Wrong visibility interaction when RequireLogin = true

[thomiceli]

When RequireLogin is enabled in the admin panel, and when a user try to pull/clone a gist, the server obviously asks a user/password or check for an existing ssh key.
But the access is granted only when the credentials passed match the owner of the gist.

[thomiceli]

opengist/internal/web/git_http.go

Line 102 in 2fd053a

if ok, err := utils.Argon2id.Verify(authPassword, gist.User.Password); !ok || gist.User.Username != authUsername {

opengist/internal/ssh/git_ssh.go

Line 55 in 2fd053a

pubKey, err := db.SSHKeyExistsForUser(key, gist.UserID)

[thomiceli]

Currently it behaves like a pull/clone and a push are the same thing when RequireLogin is enabled; where it should not be the case: a login is required but if the user exists, it should pull/clone where as only the gist owner should push