Make sure that a mirror can't be written to by http or ssh
This commit is contained in:
parent
cd6a2b78a7
commit
f9454cc32c
2 changed files with 10 additions and 0 deletions
|
@ -164,6 +164,11 @@ func runServ(c *cli.Context) {
|
||||||
println("You have no right to write this repository")
|
println("You have no right to write this repository")
|
||||||
log.GitLogger.Fatal(2, "User %s has no right to write repository %s", user.Name, repoPath)
|
log.GitLogger.Fatal(2, "User %s has no right to write repository %s", user.Name, repoPath)
|
||||||
}
|
}
|
||||||
|
|
||||||
|
if repo.IsMirror {
|
||||||
|
println("You can't write to a mirror repository")
|
||||||
|
log.GitLogger.Fatal(2, "User %s tried to write to a mirror repository %s", user.Name, repoPath)
|
||||||
|
}
|
||||||
case isRead:
|
case isRead:
|
||||||
if !repo.IsPrivate {
|
if !repo.IsPrivate {
|
||||||
break
|
break
|
||||||
|
|
|
@ -158,6 +158,11 @@ func Http(ctx *middleware.Context) {
|
||||||
return
|
return
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
|
if !isPull && repo.IsMirror {
|
||||||
|
ctx.Handle(401, "can't push to mirror", nil)
|
||||||
|
return
|
||||||
|
}
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|
Loading…
Reference in a new issue