Merge remote-tracking branch 'origin/develop' into feature/lookup_api

CHANGELOG.md

@@ -9,6 +9,9 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ### Added
 - Lookup command which provides further repository information ([#1415](https://github.com/scm-manager/scm-manager/pull/1415))
 
+### Fixed
+- Error on repository initialization with least-privilege user ([#1414](https://github.com/scm-manager/scm-manager/pull/1414))
+
 ## [2.9.0] - 2020-11-06
 ### Added
 - Tracing api ([#1393](https://github.com/scm-manager/scm-manager/pull/#1393))

pom.xml

@@ -903,7 +903,7 @@
 
   <properties>
     <!-- test libraries -->
-    <mockito.version>3.5.13</mockito.version>
+    <mockito.version>3.5.15</mockito.version>
     <hamcrest.version>2.1</hamcrest.version>
     <junit.version>5.7.0</junit.version>
 

scm-webapp/src/main/java/sonia/scm/security/AuthorizationChangedEventProducer.java

@@ -140,7 +140,7 @@ public class AuthorizationChangedEventProducer {
    *
    * @param event repository event
    */
-  @Subscribe
+  @Subscribe(async = false)
   public void onEvent(RepositoryEvent event) {
     if (event.getEventType().isPost()) {
       if (isModificationEvent(event)) {

scm-webapp/src/main/java/sonia/scm/security/DefaultAuthorizationCollector.java

@@ -295,7 +295,7 @@ public class DefaultAuthorizationCollector implements AuthorizationCollector
     //J+
   }
 
-  @Subscribe
+  @Subscribe(async = false)
   public void invalidateCache(AuthorizationChangedEvent event) {
     if (event.isEveryUserAffected()) {
       invalidateUserCache(event.getNameOfAffectedUser());