Can anyone access to source code?

[steam3d]

For case when you use private repository and added this repository to weblate.

[nijel]

Only users with appropriate permission can access the repository exported by Weblate, see https://docs.weblate.org/en/latest/admin/optionals.html#git-exporter and https://docs.weblate.org/en/latest/admin/access.html#managing-per-project-access-control

[steam3d]

If you add a private repo to public project weblate, everyone can clone it. Does it right behaviour? isn't it just the translation text string files that need to be available?

[nijel]

Only users who have permission for that can access it. In the default setup the Users group (default one for created users) or anonymous account (user for unauthenticated users) have that permission, but you are free to change that to match your expectations.

[steam3d]

I think you should mention this in weblate. I accidentally noticed when I saw the link to the internal weblate repository. This is really not obvious behavior.

[nijel]

I've added such explanation in ad79c41.