| Issue 393: | push over HTTP allows branches to be deleted | |
| Back to list |
Now that smart HTTP push is implemented the ProjectControl gets confused. It thinks a branch creation or deletion coming in on the smart HTTP protocol is actually from the web UI, so it allows a project owner to perform a creation or deletion over git access when it should have rejected it due to a missing Push Branch ACL. We need to treat the AccessPath differently if the current call stack is caused by a git client tool speaking the git protocols.
Oct 21, 2012
(No comment was entered for this change.)
Status:
Released
|
|
| ► Sign in to add a comment |
Labels: -Milestone-Next FixedIn-2.1.2