Merge pull request #2258 from jasl8r/issue-2193-grack-read-only-access

Support read-only access for git over HTTP

Merge pull request #2258 from jasl8r/issue-2193-grack-read-only-access
e9bef9c0 · Dmitriy Zaporozhets · 439d03bb · 6cf5d7c9 · e9bef9c0
Commit e9bef9c0 authored Dec 12, 2012 by Dmitriy Zaporozhets
Hide whitespace changes
Inline Side-by-side

Showing with 2 additions and 2 deletions

grack_auth.rb lib/gitlab/backend/grack_auth.rb +2 -2

No files found.
--- a/lib/gitlab/backend/grack_auth.rb
+++ b/lib/gitlab/backend/grack_auth.rb
@@ -38,12 +38,12 @@ module Grack
    end

    def validate_get_request
-      true
+      can?(user, :download_code, project)
    end

    def validate_post_request
      if @request.path_info.end_with?('git-upload-pack')
-        can?(user, :push_code, project)
+        can?(user, :download_code, project)
      elsif @request.path_info.end_with?('git-receive-pack')
        action = if project.protected_branch?(current_ref)
                   :push_code_to_protected_branches