Merge pull request #958 from phsmit/fix_mirror_access

Make sure that a mirror can't be written to by http or ssh

1 files changed, 5 insertions, 0 deletions

diff --git a/cmd/serve.go b/cmd/serve.go
index e8e5c186..9e34b95c 100644
--- a/cmd/serve.go
+++ b/cmd/serve.go
@@ -164,6 +164,11 @@ func runServ(c *cli.Context) {
 			println("You have no right to write this repository")
 			log.GitLogger.Fatal(2, "User %s has no right to write repository %s", user.Name, repoPath)
 		}
+
+		if repo.IsMirror {
+			println("You can't write to a mirror repository")
+			log.GitLogger.Fatal(2, "User %s tried to write to a mirror repository %s", user.Name, repoPath)
+		}
 	case isRead:
 		if !repo.IsPrivate {
 			break