core
/
gitea
3
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Hide limited users if viewed by anonymous ghost (#25214) 

The ghost user leads to inclusion of limited users/orgs in
`BuildCanSeeUserCondition`.
This commit is contained in:
KN4CK3R 2023-06-13 05:21:11 +02:00 committed by GitHub
parent 139704f499
commit 2126f712bf
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
models/packages/container/search.go
View File

@ -262,6 +262,10 @@ func GetRepositories(ctx context.Context, actor *user_model.User, n int, last st
cond = cond.And(builder.Gt{"package_property.value": strings.ToLower(last)}) cond = cond.And(builder.Gt{"package_property.value": strings.ToLower(last)})
} }
if actor.IsGhost() {
actor = nil
}
cond = cond.And(user_model.BuildCanSeeUserCondition(actor)) cond = cond.And(user_model.BuildCanSeeUserCondition(actor))
sess := db.GetEngine(ctx). sess := db.GetEngine(ctx).