Successful push without authorization (OD-318)

Artur opened 5 years ago

Hi,

I am running my test OneDev within a Docker container, todays last Docker image.

Created a test project with nothing set as Default Role. And confirmed from another browser the project is not visible to anyone except the project owner.

And then I attempted to push to the repository from command line without providing user credentials and the push succeeded.

These seems like a serious malfunction and security risk or maybe I have misconfigured something?

Activities

Robin Shen commented 5 years ago

Seems that your git client cached credentials used previously. I tested here and it does ask for credential with credential cache disabled.
Artur commented 5 years ago

Yes, you are right. I forgot, I already pushed code to a different repository a few weeks ago.

I am sorry for the trouble.
Robin Shen changed state to 'Closed' 5 years ago
Previous Value Current Value
Open

Closed
Login to comment

Previous Value	Current Value
Open	Closed

Type	Bug
Priority	Critical
Assignee	Robin Shen
Affected Versions	Not Found

Issue Votes (0)

Watchers (3)

Reference

OD-318