From 890cb7ef6193f612ce91b8ee4fef8402b2028a2e Mon Sep 17 00:00:00 2001 From: Marcin Kuzminski Date: Mon, 21 Aug 2017 19:30:27 +0200 Subject: [PATCH] search: per-repo search shouldn't require admin permissions. Read is enought because we access the repo only --- rhodecode/apps/search/views.py | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/rhodecode/apps/search/views.py b/rhodecode/apps/search/views.py index 1230bf46..18b778e8 100644 --- a/rhodecode/apps/search/views.py +++ b/rhodecode/apps/search/views.py @@ -123,7 +123,8 @@ class SearchRepoView(RepoAppView): return c @LoginRequired() - @HasRepoPermissionAnyDecorator('repository.admin') + @HasRepoPermissionAnyDecorator( + 'repository.read', 'repository.write', 'repository.admin') @view_config( route_name='search_repo', request_method='GET', renderer='rhodecode:templates/search/search.mako')