block public read access

ChristopherHX · ChristopherHX · commit 3fc4f64f5103 · 2025-10-19T13:45:39.000+02:00
diff --git a/models/perm/access/repo_permission.go b/models/perm/access/repo_permission.go
@@ -264,8 +264,8 @@ func GetActionsUserRepoPermission(ctx context.Context, repo *repo_model.Reposito
 		return perm, err
 	}
 	if task.RepoID != repo.ID {
-		// Allow public repo read access
-		return GetUserRepoPermission(ctx, repo, actionsUser)
+		// FIXME allow public repo read access if tokenless pull is enabled
+		return perm, nil
 	}
 
 	var accessMode perm_model.AccessMode

Original file line number	Diff line number	Diff line change
`@@ -264,8 +264,8 @@ func GetActionsUserRepoPermission(ctx context.Context, repo *repo_model.Reposito`
`264`	`264`	`return perm, err`
`265`	`265`	`}`
`266`	`266`	`if task.RepoID != repo.ID {`
`267`		`- // Allow public repo read access`
`268`		`- return GetUserRepoPermission(ctx, repo, actionsUser)`
	`267`	`+ // FIXME allow public repo read access if tokenless pull is enabled`
	`268`	`+ return perm, nil`
`269`	`269`	`}`
`270`	`270`
`271`	`271`	`var accessMode perm_model.AccessMode`