From b021dbd2d606af4f34a24b53b21f33c8be428ebc Mon Sep 17 00:00:00 2001 From: orblazer Date: Tue, 30 May 2023 11:49:01 +0200 Subject: [PATCH] fix invalid access action (#18188) Signed-off-by: orblazer Co-authored-by: Wang Yan --- src/server/v2.0/handler/repository.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/server/v2.0/handler/repository.go b/src/server/v2.0/handler/repository.go index 3c3701747..d365e2222 100644 --- a/src/server/v2.0/handler/repository.go +++ b/src/server/v2.0/handler/repository.go @@ -199,7 +199,7 @@ func (r *repositoryAPI) ListRepositories(ctx context.Context, params operation.L } func (r *repositoryAPI) GetRepository(ctx context.Context, params operation.GetRepositoryParams) middleware.Responder { - if err := r.RequireProjectAccess(ctx, params.ProjectName, rbac.ActionList, rbac.ResourceRepository); err != nil { + if err := r.RequireProjectAccess(ctx, params.ProjectName, rbac.ActionRead, rbac.ResourceRepository); err != nil { return r.SendError(ctx, err) } repository, err := r.repoCtl.GetByName(ctx, fmt.Sprintf("%s/%s", params.ProjectName, params.RepositoryName))