Protect DownloadZipServlet with an AccessRestrictionFilter.

James Moger

2011-09-26 78753bc22f140f863aa3fe56b1c59699ca3e2fa8

 src/com/gitblit/wicket/panels/FederationTokensPanel.java

@@ -41,7 +41,7 @@
   public FederationTokensPanel(String wicketId, final boolean showFederation) {

      super(wicketId);



      final String baseUrl = getRequest().getRelativePathPrefixToContextRoot();

      final String baseUrl = WicketUtils.getGitblitURL(getRequest());

      add(new ExternalLink("federatedUsers", FederationServlet.asFederationLink(baseUrl, GitBlit.self()

            .getFederationToken(FederationToken.USERS_AND_REPOSITORIES),

            FederationRequest.PULL_USERS)));