Patrick Hiesel 0aadad53fd Add permission check for reviewers without votes and CCs ...

In ReviewDb, CCs and reviewers with no votes were stored by using a
PatchSetApproval with value 0. In NoteDb, this changed and in the
aforementioned cases we would not perform a proper permission check
which enabled any registered user to remove reviewers.

This commit fixes the vulnerability and adds tests.

Change-Id: Ib173ca4af902602af345fc1367331beb325d275c

2017-12-04 17:37:06 +00:00

..

src

Add permission check for reviewers without votes and CCs

2017-12-04 17:37:06 +00:00

BUILD

Split out build rule for metrics interfaces

2017-08-16 08:20:38 -04:00