From 36a62e7b1a6c3b6c4d5411410f83e22c000048cd Mon Sep 17 00:00:00 2001 From: Mark Qvist Date: Thu, 10 Sep 2026 11:31:18 +0200 Subject: [PATCH] Cleanup, align with existing pattern of minimal information disclosure on insufficient permissions --- RNS/Utilities/rngit/server.py | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/RNS/Utilities/rngit/server.py b/RNS/Utilities/rngit/server.py index 62bee82e..aba11f27 100644 --- a/RNS/Utilities/rngit/server.py +++ b/RNS/Utilities/rngit/server.py @@ -4249,7 +4249,7 @@ class ReticulumGitNode(): is_author = doc.get("meta", {}).get("author") == remote_identity.hash admin_access = self.resolve_doc_permission(remote_identity, group_name, repository_name, doc_id, self.PERM_ADMIN) - if not is_author and not admin_access: return self.RES_DISALLOWED.to_bytes(1, "big") + b"No access, not author or admin" + if not is_author and not admin_access: return self.RES_DISALLOWED.to_bytes(1, "big") + b"Not allowed" try: completed_dir = os.path.join(completed_base, str(doc_id)) @@ -4287,7 +4287,7 @@ class ReticulumGitNode(): is_author = doc.get("meta", {}).get("author") == remote_identity.hash admin_access = self.resolve_doc_permission(remote_identity, group_name, repository_name, doc_id, self.PERM_ADMIN) - if not is_author and not admin_access: return self.RES_DISALLOWED.to_bytes(1, "big") + b"No access, not author or admin" + if not is_author and not admin_access: return self.RES_DISALLOWED.to_bytes(1, "big") + b"Not allowed" try: active_dir = os.path.join(active_base, str(doc_id))