Do not execute server hooks without write permission
Review Request #2400 — Created March 30, 2023 and submitted
Information | |
---|---|
aklitzing@gmail.com | |
grim/hgkeeper | |
default | |
Reviewers | |
grim |
If an authenticated user pushed to a repository with server hooks it was possible to execute those hooks even the user has no write permission. So let's re-order the hooks to execute the deny hook first.
Summary | Author | |
---|---|---|
Andre Klitzing |