]> source.dussan.org Git - nextcloud-server.git/commitdiff
Fixed file permissions after public upload
authorVincent Petry <pvince81@owncloud.com>
Mon, 14 Oct 2013 15:28:23 +0000 (17:28 +0200)
committerVincent Petry <pvince81@owncloud.com>
Mon, 14 Oct 2013 15:28:53 +0000 (17:28 +0200)
Fixes #5328

apps/files/ajax/upload.php

index 45fb17de94ae94875f3f94b916e04d82343d84ad..2c1be428e843c0054e283a780618f201297a1cdb 100644 (file)
@@ -130,7 +130,7 @@ if (strpos($dir, '..') === false) {
                                                        'originalname' => $files['tmp_name'][$i],
                                                        'uploadMaxFilesize' => $maxUploadFileSize,
                                                        'maxHumanFilesize' => $maxHumanFileSize,
-                                                       'permissions' => $meta['permissions'],
+                                                       'permissions' => $meta['permissions'] & OCP\PERMISSION_READ
                                                );
                                        }
 
@@ -156,7 +156,7 @@ if (strpos($dir, '..') === false) {
                                        'originalname' => $files['tmp_name'][$i],
                                        'uploadMaxFilesize' => $maxUploadFileSize,
                                        'maxHumanFilesize' => $maxHumanFileSize,
-                                       'permissions' => $meta['permissions'],
+                                       'permissions' => $meta['permissions'] & OCP\PERMISSION_READ
                                );
                        }
                }