diff options
Diffstat (limited to 'internal/route/lfs')
-rw-r--r-- | internal/route/lfs/route.go | 7 | ||||
-rw-r--r-- | internal/route/lfs/route_test.go | 4 |
2 files changed, 8 insertions, 3 deletions
diff --git a/internal/route/lfs/route.go b/internal/route/lfs/route.go index 40cb95eb..ff1bd591 100644 --- a/internal/route/lfs/route.go +++ b/internal/route/lfs/route.go @@ -131,7 +131,12 @@ func authorize(mode db.AccessMode) macaron.Handler { return } - if !db.Perms.Authorize(actor.ID, repo, mode) { + if !db.Perms.Authorize(actor.ID, repo.ID, mode, + db.AccessModeOptions{ + OwnerID: repo.OwnerID, + Private: repo.IsPrivate, + }, + ) { c.Status(http.StatusNotFound) return } diff --git a/internal/route/lfs/route_test.go b/internal/route/lfs/route_test.go index b6ef1ebc..9571c89d 100644 --- a/internal/route/lfs/route_test.go +++ b/internal/route/lfs/route_test.go @@ -209,7 +209,7 @@ func Test_authorize(t *testing.T) { }, }, mockPermsStore: &db.MockPermsStore{ - MockAuthorize: func(userID int64, repo *db.Repository, desired db.AccessMode) bool { + MockAuthorize: func(userID, repoID int64, desired db.AccessMode, opts db.AccessModeOptions) bool { return desired <= db.AccessModeRead }, }, @@ -230,7 +230,7 @@ func Test_authorize(t *testing.T) { }, }, mockPermsStore: &db.MockPermsStore{ - MockAuthorize: func(userID int64, repo *db.Repository, desired db.AccessMode) bool { + MockAuthorize: func(userID, repoID int64, desired db.AccessMode, opts db.AccessModeOptions) bool { return desired <= db.AccessModeRead }, }, |