alice.pds.demo.boltless.dev / core
This repository has no description
0
Fork 0

Configure Feed

Select the types of activity you want to include in your feed.

spindle: check for perm on process pull

author
dawn date (Jul 26, 2026, 5:59 PM +0300) commit 79d96c9d parent d70ef9f8 change-id qqqpkrwo
+11
+11
spindle/tapclient.go
··· 355 355 return nil 356 356 } 357 357 358 + // check if pull record author has push access to target repo 359 + allowed, err := s.e.IsPushAllowed(evt.Did.String(), rbac.ThisServer, repo.RepoDid.String()) 360 + if err != nil { 361 + return fmt.Errorf("checking push access for pull record author: %w", err) 362 + } 363 + if !allowed { 364 + l.Warn("rejecting pull-triggered pipeline. author has no push access", 365 + "author", evt.Did, "repo", repo.RepoDid) 366 + return nil 367 + } 368 + 358 369 latestSubmission, err := s.fetchLatestSubmission(ctx, evt.Did.String(), evt.Rkey.String(), &record) 359 370 if err != nil { 360 371 return err