@@ -822,7 +822,7 @@ func registerRoutes(m *web.Router) {
822822 m .Methods ("GET, OPTIONS" , "/attachments/{uuid}" , optionsCorsHandler (), repo .GetAttachment )
823823 }, optSignIn )
824824
825- m .Post ("/{username}" , reqSignIn , context .UserAssignmentWeb (), user .Action )
825+ m .Post ("/{username}" , reqSignIn , context .UserAssignmentWeb (), user .ActionUserFollow )
826826
827827 reqRepoAdmin := context .RequireRepoAdmin ()
828828 reqRepoCodeWriter := context .RequireUnitWriter (unit .TypeCode )
@@ -872,7 +872,7 @@ func registerRoutes(m *web.Router) {
872872 m .Group ("/org" , func () {
873873 m .Group ("/{org}" , func () {
874874 m .Get ("/members" , org .Members )
875- }, context .OrgAssignment ())
875+ }, context .OrgAssignment (context. OrgAssignmentOptions {} ))
876876 }, optSignIn )
877877 // end "/org": members
878878
@@ -898,19 +898,20 @@ func registerRoutes(m *web.Router) {
898898 m .Get ("/milestones/{team}" , reqMilestonesDashboardPageEnabled , user .Milestones )
899899 m .Post ("/members/action/{action}" , org .MembersAction )
900900 m .Get ("/teams" , org .Teams )
901- }, context .OrgAssignment (true , false , true ))
901+ }, context .OrgAssignment (context. OrgAssignmentOptions { RequireMember : true , RequireTeamMember : true } ))
902902
903903 m .Group ("/{org}" , func () {
904904 m .Get ("/teams/{team}" , org .TeamMembers )
905905 m .Get ("/teams/{team}/repositories" , org .TeamRepositories )
906906 m .Post ("/teams/{team}/action/{action}" , org .TeamsAction )
907907 m .Post ("/teams/{team}/action/repo/{action}" , org .TeamsRepoAction )
908- }, context .OrgAssignment (true , false , true ))
908+ }, context .OrgAssignment (context. OrgAssignmentOptions { RequireMember : true , RequireTeamMember : true } ))
909909
910- // require admin permission
910+ // require member/team-admin permission (old logic is: requireMember=true, requireTeamAdmin=true)
911+ // but it doesn't seem right: requireTeamAdmin does nothing
911912 m .Group ("/{org}" , func () {
912913 m .Get ("/teams/-/search" , org .SearchTeam )
913- }, context .OrgAssignment (true , false , false , true ))
914+ }, context .OrgAssignment (context. OrgAssignmentOptions { RequireMember : true , RequireTeamAdmin : true } ))
914915
915916 // require owner permission
916917 m .Group ("/{org}" , func () {
@@ -920,7 +921,7 @@ func registerRoutes(m *web.Router) {
920921 m .Post ("/teams/{team}/edit" , web .Bind (forms.CreateTeamForm {}), org .EditTeamPost )
921922 m .Post ("/teams/{team}/delete" , org .DeleteTeam )
922923
923- m .Get ("/worktime" , context .OrgAssignment (false , true ), org .Worktime )
924+ m .Get ("/worktime" , context .OrgAssignment (context. OrgAssignmentOptions { RequireOwner : true } ), org .Worktime )
924925
925926 m .Group ("/settings" , func () {
926927 m .Combo ("" ).Get (org .Settings ).
@@ -989,7 +990,7 @@ func registerRoutes(m *web.Router) {
989990 m .Post ("" , web .Bind (forms.BlockUserForm {}), org .BlockedUsersPost )
990991 })
991992 }, ctxDataSet ("EnableOAuth2" , setting .OAuth2 .Enabled , "EnablePackages" , setting .Packages .Enabled , "PageIsOrgSettings" , true ))
992- }, context .OrgAssignment (true , true ))
993+ }, context .OrgAssignment (context. OrgAssignmentOptions { RequireOwner : true } ))
993994 }, reqSignIn )
994995 // end "/org": most org routes
995996
@@ -1059,7 +1060,7 @@ func registerRoutes(m *web.Router) {
10591060 m .Group ("" , func () {
10601061 m .Get ("/code" , user .CodeSearch )
10611062 }, reqUnitAccess (unit .TypeCode , perm .AccessModeRead , false ), individualPermsChecker )
1062- }, optSignIn , context .UserAssignmentWeb (), context .OrgAssignment ())
1063+ }, optSignIn , context .UserAssignmentWeb (), context .OrgAssignment (context. OrgAssignmentOptions {} ))
10631064 // end "/{username}/-": packages, projects, code
10641065
10651066 m .Group ("/{username}/{reponame}/-" , func () {
@@ -1603,9 +1604,9 @@ func registerRoutes(m *web.Router) {
16031604 m .Get ("/stars" , starsEnabled , repo .Stars )
16041605 m .Get ("/watchers" , repo .Watchers )
16051606 m .Get ("/search" , reqUnitCodeReader , repo .Search )
1606- m .Post ("/action/{action:star|unstar}" , reqSignIn , starsEnabled , repo .Action )
1607- m .Post ("/action/{action:watch|unwatch}" , reqSignIn , repo .Action )
1608- m .Post ("/action/{action:accept_transfer|reject_transfer}" , reqSignIn , repo .Action )
1607+ m .Post ("/action/{action:star|unstar}" , reqSignIn , starsEnabled , repo .ActionStar )
1608+ m .Post ("/action/{action:watch|unwatch}" , reqSignIn , repo .ActionWatch )
1609+ m .Post ("/action/{action:accept_transfer|reject_transfer}" , reqSignIn , repo .ActionTransfer )
16091610 }, optSignIn , context .RepoAssignment )
16101611
16111612 common .AddOwnerRepoGitLFSRoutes (m , optSignInIgnoreCsrf , lfsServerEnabled ) // "/{username}/{reponame}/{lfs-paths}": git-lfs support
0 commit comments