Merge "canReadCommit: move check for READ on refs/* on top" into stable-2.8
diff --git a/gerrit-server/src/main/java/com/google/gerrit/server/project/ProjectControl.java b/gerrit-server/src/main/java/com/google/gerrit/server/project/ProjectControl.java
index c111c02..ddfe752 100644
--- a/gerrit-server/src/main/java/com/google/gerrit/server/project/ProjectControl.java
+++ b/gerrit-server/src/main/java/com/google/gerrit/server/project/ProjectControl.java
@@ -490,6 +490,10 @@
}
public boolean canReadCommit(RevWalk rw, RevCommit commit) {
+ if (controlForRef("refs/*").canPerform(Permission.READ)) {
+ return true;
+ }
+
Project.NameKey projName = state.getProject().getNameKey();
try {
Repository repo = repoManager.openRepository(projName);
@@ -521,6 +525,6 @@
commit.name(), projName.get());
log.error(msg, e);
}
- return controlForRef("refs/*").canPerform(Permission.READ);
+ return false;
}
}