CVE-2017-1002151: PR#2426: hide private repos in ssh too - pagure

This is the test I came up with:

+ def test_write_gitolite_project_test_private(self):

•    """ Test the write\_gitolite\_acls function of pagure.lib.git with
  

•    a postconf set """
  

•    with open(self.outputconf, 'w') as stream:
  

•        pass
  

•    # Make the test project private
  

•    project = pagure.lib.\_get\_project(self.session, 'test')
  

•    project.private = True
  

•    self.session.add(project)
  

•    self.session.commit()
  

•    # Re-generate the gitolite config just for this project
  

•    helper = pagure.lib.git\_auth.get\_git\_auth\_helper('gitolite3')
  

•    helper.write\_gitolite\_acls(
  

•        self.session,
  

•        self.outputconf,
  

•        project=project,
  

•    )
  

•    self.assertTrue(os.path.exists(self.outputconf))
  

•    with open(self.outputconf) as stream:
  

•        data = stream.read().decode('utf-8')
  

•    exp = u"""@grp2  = foo
  

+@grp = pingou +# end of groups

+repo test

• RW+ = pingou

+repo docs/test

• RW+ = pingou

+repo tickets/test

• RW+ = pingou

+repo requests/test

• RW+ = pingou

+# end of body +"""

•    print data
  

•    self.assertEqual(data, exp)
  

If someone can review this, I’ll merge the PR manually.