Mercurial > kallithea
view docs/api/models.rst @ 7296:caa482f8fb5f
repos: only allow api repo creation in existing groups
Fix problem with '../something' paths being allowed; '..' will always exist and
can't be created.
This also introduce a small API change: Repository groups must now exist before
repositories can be created. This makes the API more explicit and simpler.
This issue was found and reported by
Kacper Szurek
https://security.szurek.pl/
author | Mads Kiilerich <mads@kiilerich.com> |
---|---|
date | Tue, 29 May 2018 12:25:41 +0200 |
parents | 22a3fa3c4254 |
children | cd6c577ade97 |
line wrap: on
line source
.. _models: ======================== The :mod:`models` module ======================== .. automodule:: kallithea.model :members: .. automodule:: kallithea.model.comment :members: .. automodule:: kallithea.model.notification :members: .. automodule:: kallithea.model.permission :members: .. automodule:: kallithea.model.repo_permission :members: .. automodule:: kallithea.model.repo :members: .. automodule:: kallithea.model.repo_group :members: .. automodule:: kallithea.model.scm :members: .. automodule:: kallithea.model.user :members: .. automodule:: kallithea.model.user_group :members: