My favorites | Sign in
Project Home Downloads Wiki Issues Source
New issue   Search
for
  Advanced search   Search tips   Subscriptions
Issue 393: push over HTTP allows branches to be deleted
  Back to list
Status:  Released
Owner:  sop@google.com
Closed:  Oct 2012


Sign in to add a comment
 
Project Member Reported by sop@google.com, Jan 16, 2010
Now that smart HTTP push is implemented the ProjectControl gets
confused.  It thinks a branch creation or deletion coming in on
the smart HTTP protocol is actually from the web UI, so it allows
a project owner to perform a creation or deletion over git access
when it should have rejected it due to a missing Push Branch ACL.

We need to treat the AccessPath differently if the current call
stack is caused by a git client tool speaking the git protocols.
Jan 29, 2010
#1 sop@google.com
Fixed by change I14cc68e31f5263913f5d9715a8f2241b5766bf23.
Status: Fixed
Labels: -Milestone-Next FixedIn-2.1.2
Oct 21, 2012
#2 sop@google.com
(No comment was entered for this change.)
Status: Released
Sign in to add a comment

Powered by Google Project Hosting