Hide access rights not visible to user

It may be an information leak to display to a user other branches
and the group those users have access to read.  When displaying the
access rights of a project, filter the list of displayed RefRights
to only those RefRights that are owned by the user, or are visible
to them via READ +1 permission.

Change-Id: I70d04d494ec9cef81c2108ecb451a81ac0293615
Signed-off-by: Shawn O. Pearce <>
1 file changed