api: verify write access to update repo content (#8102)

2026-05-07 02:17:04 +02:00 · 2026-01-23 09:19:11 -05:00
parent 961a79e8f9
commit 9e70cdf437
1 changed files with 1 additions and 1 deletions
--- a/internal/route/api/v1/api.go
+++ b/internal/route/api/v1/api.go
@@ -285,7 +285,7 @@ func RegisterRoutes(m *macaron.Macaron) {
 					m.Get("", repo.GetContents)
 					m.Combo("/*").
 						Get(repo.GetContents).
-						Put(bind(repo.PutContentsRequest{}), repo.PutContents)
+						Put(reqRepoWriter(), bind(repo.PutContentsRequest{}), repo.PutContents)
 				})
 				m.Get("/archive/*", repo.GetArchive)
 				m.Group("/git", func() {