No. As you can see the protection was based off a number of entities which
I either remove entirely or leave as is and address as it's own story or
party of the API story.
On Apr 30, 2014 6:16 PM, "Justin Sherrill" <notifications@github.com> wrote:

> In app/controllers/katello/api/v2/puppet_modules_controller.rb:
>
> > @@ -22,7 +22,7 @@ def rules
> >      readable = lambda do
> >        (@view && @view.readable?) ||
> >        (@environment && @environment.contents_readable?) ||
> > -      (@repo && @repo.environment.contents_readable? && @repo.product.readable?)
> > +      (@repo && @repo.environment.contents_readable?)
>
> So is @repo <https://github.com/repo> already tested to be readable here?
> (via the route protection)?
>
> —
> Reply to this email directly or view it on GitHub<https://github.com/Katello/katello/pull/4017/files#r12169024>
> .
>