Benoit Boissinot  committed b5ed0ab

hgweb: fix allow_read permissions when a user is specified

Thanks to Juan Pablo Aroztegi for reporting and debugging it.

  • Participants
  • Parent commits 6542be5

Comments (0)

Files changed (1)

File mercurial/hgweb/

         allow_read = self.configlist('web', 'allow_read')
         result = (not allow_read) or (allow_read == ['*'])
-        if not result or user in allow_read:
+        if not (result or user in allow_read):
             raise ErrorResponse(HTTP_UNAUTHORIZED, 'read not authorized')
         if op == 'pull' and not self.allowpull: