]> source.dussan.org Git - nextcloud-server.git/commit
projects / nextcloud-server.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: cad44d6) | patch
Fix security issues when copying groupfolder with advanced ACL 29365/head
authorCarl Schwan <carl@carlschwan.eu>
Thu, 21 Oct 2021 14:57:07 +0000 (16:57 +0200)
committerbackportbot[bot] <backportbot[bot]@users.noreply.github.com>
Thu, 21 Oct 2021 16:34:20 +0000 (16:34 +0000)
commit887f4ba2fba8d1814ba875da875409c5668dc01d
tree1bc8fb6e12024931fb69bf74ea0b23e5206008detree | snapshot
parentcad44d69dd633b3764661abbe4a8a265ca883baacommit | diff
Fix security issues when copying groupfolder with advanced ACL

Using advanced ACL, it is possible that an user has access to a
directory but not to a subdirectory, so the copying use
Common::copyFromStorage instead of Local::copyFromStorage.

Fix https://github.com/nextcloud/groupfolders/issues/1692

Signed-off-by: Carl Schwan <carl@carlschwan.eu>
lib/private/Files/Storage/Local.php diff | blob | history
Nextcloud server, a safe home for all your data: https://github.com/nextcloud/server