fix #751

2014-12-16 20:47:10 -05:00 · 2014-12-16 20:47:10 -05:00 · d01f2f3c22
parent 1a5aa5e0c0
commit d01f2f3c22
1 changed files with 9 additions and 0 deletions
--- a/routers/user/home.go
+++ b/routers/user/home.go
@ -198,6 +198,15 @@ func Profile(ctx *middleware.Context) {
 		}
 		feeds := make([]*models.Action, 0, len(actions))
 		for _, act := range actions {
+			if act.IsPrivate {
+				if !ctx.IsSigned {
+					continue
+				}
+				if has, _ := models.HasAccess(ctx.User.Name, act.RepoUserName+"/"+act.RepoName,
+					models.READABLE); !has {
+					continue
+				}
+			}
 			// FIXME: cache results?
 			u, err := models.GetUserByName(act.ActUserName)
 			if err != nil {