User able to pull files without having rights on this repository
When pulling and pushing data to a remote repository I uses a user (LDAP) which is set up in the system and is part of a Group but which is not set up to the repository (maybe earlier but removed from the list).
By accident this user have access to these files.
10:59:49.117 [qtp1377187-20] DEBUG sonia.scm.web.security.ChainAuthenticatonMana ger - authenticator sonia.scm.web.security.XmlAuthenticationHandler ends with result, user: null, state: NOT_FOUND
10:59:50.055 [qtp1377187-20] DEBUG sonia.scm.web.security.ChainAuthenticatonMana ger - authenticator sonia.scm.auth.ldap.LDAPAuthenticationHandler ends with result, user: xxx, state: SUCCESS
10:59:50.055 [qtp1377187-20] DEBUG sonia.scm.web.security.BasicSecurityContext - user xxx is member of yyy, zzz