fix: Return only administered groups of a user for subadmins

Signed-off-by: Christopher Ng <chrng8@gmail.com>

diff --git a/apps/provisioning_api/lib/Controller/AUserData.php b/apps/provisioning_api/lib/Controller/AUserData.php
index 77d7f31c6daf579d8acd754c1447cef86d5a2d3c..6bba552a420b3613c1b853a0ec81fbef5aa468b2 100644 (file)
--- a/apps/provisioning_api/lib/Controller/AUserData.php
+++ b/apps/provisioning_api/lib/Controller/AUserData.php
@@ -137,6 +137,9 @@ abstract class AUserData extends OCSController {
                $groups = $this->groupManager->getUserGroups($targetUserObject);
                $gids = [];
                foreach ($groups as $group) {
+                       if (!$this->groupManager->getSubAdmin()->isSubAdminOfGroup($currentLoggedInUser, $group)) {
+                               continue;
+                       };
                        $gids[] = $group->getGID();
                }