peter/go-gitea
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Fix milestone appliance

Browse Source 
Fix missing permission check

Signed-off-by: Jonas Franz <info@jonasfranz.software>
This commit is contained in:
Jonas Franz 2018-06-18 15:40:52 +02:00
parent 85414d8b75
commit c528505c6d
No known key found for this signature in database
GPG Key ID: 506AEEBE80BEDECD
1 changed files with 16 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

25
routers/api/v1/repo/issue.go
View File

@ -165,7 +165,7 @@ func CreateIssue(ctx *context.APIContext, form api.CreateIssueOption) {
// "$ref": "#/responses/Issue" // "$ref": "#/responses/Issue"
var deadlineUnix util.TimeStamp var deadlineUnix util.TimeStamp
if form.Deadline != nil { if form.Deadline != nil && ctx.Repo.IsWriter() {
deadlineUnix = util.TimeStamp(form.Deadline.Unix()) deadlineUnix = util.TimeStamp(form.Deadline.Unix())
} }
@ -178,15 +178,22 @@ func CreateIssue(ctx *context.APIContext, form api.CreateIssueOption) {
DeadlineUnix: deadlineUnix, DeadlineUnix: deadlineUnix,
} }
// Get all assignee IDs var assigneeIDs = make([]int64, 0)
assigneeIDs, err := models.MakeIDsFromAPIAssigneesToAdd(form.Assignee, form.Assignees) var err error
if err != nil { if ctx.Repo.IsWriter() {
if models.IsErrUserNotExist(err) { issue.MilestoneID = form.Milestone
ctx.Error(422, "", fmt.Sprintf("Assignee does not exist: [name: %s]", err)) assigneeIDs, err = models.MakeIDsFromAPIAssigneesToAdd(form.Assignee, form.Assignees)
} else { if err != nil {
ctx.Error(500, "AddAssigneeByName", err) if models.IsErrUserNotExist(err) {
ctx.Error(422, "", fmt.Sprintf("Assignee does not exist: [name: %s]", err))
} else {
ctx.Error(500, "AddAssigneeByName", err)
}
return
} }
return } else {
// setting labels is only allowed if user is writter
form.Labels = make([]int64, 0)
} }
if err := models.NewIssue(ctx.Repo.Repository, issue, form.Labels, assigneeIDs, nil); err != nil { if err := models.NewIssue(ctx.Repo.Repository, issue, form.Labels, assigneeIDs, nil); err != nil {