sander/Hostityourself
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix: non-admin users with app grants can now push via HTTP

Browse source 
The user_apps check was silently failing because sqlx::query_scalar
without an explicit type annotation would hit a runtime decoding error,
which .unwrap_or(None) swallowed — always returning None → 403.

All three DB calls in check_push_access now use match + tracing::error!
so failures are visible in logs instead of looking like a missing grant.

https://claude.ai/code/session_01FKCW3FDjNFj6jve4niMFXH
This commit is contained in:
Claude 2026-03-24 10:41:26 +00:00
parent 5bc1948f1a
commit 872efc74ce
No known key found for this signature in database
1 changed files with 47 additions and 31 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

48
server/src/routes/git.rs
View file

@ -105,49 +105,65 @@ fn forbidden() -> Response<Body> {
/// Resolves an app name/id and checks whether the user may push to it.
/// Returns the app_id on success.
async fn check_push_access(s: &AppState, user_id: &str, app: &str) -> Option<String> {
let app_id: Option<String> =
sqlx::query_scalar::<_, String>("SELECT id FROM apps WHERE id = ? OR name = ?")
let app_id = match sqlx::query_scalar::<_, String>(
"SELECT id FROM apps WHERE id = ? OR name = ?",
)
.bind(app)
.bind(app)
.fetch_optional(&s.db)
.await
.unwrap_or(None);
let app_id = match app_id {
Some(id) => id,
None => {
{
Ok(Some(id)) => id,
Ok(None) => {
tracing::debug!("check_push_access: no app found for {:?}", app);
return None;
}
Err(e) => {
tracing::error!("check_push_access: app lookup error: {e}");
return None;
}
};
let is_admin: i64 = sqlx::query_scalar::<_, i64>("SELECT is_admin FROM users WHERE id = ?")
let is_admin: i64 = match sqlx::query_scalar::<_, i64>(
"SELECT is_admin FROM users WHERE id = ?",
)
.bind(user_id)
.fetch_optional(&s.db)
.await
.unwrap_or(None)
.unwrap_or(0);
{
Ok(v) => v.unwrap_or(0),
Err(e) => {
tracing::error!("check_push_access: is_admin lookup error: {e}");
0
}
};
if is_admin != 0 {
tracing::debug!("check_push_access: user {} is admin, access granted", user_id);
return Some(app_id);
}
let granted: Option<i64> =
sqlx::query_scalar::<_, i64>("SELECT 1 FROM user_apps WHERE user_id = ? AND app_id = ?")
match sqlx::query_scalar::<_, i64>(
"SELECT 1 FROM user_apps WHERE user_id = ? AND app_id = ?",
)
.bind(user_id)
.bind(&app_id)
.fetch_optional(&s.db)
.await
.unwrap_or(None);
if granted.is_none() {
{
Ok(Some(_)) => Some(app_id),
Ok(None) => {
tracing::debug!(
"check_push_access: user {} has no grant for app {}",
user_id, app_id
);
None
}
Err(e) => {
tracing::error!("check_push_access: user_apps lookup error: {e}");
None
}
}
granted.map(|_| app_id)
}
// ─────────────────────────────────────────────────────────────────────────────