commit 3ce08ac97b5d7a8fd68a722086c705467b397166
author Álvaro Vilaplana García <alvaro.vilaplana@gmail.com> Wed Oct 12 15:48:22 2022 +0000
committer Alvaro Vilaplana Garcia <alvaro.vilaplana@gmail.com> Mon Oct 17 17:27:17 2022 +0100
tree e4c92f9fed284f46814c89b5a9b67e5456c86bcb
parent 8601333b876203f82672822b32b1b5eeeb352f3a

Remove authorisation from ProjectInitializationAction

Assuming that the caller of the pull-replication APIs
is an identified user is not something that the ProjectInitializationAction servlet should do: Gerrit has already authentication defined in its filters and we should rely on them.

Without the check of identified user, the pull-replication
must trust internal users to call its own APIs, therefore
add the condition of being an internal user in the ACL
evaluation.

Bug: Issue 16327
Change-Id: Iee192dfb74b45ef4fbb18aad0eaf20e774d6bb5e