API - Reporter cannot pull file details.

Created by: VertigoRay

Components:

GitLab 6.6.1
GitLab Shell 1.8.0
GitLab API v3
Ruby 2.0.0p247
Rails:  4.0.3

Note: I've replaced private_token in my query string with the permission instead of my actual Private Token.

When calling /api/v3/projects/93/repository/files?file_path=install.ps1&ref=master&private_token=Developer, I get the following:

{"file_name":"install.ps1","file_path":"install.ps1", ...}

Works as expected.

When calling /api/v3/projects/93/repository/files?file_path=install.ps1&ref=master&private_token=Reporter, I get the following:

{"message":"403 Forbidden"}

Expected results, same as Developer per action Pull project code being enabled for the Reporter role.

When browsing repo via the web interface, permissions work as expected. This means that a Reporter can browse and pull the code.

Admin message