From ca59e76a532422ceefe032171320103bcb594a68 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?=E1=B4=8A=E1=B4=8F=E1=B4=87=20=E1=B4=84=CA=9C=E1=B4=87?= =?UTF-8?q?=C9=B4?= Date: Fri, 23 Jan 2026 09:19:11 -0500 Subject: [PATCH] api: verify write access to update repo content (#8102) --- internal/route/api/v1/api.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/internal/route/api/v1/api.go b/internal/route/api/v1/api.go index 6f10bf9ce..8304d876b 100644 --- a/internal/route/api/v1/api.go +++ b/internal/route/api/v1/api.go @@ -282,7 +282,7 @@ func RegisterRoutes(m *macaron.Macaron) { m.Get("", repo.GetContents) m.Combo("/*"). Get(repo.GetContents). - Put(bind(repo.PutContentsRequest{}), repo.PutContents) + Put(reqRepoWriter(), bind(repo.PutContentsRequest{}), repo.PutContents) }) m.Get("/archive/*", repo.GetArchive) m.Group("/git", func() {