upstream/nextcloud
1
0
Fork 0
mirror of https://github.com/nextcloud/server.git synced 2026-06-11 01:30:50 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions 79

fix: prevent sharing permissions on user root folder

Browse source 
Signed-off-by: John Molakvoæ <skjnldsv@protonmail.com>
This commit is contained in:
John Molakvoæ 2023-09-01 13:53:41 +02:00 committed by backportbot-nextcloud[bot]
parent 09fd427df1
commit d60f95833b
1 changed files with 2 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
lib/private/Files/Node/LazyUserFolder.php
View file

@ -63,7 +63,8 @@ class LazyUserFolder extends LazyFolder {
}
}, [
'path' => $this->path,
'permissions' => Constants::PERMISSION_ALL,
// Sharing user root folder is not allowed
'permissions' => Constants::PERMISSION_ALL ^ Constants::PERMISSION_SHARE,
'type' => FileInfo::TYPE_FOLDER,
'mimetype' => FileInfo::MIMETYPE_FOLDER,
]);