forgejo/release-notes
Gusted 5488ec7d96
security: add permission check to 'delete branch after merge'
- Add a permission check that the doer has write permissions to the head
repository if the the 'delete branch after merge' is enabled when
merging a pull request.
- Unify the checks in the web and API router to `DeleteBranchAfterMerge`.
- Added integration tests.

(cherry picked from commit 266e0b2ce9)

Conflicts:
	tests/integration/pull_merge_test.go
  trivial context conflict
2024-10-28 06:32:10 +01:00
..
7.0.4/fix [BUG] admin oauth2 source required check (#4194) 2024-06-21 06:22:03 +00:00
7.0.5/fix [BUG] admin oauth2 source required check (#4194) 2024-06-21 06:22:03 +00:00
8.0.0 ui: fix wrong string used in a search box (#4258) 2024-06-28 16:29:11 +00:00
4999.md chore(release-notes): weekly cherry-pick week 2024-34-v7.0 2024-08-18 07:11:37 +02:00
5113.md chore(release-notes): weekly cherry-pick week 2024-35-v7.0 2024-08-25 17:49:20 +02:00
5149.md [SEC] Ensure propagation of API scopes for Conan and Container authentication 2024-08-28 08:44:58 +00:00
5718.md security: add permission check to 'delete branch after merge' 2024-10-28 06:32:10 +01:00