From 2ac5009cc90422a94aef39ef415c09bff0f3d468 Mon Sep 17 00:00:00 2001 From: sd1998 Date: Sun, 26 Jan 2020 14:11:38 +0530 Subject: [PATCH] Allow list collaborators for users with Read access to repo --- routers/api/v1/api.go | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/routers/api/v1/api.go b/routers/api/v1/api.go index 0ddf57b74..16197bb05 100644 --- a/routers/api/v1/api.go +++ b/routers/api/v1/api.go @@ -643,11 +643,11 @@ func RegisterRoutes(m *macaron.Macaron) { }, reqGitHook(), context.ReferencesGitRepo(true)) }, reqToken(), reqAdmin()) m.Group("/collaborators", func() { - m.Get("", repo.ListCollaborators) - m.Combo("/:collaborator").Get(repo.IsCollaborator). - Put(bind(api.AddCollaboratorOption{}), repo.AddCollaborator). - Delete(repo.DeleteCollaborator) - }, reqToken(), reqAdmin()) + m.Get("", reqAnyRepoReader(), repo.ListCollaborators) + m.Combo("/:collaborator").Get(reqAnyRepoReader(), repo.IsCollaborator). + Put(reqAdmin(), bind(api.AddCollaboratorOption{}), repo.AddCollaborator). + Delete(reqAdmin(), repo.DeleteCollaborator) + }, reqToken()) m.Get("/raw/*", context.RepoRefByType(context.RepoRefAny), reqRepoReader(models.UnitTypeCode), repo.GetRawFile) m.Get("/archive/*", reqRepoReader(models.UnitTypeCode), repo.GetArchive) m.Combo("/forks").Get(repo.ListForks).