diff --git a/pagure/api/issue.py b/pagure/api/issue.py index 830bd6a..34fbd92 100644 --- a/pagure/api/issue.py +++ b/pagure/api/issue.py @@ -40,6 +40,13 @@ def new_issue(repo, username=None): jsonout.status_code = 404 return jsonout + if repo != flask.g.token.project: + output['error_code'] = 5 + output['error'] = API_ERROR_CODE[5] + jsonout = flask.jsonify(output) + jsonout.status_code = 404 + return jsonout + status = pagure.lib.get_issue_statuses(SESSION) form = pagure.forms.IssueForm(status=status, csrf_token=False) if form.validate_on_submit():