

@ -15,7 +15,7 @@ module AccessPermissions
end
def check_read_permissions
render_403 unless can_read_repository?(@model) || can_manage_team?(@model.team)
render_403 unless can_manage_repository_users?(@model) || can_read_repository?(@model)
end
end
end

View file

@ -131,8 +131,7 @@ Canaid::Permissions.register_for(Repository) do
end
can :manage_repository_users do |user, repository|
repository.team.permission_granted?(user, TeamPermissions::MANAGE) ||
repository.can_manage_shared?(user) ||
repository.can_manage_shared?(user) ||
repository.permission_granted?(user, RepositoryPermissions::USERS_MANAGE)
end
end