77fc232e5b
- Do an access check when loading issues for a project column, currently this is not done and exposes the title, labels and existence of a private issue that the viewer of the project board may not have access to. - The number of issues cannot be calculated in a efficient manner and stored in the database because their number may vary depending on the visibility of the repositories participating in the project. The previous implementation used the pre-calculated numbers stored in each project, which did not reflect that potential variation. - The code is derived from https://github.com/go-gitea/gitea/pull/22865 (cherry picked from commit 2193afaeb9954a5778f5a47aafd0e6fbbf48d000) |
||
|---|---|---|
| .. | ||
| setting | ||
| home.go | ||
| main_test.go | ||
| members.go | ||
| org.go | ||
| org_labels.go | ||
| projects.go | ||
| projects_test.go | ||
| setting.go | ||
| setting_oauth2.go | ||
| setting_packages.go | ||
| teams.go | ||