api: verify write access to update repo content (#8102)

2026-01-25 00:29:17 +01:00 · 2026-01-23 09:19:11 -05:00
parent 27f1250d00
commit ca59e76a53
1 changed files with 1 additions and 1 deletions
--- a/internal/route/api/v1/api.go
+++ b/internal/route/api/v1/api.go
@@ -282,7 +282,7 @@ func RegisterRoutes(m *macaron.Macaron) {
 					m.Get("", repo.GetContents)
 					m.Combo("/*").
 						Get(repo.GetContents).
-						Put(bind(repo.PutContentsRequest{}), repo.PutContents)
+						Put(reqRepoWriter(), bind(repo.PutContentsRequest{}), repo.PutContents)
 				})
 				m.Get("/archive/*", repo.GetArchive)
 				m.Group("/git", func() {