The get_project call seems to have not been renamed, which I had advised to do to make sure that every occurrence is assessed whether it needs to bypass the get_authorized_project wrapper. Currently there are multiple places that will leak whether or not a private project of a specific name exists.
@puiterwijk can you elaborate it a little? Renaming of get_project how will it solve the problem ?
https://pagure.io/pagure/pull-request/1147 fixes it
@pingou changed the status to Fixed
Fixed