c572fcfe04
Rename the Go module path from code.gitea.io/gitea to git.mokoconsulting.tech/MokoConsulting/MokoGitea across the entire codebase. Scope: - go.mod module declaration - 2,235 Go source files (import paths) - Dockerfile WORKDIR and COPY paths - Swagger API templates - golangci.yml linter config External dependencies (code.gitea.io/gitea-vet, code.gitea.io/sdk/gitea, gitea.com/gitea/act, etc.) are intentionally NOT renamed — they are separate upstream modules. Closes #132 Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
62 lines
1.8 KiB
Go
62 lines
1.8 KiB
Go
// Copyright 2023 The Gitea Authors. All rights reserved.
|
|
// SPDX-License-Identifier: MIT
|
|
|
|
package integration
|
|
|
|
import (
|
|
"net/http"
|
|
"slices"
|
|
"testing"
|
|
|
|
unit_model "git.mokoconsulting.tech/MokoConsulting/MokoGitea/models/unit"
|
|
"git.mokoconsulting.tech/MokoConsulting/MokoGitea/tests"
|
|
)
|
|
|
|
func TestOrgProjectAccess(t *testing.T) {
|
|
defer tests.PrepareTestEnv(t)()
|
|
|
|
disabledRepoUnits := unit_model.DisabledRepoUnitsGet()
|
|
unit_model.DisabledRepoUnitsSet(append(slices.Clone(disabledRepoUnits), unit_model.TypeProjects))
|
|
defer unit_model.DisabledRepoUnitsSet(disabledRepoUnits)
|
|
|
|
// repo project, 404
|
|
req := NewRequest(t, "GET", "/user2/repo1/projects")
|
|
MakeRequest(t, req, http.StatusNotFound)
|
|
|
|
// user project, 200
|
|
req = NewRequest(t, "GET", "/user2/-/projects")
|
|
MakeRequest(t, req, http.StatusOK)
|
|
|
|
// org project, 200
|
|
req = NewRequest(t, "GET", "/org3/-/projects")
|
|
MakeRequest(t, req, http.StatusOK)
|
|
|
|
// change the org's visibility to private
|
|
session := loginUser(t, "user2")
|
|
req = NewRequestWithValues(t, "POST", "/org/org3/settings", map[string]string{
|
|
"name": "org3",
|
|
"visibility": "2",
|
|
})
|
|
session.MakeRequest(t, req, http.StatusSeeOther)
|
|
|
|
// user4 can still access the org's project because its team(team1) has the permission
|
|
session = loginUser(t, "user4")
|
|
req = NewRequest(t, "GET", "/org3/-/projects")
|
|
session.MakeRequest(t, req, http.StatusOK)
|
|
|
|
// disable team1's project unit
|
|
session = loginUser(t, "user2")
|
|
req = NewRequestWithValues(t, "POST", "/org/org3/teams/team1/edit", map[string]string{
|
|
"team_name": "team1",
|
|
"repo_access": "specific",
|
|
"permission": "read",
|
|
"unit_8": "0",
|
|
})
|
|
session.MakeRequest(t, req, http.StatusSeeOther)
|
|
|
|
// user4 can no longer access the org's project
|
|
session = loginUser(t, "user4")
|
|
req = NewRequest(t, "GET", "/org3/-/projects")
|
|
session.MakeRequest(t, req, http.StatusNotFound)
|
|
}
|