Public

Project privacy set to public. By default, its content is available to everyone (authenticated or not). Please note that more restrictive permissions might exist on some items.

stable

Clone or download

Read-only

Forbid access to a private project to restricted member

Download Browse

Given the platform allows restricted users And the variable $feature_flag_project_without_restricted is set to 1, When the project has visibility private And user is restricted and still member of this project, Then user get a 404 error when it tries to access to the project, And project is not listed in MyProjects widget, And git operations are rejected. No changes if the project has visibility private incl. restricted, or if the feature flag is off. Please note that SVN, CVS, and REST API will be done in dedicated changesets. Part of story #12554: have private projects without restricted members Change-Id: I1840836985aef716912c565a83920a4157879292

+94 −4
Nicolas Terray (nterray) 2019-03-20 14:27
Nicolas Terray (nterray) 2019-03-21 15:32
afc472652455d802cfce7c2b00c650c4a2daf0e9
2e74f80592345d9f42e376bc36e871da37935ad0
git #tuleap/stable/afc472652455d802cfce7c2b00c650c4a2daf0e9

Modified Files

Side by side diff
Inline diff
Name
M src/common/User/User.class.php +10 −1 Go to diff View file
M src/common/include/URLVerification.class.php +19 −2 Go to diff View file
M src/common/widget/Widget_MyProjects.class.php +8 −0 Go to diff View file
M tests/simpletest/common/include/URLVerificationTest.php +57 −1 Go to diff View file