#999 在未登录状态下,在某个用户页面的“数据集”页面中,能够看到该用户的私有项目列表。

Closed
created 2 years ago by huolongshe · 5 comments
<!-- NOTE: If your issue is a security concern, please send an email to security@gitea.io instead of opening a public issue --> <!-- 1. Please speak English, this is the language all maintainers can speak and write. 2. Please ask questions or configuration/deploy problems on our Discord server (https://discord.gg/gitea) or forum (https://discourse.gitea.io). 3. Please take a moment to check that your issue doesn't already exist. 4. Please give all relevant information below for bug reports, because incomplete details will be handled as an invalid report. --> - Gitea version (or commit ref): - Git version: - Operating system: - Database (use `[x]`): - [ ] PostgreSQL - [ ] MySQL - [ ] MSSQL - [ ] SQLite - Can you reproduce the bug at https://try.gitea.io: - [ ] Yes (provide example URL) - [ ] No - [ ] Not relevant - Log gist: ## Description 在未登录状态下,在某个用户页面的“数据集”页面中,能够看到该用户的私有项目列表。 ## Screenshots <!-- **If this issue involves the Web Interface, please include a screenshot** -->
avadesian added the
need review
label 2 years ago
avadesian commented 2 years ago
Owner
是否有问题界面截图?
huolongshe commented 2 years ago
Poster
> 是否有问题界面截图? 有,见附件。
wangj commented 2 years ago
Owner
复现步骤: 1.创建私有项目A 2.探索—数据集、个人主页—数据集,出现A(若未指定时,数据集名称默认采用项目名称) 3.退出登录,查看A是否隐藏 期望结果: 1. 探索—数据集,隐藏A 2. 个人主页—数据集,隐藏A 实际结果: 1. PASS 2. FAIL。个人主页—数据集,仍然出现了A。虽然点击A后报403。
wangj added this to the V20211213 milestone 2 years ago
wangj added the
bug
label 2 years ago
wangj removed the
need review
label 2 years ago
ychao_1983 self-assigned this 2 years ago
chenyifan01 was assigned by wangj 2 years ago
ychao_1983 was unassigned by wangj 2 years ago
chenyifan01 referenced this issue from a commit 2 years ago
wangj was assigned by chenyifan01 2 years ago
chenyifan01 removed their assignment 2 years ago
wangj commented 2 years ago
Owner
通过测试,关闭此单。
wangj closed this issue 2 years ago
chenyifan01 was assigned by wangj 2 years ago
wangj commented 2 years ago
Owner
一开始是私有的项目,本bug已经修复。 但一开始是公开项目、后来设置为私有的,仍然存在本问题。另外提了issue #1143 跟踪。
Sign in to join this conversation.
No Milestone
No Assignees
3 Participants
Notifications
Due Date

No due date set.

Dependencies

This issue currently doesn't have any dependencies.

Loading…
There is no content yet.