stable

Clone or download

Read-only

SOAP API can handle accesses to resources in private projects without restricted users

Restricted users that are members of a private project that do not include restricted users should be able to access resources of this project through the SOAP API. This contribution harden the existing behavior and add missing checks. This is part of story #13237: Prevent restricted to be added to private projects Change-Id: I46ae5389a911d02724778938ff5ff45f74ed776e

Modified Files

Name
M plugins/statistics/include/Statistics_SOAPServer.class.php +2 −2 Go to diff View file
M plugins/statistics/include/statisticsPlugin.class.php +12 −3 Go to diff View file
M src/common/Project/ProjectManager.class.php +1 −1 Go to diff View file
M src/common/frs/FRSReleaseFactory.class.php +38 −11 Go to diff View file
M src/common/soap/SOAPRequestValidator.php +3 −8 Go to diff View file
R src/common/soap/SOAP_RequestValidator.class.php Go to diff View file
M src/common/svn/SVN_SOAPServer.class.php +2 −3 Go to diff View file
M src/www/soap/common/group.php +12 −3 Go to diff View file
M src/www/soap/svn/index.php +12 −2 Go to diff View file
A tests/phpunit/common/SOAP/SOAPRequestValidatorImplementationTest.php +107 −0 Go to diff View file
M tests/psalm/tuleap-baseline.xml +0 −9 Go to diff View file
M tests/simpletest/common/frs/FRSReleaseFactoryTest.php +20 −6 Go to diff View file
D tests/simpletest/common/soap/SOAP_RequestValidatorTest.php +0 −83 Go to diff View file
M tests/simpletest/common/svn/SVN_SOAPServerTest.php +6 −5 Go to diff View file