# HG changeset patch
# User Benoit Boissinot <benoit.boissinot@ens-lyon.org>
# Date 2008-05-26 12:20:26
# Node ID 8542fac26f63d425bb648dd848085036af19517b
# Parent  1afb186d29341e1b1444ceddae20e56d78fdbfc4

hgweb: correctly validate permissions with streamclone pulling

diff --git a/mercurial/hgweb/protocol.py b/mercurial/hgweb/protocol.py
--- a/mercurial/hgweb/protocol.py
+++ b/mercurial/hgweb/protocol.py
@@ -224,5 +224,7 @@ def unbundle(web, req):
         os.unlink(tempname)
 
 def stream_out(web, req):
+    if not web.allowpull:
+        return
     req.respond(HTTP_OK, HGTYPE)
     streamclone.stream_out(web.repo, req, untrusted=True)