Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>tags/v19.0.0beta1
@@ -96,6 +96,10 @@ class TransferOwnershipController extends OCSController { | |||
return new DataResponse([], Http::STATUS_BAD_REQUEST); | |||
} | |||
if ($node->getOwner()->getUID() !== $this->userId) { | |||
return new DataResponse([], Http::STATUS_FORBIDDEN); | |||
} | |||
$transferOwnership = new TransferOwnershipEntity(); | |||
$transferOwnership->setSourceUser($this->userId); | |||
$transferOwnership->setTargetUser($recipient); |
@@ -215,7 +215,11 @@ export default { | |||
.catch(error => { | |||
logger.error('Could not send ownership transfer request', { error }) | |||
this.submitError = error.message || t('files', 'Unknown error') | |||
if (error?.response?.status === 403) { | |||
this.submitError = t('files', 'Cannot transfter ownership of a file or folder you don\'t own') | |||
} else { | |||
this.submitError = error.message || t('files', 'Unknown error') | |||
} | |||
}) | |||
}, | |||
}, |