LFS locks must belong to the intended repo (#36344) (#36349)

Backport #36344 by @lunny Co-authored-by: Lunny Xiao <xiaolunwen@gmail.com>
2026-08-06 10:29:59 +00:00 · 2026-01-12 15:09:16 +08:00
parent 83ce45b186
commit 2c778ff067
3 changed files with 87 additions and 5 deletions
@@ -90,7 +90,7 @@ func GetListLockHandler(ctx *context.Context) {
 			})
 			return
 		}
-		lock, err := git_model.GetLFSLockByID(ctx, v)
+		lock, err := git_model.GetLFSLockByIDAndRepo(ctx, v, repository.ID)
 		if err != nil && !git_model.IsErrLFSLockNotExist(err) {
 			log.Error("Unable to get lock with ID[%s]: Error: %v", v, err)
 		}