pagure

#2342 Return a 404 on private ticket if the user is not authenticated
Merged by pingou. Opened by pingou.
404_not_auth  into  master

Download 2342.patch

Fixes https://pagure.io/pagure/issue/2320

Why not return 404 even when the user is authenticated if they're not allowed to view the issue? That's how I'm interpreting @puiterwijk's comment about leaking that there are private issues.

As jcline pointed out, this should always be the error surfaced unless you have access.

rebased

+1 as long as the tests pass
Edited by mprahl

rebased

Tests are now passing, thanks for the reviews folks!

Pull-Request has been merged by pingou
Metadata
None
No Tags
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.