From 4af96a179912fc651e544c8ff90d9ddc9c7e6f48 Mon Sep 17 00:00:00 2001
From: Stefan Bühler <stbuehler@web.de>
Date: Jul 17 2017 16:53:13 +0000
Subject: hide private repos in ssh too


'@all' shouldn't have access to private repos, otherwise every user sees
all private repositories.

---

diff --git a/pagure/lib/git_auth.py b/pagure/lib/git_auth.py
index 939e053..577b668 100644
--- a/pagure/lib/git_auth.py
+++ b/pagure/lib/git_auth.py
@@ -126,7 +126,7 @@ class Gitolite2Auth(GitAuthHelper):
                 repos = ''
 
             config.append('repo %s%s' % (repos, project.fullname))
-            if repos not in ['tickets/', 'requests/']:
+            if not project.private and repos not in ['tickets/', 'requests/']:
                 config.append('  R   = @all')
             if project.committer_groups:
                 config.append('  RW+ = @%s' % ' @'.join(