Repository stars and watchers routes are allowed to access for all users even with no access to repository

[lafriks]

Repository stars and watchers routes are allowed to access for all users even with no any unit rights to repository where all other repository URL's would return 404

[lunny]

There is no unit to include this two routes.

[lafriks]

Yes, but at least it should be checked just like home handler on len repository units > 0

[lunny]

Should be fixed by #5314, close now and please feel free to reopen it.