-
-
Notifications
You must be signed in to change notification settings - Fork 5.5k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Make owner/repo/pulls
handlers use "PR reader" permission
#32254
Conversation
9e248b5
to
7790912
Compare
7790912
to
4a83626
Compare
user without code unit permission can see the file changes and details of commits, which means they can see the codes, is it a problem or not? As the original proposal is
|
That's arguable and not in this PR's scope. You could edit this PR directly or propose a new one to replace. At the moment I have no willing to do more change |
I was unable to create a backport for 1.22. @wxiaoguang, please send one manually. 🍵
|
* giteaofficial/main: Make `owner/repo/pulls` handlers use "PR reader" permission (go-gitea#32254) make `show stats` work when only one file changed (go-gitea#32244) Update scheduled tasks even if changes are pushed by "ActionsUser" (go-gitea#32246) Support migrating GitHub/GitLab PR draft status (go-gitea#32242) Only rename a user when they should receive a different name (go-gitea#32247) Fix dropdown content overflow (go-gitea#31610) Make git push options accept short name (go-gitea#32245) Allow code search by filename (go-gitea#32210) Allow maintainers to view and edit files of private repos when "Allow maintainers to edit" is enabled (go-gitea#32215) Use per package global lock for container uploads instead of memory lock (go-gitea#31860)
Fix #32253 (partially)
Before, it uses "code reader"