Merge pull request #958 from phsmit/fix_mirror_access

Make sure that a mirror can't be written to by http or ssh

1 files changed, 5 insertions, 0 deletions

diff --git a/routers/repo/http.go b/routers/repo/http.go
index 034b5a7b..d47d73ef 100644
--- a/routers/repo/http.go
+++ b/routers/repo/http.go
@@ -158,6 +158,11 @@ func Http(ctx *middleware.Context) {
 					return
 				}
 			}
+
+			if !isPull && repo.IsMirror {
+				ctx.Handle(401, "can't push to mirror", nil)
+				return
+			}
 		}
 	}