upstream/nextcloud
1
0
Fork 0
mirror of https://github.com/nextcloud/server.git synced 2026-05-28 04:32:30 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions 25

fix: prevent sharing permissions on user root folder

Browse source 
Signed-off-by: John Molakvoæ <skjnldsv@protonmail.com>
This commit is contained in:
John Molakvoæ 2023-09-01 13:53:41 +02:00
parent 4711c775b8
commit 750a9f2c4a
No known key found for this signature in database
GPG key ID: 60C25B8C072916CF
1 changed files with 2 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
lib/private/Files/Node/LazyUserFolder.php
View file

@ -63,7 +63,8 @@ class LazyUserFolder extends LazyFolder {
}
}, [
'path' => $this->path,
'permissions' => Constants::PERMISSION_ALL,
// Sharing user root folder is not allowed
'permissions' => Constants::PERMISSION_ALL ^ Constants::PERMISSION_SHARE,
'type' => FileInfo::TYPE_FOLDER,
'mimetype' => FileInfo::MIMETYPE_FOLDER,
]);