Skip to content

Commit 9939679

Browse files
ensure visited repo's group owner is the same as the repo's owner, otherwise return 404
1 parent 559c2fe commit 9939679

File tree

1 file changed

+1
-5
lines changed

1 file changed

+1
-5
lines changed

routers/api/v1/group/group.go

Lines changed: 1 addition & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -282,10 +282,6 @@ func GetGroup(ctx *context.APIContext) {
282282
ctx.APIErrorNotFound()
283283
return
284284
}
285-
if group.OwnerID != ctx.Org.Organization.ID {
286-
ctx.APIErrorNotFound()
287-
return
288-
}
289285
if err != nil {
290286
ctx.APIErrorInternal(err)
291287
return
@@ -299,7 +295,7 @@ func GetGroup(ctx *context.APIContext) {
299295
}
300296

301297
func DeleteGroup(ctx *context.APIContext) {
302-
// swagger:operation DELETE /groups/{group_id} repositoryGroup groupDelete
298+
// swagger:operation DELETE /groups/{group_id} repository-group groupDelete
303299
// ---
304300
// summary: Delete a repository group
305301
// produces:

0 commit comments

Comments
 (0)