src/com/gitblit/AccessRestrictionFilter.java
@@ -156,7 +156,7 @@ return; } else { // check user access for request if (user.canAdmin || canAccess(model, user, urlRequestType)) { if (user.canAdmin() || canAccess(model, user, urlRequestType)) { // authenticated request permitted. // pass processing to the restricted servlet. newSession(authenticatedRequest, httpResponse);