)]}'
{
  "commit": "3ce08ac97b5d7a8fd68a722086c705467b397166",
  "tree": "e4c92f9fed284f46814c89b5a9b67e5456c86bcb",
  "parents": [
    "8601333b876203f82672822b32b1b5eeeb352f3a"
  ],
  "author": {
    "name": "Álvaro Vilaplana García",
    "email": "alvaro.vilaplana@gmail.com",
    "time": "Wed Oct 12 15:48:22 2022 +0000"
  },
  "committer": {
    "name": "Alvaro Vilaplana Garcia",
    "email": "alvaro.vilaplana@gmail.com",
    "time": "Mon Oct 17 17:27:17 2022 +0100"
  },
  "message": "Remove authorisation from ProjectInitializationAction\n\nAssuming that the caller of the pull-replication APIs\nis an identified user is not something that the ProjectInitializationAction servlet should do: Gerrit has already authentication defined in its filters and we should rely on them.\n\nWithout the check of identified user, the pull-replication\nmust trust internal users to call its own APIs, therefore\nadd the condition of being an internal user in the ACL\nevaluation.\n\nBug: Issue 16327\nChange-Id: Iee192dfb74b45ef4fbb18aad0eaf20e774d6bb5e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "63d32c4809b1ae70f4c89f0984f3a661016b3384",
      "old_mode": 33188,
      "old_path": "src/main/java/com/googlesource/gerrit/plugins/replication/pull/api/ProjectInitializationAction.java",
      "new_id": "c1174c9cd457e7d6dcf2cef489ed0c16fff94042",
      "new_mode": 33188,
      "new_path": "src/main/java/com/googlesource/gerrit/plugins/replication/pull/api/ProjectInitializationAction.java"
    }
  ]
}