Verify access to source ref during add branch operation
Previously Gerrit didn't check access to source ref during add branch
operation. Because of that users could create a branch from any known
commit SHA1, even when they didn't have access to that commit.
This patch adds additional validation to RefControl.canCreate() that
will check that a given commit object belongs to branch that the user
already has access to.
Change-Id: I16d893e0ce584ae01825aadd083c0e0e41eb5610
Signed-off-by: Dariusz Luksza <dariusz@luksza.org>
2 files changed
