Organization admin user may see issues in org level project from repos which they have no permission to access

go-gitea / gitea

Git with a cup of tea! Painless self-hosted all-in-one software development service, including Git hosting, code review, team collaboration, package registry and CI/CD

https://gitea.com

MIT License

45.41k stars 5.52k forks source link

Organization admin user may see issues in org level project from repos which they have no permission to access #32323

Open yp05327 opened 1 month ago

yp05327 commented 1 month ago

Description

Remove all linked repos from admin team.

Then you can see that repo count is 0, but you can see the issue in project Of cause, if you click the issue, you will get 404.

Gitea Version

latest

Can you reproduce the bug on the Gitea demo site?

Log Gist

No response

Screenshots

No response

Git Version

No response

Operating System

No response

How are you running Gitea?

build

Database

None

yp05327 commented 3 weeks ago

I guess it is fixed in #22865, but this PR was written long long ago, almost forget the details of it. Need to replace it. And that's why I was surprised to see why this bug still exists, as in my mind, it should has been fixed. 😂

yp05327 commented 3 weeks ago

Same to: https://github.com/go-gitea/gitea/issues/22860#issuecomment-1542204942