Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

User profile page permission problems when user's visibility is private #32309

Open
yp05327 opened this issue Oct 22, 2024 · 0 comments
Open
Labels

Comments

@yp05327
Copy link
Contributor

yp05327 commented Oct 22, 2024

Description

Conditions:

  • User A's visibility is private
  • User A and User B is the member of an organization
  • The organization is private and has a private repo
  • User A has contributed in the private repo

Problems after User B access User A's profile page:

  • User B can see all internal repos, but he has no permission to access them, so should these repos be displayed in the profile page?
    image

  • User B can not access projects and packages unit, should it be displayed in the profile page?
    image

  • User B can access Public Activity page but nothing there, User B can also access the private repo with all read permission, so the activities in this repo should be displayed?
    image

  • If there's a private repo which User B can not access, but User A started it. Then you will see:
    image

Gitea Version

latest

Can you reproduce the bug on the Gitea demo site?

No

Log Gist

No response

Screenshots

No response

Git Version

No response

Operating System

No response

How are you running Gitea?

build

Database

None

@yp05327 yp05327 changed the title User public activity in profile page and permission problems when user's visibility is private User profile page permission problems when user's visibility is private Oct 22, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

1 participant