Page MenuHomePhabricator

Improve consistency of policy enforcement on new repository edit UI
ClosedPublic

Authored by epriestley on Oct 25 2013, 9:11 PM.
Tags
None
Referenced Files
Unknown Object (File)
Sat, Aug 31, 9:25 AM
Unknown Object (File)
Tue, Aug 27, 2:47 AM
Unknown Object (File)
Mon, Aug 26, 9:22 PM
Unknown Object (File)
Sun, Aug 25, 1:32 PM
Unknown Object (File)
Sun, Aug 25, 11:31 AM
Unknown Object (File)
Sat, Aug 24, 2:23 PM
Unknown Object (File)
Sat, Aug 17, 9:20 PM
Unknown Object (File)
Aug 5 2024, 10:47 PM
Subscribers

Details

Reviewers
btrahan
Maniphest Tasks
Restricted Maniphest Task
Commits
Restricted Diffusion Commit
rPe81bad9ba21f: Improve consistency of policy enforcement on new repository edit UI
Summary

Ref T2231. The policy rules are a little murky right now: the "Edit Repository" link requires CAN_EDIT, but the actualy page doesn't. Instead, require CAN_EDIT for the edit page.

Test Plan

As a user without CAN_EDIT, viewed a repository and clicked the edit link.

Diff Detail

Lint
Lint Skipped
Unit
Tests Skipped

Event Timeline

btrahan added inline comments.
src/applications/diffusion/controller/DiffusionRepositoryCreateController.php
28

this should be CAN_EDIT, right? (On that note, I could imagine CAN_CREATE being desired for repositories (and projects))

src/applications/diffusion/controller/DiffusionRepositoryCreateController.php
28

Ack, good catch!

(We have a create policy for projects already and I'll add one for repositories pretty soon.)