From 00ffad3c6065bc34bc4bde1a80f1a33658da3094 Mon Sep 17 00:00:00 2001
From: Arthur Schiwon <blizzz@arthur-schiwon.de>
Date: Tue, 29 Jun 2021 13:55:03 +0200
Subject: [PATCH] adjust access permissions of new controller method

- fixes wrong veriable usage also

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
---
 apps/provisioning_api/lib/Controller/UsersController.php | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/apps/provisioning_api/lib/Controller/UsersController.php b/apps/provisioning_api/lib/Controller/UsersController.php
index 65789e14b7f..f5993e3aa5c 100644
--- a/apps/provisioning_api/lib/Controller/UsersController.php
+++ b/apps/provisioning_api/lib/Controller/UsersController.php
@@ -604,6 +604,10 @@ class UsersController extends AUserData {
 	}
 
 	/**
+	 * @NoAdminRequired
+	 * @NoSubAdminRequired
+	 * @PasswordConfirmationRequired
+	 *
 	 * @throws OCSException
 	 */
 	public function editUserMultiValue(
@@ -663,7 +667,7 @@ class UsersController extends AUserData {
 				$mailCollection = $userAccount->getPropertyCollection(IAccountManager::COLLECTION_EMAIL);
 				$targetProperty = null;
 				foreach ($mailCollection->getProperties() as $property) {
-					if ($property->getValue() === $value) {
+					if ($property->getValue() === $key) {
 						$targetProperty = $property;
 						break;
 					}
-- 
2.39.5