mercurial/hgweb/hgweb_mod.py

7562:b663b5563de7

        result = (not allow_read) or (allow_read == ['*']) or (user in allow_read)
        if not result:
            raise ErrorResponse(HTTP_UNAUTHORIZED, 'read not authorized')

        if op == 'pull' and not self.allowpull:
            raise ErrorResponse(HTTP_OK, '')
        # op is None when checking allow/deny_read permissions for a web-browser request
        elif op == 'pull' or op is None:
            return

        # enforce that you can only push using POST requests

7563:bbcd2dea19fe

        result = (not allow_read) or (allow_read == ['*']) or (user in allow_read)
        if not result:
            raise ErrorResponse(HTTP_UNAUTHORIZED, 'read not authorized')

        if op == 'pull' and not self.allowpull:
            raise ErrorResponse(HTTP_UNAUTHORIZED, 'pull not authorized')
        # op is None when checking allow/deny_read permissions for a web-browser request
        elif op == 'pull' or op is None:
            return

        # enforce that you can only push using POST requests