From c355172878c28fcf9e2fc781c933c7116e87aa4f Mon Sep 17 00:00:00 2001 From: Jason Song Date: Tue, 27 Dec 2022 17:44:37 +0800 Subject: [PATCH] fix: check reqRepoActionsWriter --- routers/web/web.go | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/routers/web/web.go b/routers/web/web.go index 58bcd1ec75..6f65eb2201 100644 --- a/routers/web/web.go +++ b/routers/web/web.go @@ -670,6 +670,7 @@ func RegisterRoutes(m *web.Route) { reqRepoProjectsReader := context.RequireRepoReader(unit.TypeProjects) reqRepoProjectsWriter := context.RequireRepoWriter(unit.TypeProjects) reqRepoActionsReader := context.RequireRepoReader(unit.TypeActions) + reqRepoActionsWriter := context.RequireRepoWriter(unit.TypeActions) reqPackageAccess := func(accessMode perm.AccessMode) func(ctx *context.Context) { return func(ctx *context.Context) { @@ -1220,9 +1221,9 @@ func RegisterRoutes(m *web.Route) { m.Combo(""). Get(actions.View). Post(web.Bind(actions.ViewRequest{}), actions.ViewPost) - m.Post("/rerun", actions.Rerun) + m.Post("/rerun", reqRepoActionsWriter, actions.Rerun) }) - m.Post("/cancel", actions.Cancel) + m.Post("/cancel", reqRepoActionsWriter, actions.Cancel) }) }, reqRepoActionsReader, actions.MustEnableActions)