Do not execute server hooks without write permission

Review Request #2400 — Created March 30, 2023 and submitted

aklitzing@gmail.com
grim/hgkeeper
default
grim
If an authenticated user pushed to a repository with server
hooks it was possible to execute those hooks even the user
has no write permission.

So let's re-order the hooks to execute the deny hook first.


Summary Author
Do not execute server hooks without write permission
Andre Klitzing
grim
  1. Ship It!
  2. Nice find! Thanks!!

  3. 
      
grim
Review request changed

Status: Closed (submitted)

grim
  1. 
      
  2. Everything has been updated. I'll get a release cut this weekend.

  3. 
      
Loading...