Skip to content

Comments

Fix track time list permission check#36662

Open
lunny wants to merge 5 commits intogo-gitea:mainfrom
lunny:lunny/fix_track_time_perm
Open

Fix track time list permission check#36662
lunny wants to merge 5 commits intogo-gitea:mainfrom
lunny:lunny/fix_track_time_perm

Conversation

@lunny
Copy link
Member

@lunny lunny commented Feb 17, 2026

No description provided.

@GiteaBot GiteaBot added the lgtm/need 2 This PR needs two approvals by maintainers to be considered for merging. label Feb 17, 2026
@github-actions github-actions bot added the modifies/go Pull requests that update Go code label Feb 17, 2026
@silverwind silverwind requested a review from Copilot February 17, 2026 21:00
Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Adds a repository-permission gate to tracked-time conversions so private issue tracked times are filtered out for users without access.

Changes:

  • Add permission-check (with per-repo permission caching) to ToTrackedTimeList.
  • Add unit test covering public vs private issue tracked times for regular vs admin users.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 3 comments.

File Description
services/convert/issue.go Filters tracked times by repo/issue read permissions before converting to API objects.
services/convert/issue_test.go Adds regression test ensuring tracked-time list conversion respects permissions.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

lunny and others added 4 commits February 19, 2026 14:09
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Signed-off-by: Lunny Xiao <xiaolunwen@gmail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

backport/v1.25 lgtm/need 2 This PR needs two approvals by maintainers to be considered for merging. modifies/go Pull requests that update Go code type/bug

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants