forgejo-backport-action 72d35af26a [v14.0/forgejo] fix: comment attachment API is more restrictive than the web UI (#11742) ... **Backport:** https://codeberg.org/forgejo/forgejo/pulls/11623 The permission check for editing the attachments of a comment (adding or removing them) is changed to be the same as when editing the textual body of the comment. The poster of a comment can always edit it via the web UI, which includes the ability to remove or add attachments. It does not require write permission on the issue or pull unit of the repository. The API is consistent with the web UI in how it [verifies permissions for editing comments][0] when modifying the textual content. However, when adding or removing the attachments of a comment, it [also requires write permissions][1] on the issue or pull unit, which is inconsistent with the web UI and more restrictive. [0]: a581059606/routers/api/v1/repo/issue_comment.go (L606) [1]: a581059606/routers/api/v1/repo/issue_comment_attachment.go (L359) Co-authored-by: limiting-factor <limiting-factor@posteo.com> Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/11742 Co-authored-by: forgejo-backport-action <forgejo-backport-action@noreply.codeberg.org> Co-committed-by: forgejo-backport-action <forgejo-backport-action@noreply.codeberg.org>		2026-03-19 04:19:17 +01:00
..
e2e	[v14.0/forgejo] fix: Forgejo Security Patches, 2026-03-09 (#11514)	2026-03-09 06:35:39 +01:00
fuzz	chore: branding import path (#7337)	2025-03-27 19:40:14 +00:00
gitea-lfs-meta	Test views of LFS files (#22196)	2022-12-23 07:41:56 +08:00
gitea-repositories-meta	fix: Allow SHA-256 in PR commit URLs (#10309)	2025-12-16 00:45:00 +01:00
integration	[v14.0/forgejo] fix: comment attachment API is more restrictive than the web UI (#11742)	2026-03-19 04:19:17 +01:00
testdata/data	add model viewer for .glb (GLTF) model in file view (#8111)	2025-06-21 14:42:35 +02:00
mysql.ini.tmpl	fix: reduce deadlocks merging PRs by using caching for repo issue count stats (#9922)	2025-10-31 23:50:05 +01:00
pgsql.ini.tmpl	fix: reduce deadlocks merging PRs by using caching for repo issue count stats (#9922)	2025-10-31 23:50:05 +01:00
sqlite.ini.tmpl	fix: reduce deadlocks merging PRs by using caching for repo issue count stats (#9922)	2025-10-31 23:50:05 +01:00
test_utils.go	[v14.0/forgejo] fix: prevent intermittent test failures caused by uncancellable tasks (#10717)	2026-01-06 17:06:22 +01:00