Merged #166 "Fix XRF vulnerability"
New forks shall respect the source repository access restriction

If the source repository access restriction exceeds the fork default (push)
then the fork shall inherit the source repository access restriction.
Merge branch 'ticket/167' into develop