Antoine GIRARD 8b24073713 Only serve attachments when linked to issue/release and if accessible by user (#9340) ... * test: add current attachement responses * refactor: check if attachement is linked and accessible by user * chore: clean TODO * fix: typo attachement -> attachment * revert un-needed go.sum change * refactor: move models logic to models * fix TestCreateIssueAttachment which was wrongly successful * fix unit tests with unittype added * fix unit tests with changes * use a valid uuid format for pgsql int. test * test: add unit test TestLinkedRepository * refactor: allow uploader to access unlinked attachement * add missing blank line * refactor: move to a separate function repo.GetAttachment * typo * test: remove err test return * refactor: use repo perm for access checking generally + 404 for all reject		2020-01-05 01:20:08 +02:00
..
access_token.yml	Hash App token (#6724)	2019-05-04 11:45:34 -04:00
access.yml
action.yml	Update heatmap fixtures to restore tests (#8615)	2019-10-21 21:19:53 +01:00
attachment.yml	Only serve attachments when linked to issue/release and if accessible by user (#9340)	2020-01-05 01:20:08 +02:00
collaboration.yml	Allow collaborators to view repo owned private org (#6965)	2019-05-16 11:48:40 -04:00
comment.yml	fix 500 when reviewer is deleted with integration tests (#6856)	2019-05-06 20:09:31 +08:00
commit_status.yml
deleted_branch.yml
deploy_key.yml
email_address.yml
follow.yml
gpg_key_import.yml	add .gpg url (match github behaviour) (#6610)	2019-04-14 12:43:56 -04:00
gpg_key.yml
hook_task.yml
issue_assignees.yml	[UI] IssuePage multi repo select (#8741)	2019-12-01 22:50:36 -05:00
issue_label.yml
issue_user.yml
issue_watch.yml	Refactor Issues Subscription (#8738)	2019-11-20 22:50:54 +08:00
issue.yml	Fix #9189 - API Allow only specific Colums to be updated on Issue (#9539)	2020-01-01 17:51:10 -05:00
label.yml
login_source.yml
milestone.yml	Fix #9189 - API Allow only specific Colums to be updated on Issue (#9539)	2020-01-01 17:51:10 -05:00
notice.yml
notification.yml
oauth2_application.yml	Integrate OAuth2 Provider (#5378)	2019-03-08 11:42:50 -05:00
oauth2_authorization_code.yml	Integrate OAuth2 Provider (#5378)	2019-03-08 11:42:50 -05:00
oauth2_grant.yml	Integrate OAuth2 Provider (#5378)	2019-03-08 11:42:50 -05:00
org_user.yml	Team permission to create repository in organization (#8312)	2019-11-20 19:27:49 +08:00
protected_branch.yml
public_key.yml	test: command keys (#9357)	2019-12-15 08:11:31 +00:00
pull_request.yml	Redirect issue if repo has configured external tracker. (#9247)	2019-12-06 23:21:18 -05:00
reaction.yml	[API] Add Reactions (#9220)	2019-12-07 17:04:19 -05:00
release.yml	Only serve attachments when linked to issue/release and if accessible by user (#9340)	2020-01-05 01:20:08 +02:00
repo_indexer_status.yml
repo_redirect.yml
repo_topic.yml	Add API endpoint for accessing repo topics (#7963)	2019-09-03 23:46:24 +08:00
repo_unit.yml	Only serve attachments when linked to issue/release and if accessible by user (#9340)	2020-01-05 01:20:08 +02:00
repository.yml	Fix #9189 - API Allow only specific Colums to be updated on Issue (#9539)	2020-01-01 17:51:10 -05:00
review.yml	Branch protection: Possibility to not use whitelist but allow anyone with write access (#9055)	2019-12-03 20:08:56 -05:00
star.yml
stopwatch.yml	[API] extend StopWatch (#9196)	2019-12-11 23:23:05 -05:00
team_repo.yml	Restrict permission check on repositories and fix some problems (#5314)	2018-11-28 19:26:14 +08:00
team_unit.yml	Restrict permission check on repositories and fix some problems (#5314)	2018-11-28 19:26:14 +08:00
team_user.yml	Team permission to create repository in organization (#8312)	2019-11-20 19:27:49 +08:00
team.yml	Team permission to create repository in organization (#8312)	2019-11-20 19:27:49 +08:00
topic.yml	Add API endpoint for accessing repo topics (#7963)	2019-09-03 23:46:24 +08:00
tracked_time.yml	[API] Extend times API (#9200)	2019-12-27 20:30:58 +00:00
two_factor.yml	org/members: display 2FA members states + optimize sql requests (#7621)	2019-08-02 12:06:27 -04:00
u2f_registration.yml
user_open_id.yml
user.yml	Redirect issue if repo has configured external tracker. (#9247)	2019-12-06 23:21:18 -05:00
watch.yml	Auto-subscribe user to repository when they commit/tag to it (#7657)	2019-11-10 09:22:19 +00:00
webhook.yml	Implement webhook branch filter (#7791)	2019-09-09 08:48:21 +03:00