changeset 7831:b5ed0ab8cc74

hgweb: fix allow_read permissions when a user is specified Thanks to Juan Pablo Aroztegi for reporting and debugging it.
author Benoit Boissinot <benoit.boissinot@ens-lyon.org>
date Sat, 07 Mar 2009 00:59:41 +0100
parents 6542be5df719
children 1fce19b9b011
files mercurial/hgweb/hgweb_mod.py
diffstat 1 files changed, 1 insertions(+), 1 deletions(-) [+]
line wrap: on
line diff
--- a/mercurial/hgweb/hgweb_mod.py	Wed Mar 04 19:04:21 2009 -0600
+++ b/mercurial/hgweb/hgweb_mod.py	Sat Mar 07 00:59:41 2009 +0100
@@ -284,7 +284,7 @@
 
         allow_read = self.configlist('web', 'allow_read')
         result = (not allow_read) or (allow_read == ['*'])
-        if not result or user in allow_read:
+        if not (result or user in allow_read):
             raise ErrorResponse(HTTP_UNAUTHORIZED, 'read not authorized')
 
         if op == 'pull' and not self.allowpull: