2026-06-02 15:17:45 +00:00
1 changed files with 5 additions and 2 deletions
@@ -182,8 +182,11 @@ func ServeAttachment(ctx *context.Context, uuid string) {
 		}

 		if !perm.CanRead(unitType) {
-			ctx.HTTPError(http.StatusNotFound)
-			return
+			// Allow access for licensed read-only mode (private repo with valid license key).
+			if ctx.Data["LicensedReadOnly"] != true {
+				ctx.HTTPError(http.StatusNotFound)
+				return
+			}
 		}

 		if requiredScope, ok := attachmentReadScope(unitType); ok {