diff options
| author | Vincent Petry <pvince81@owncloud.com> | 2013-10-15 07:24:14 -0700 |
|---|---|---|
| committer | Vincent Petry <pvince81@owncloud.com> | 2013-10-15 07:24:14 -0700 |
| commit | 85d2c864d9a603eb184ca717891d44855d764350 (patch) | |
| tree | 67ecab054ed0fbcd9bb692241a44681d36f6d6b8 | |
| parent | 8c25b5a0c168553d22de40dcbf7d1db557cf1a00 (diff) | |
| parent | 5f249e1a5474b472f1c597bab0b40c2203a49a91 (diff) | |
| download | nextcloud-server-85d2c864d9a603eb184ca717891d44855d764350.tar.gz nextcloud-server-85d2c864d9a603eb184ca717891d44855d764350.zip | |
Merge pull request #5350 from owncloud/files-preventdeletemountpoint
Prevent renaming/deleting mount points
| -rw-r--r-- | lib/private/files/view.php | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/lib/private/files/view.php b/lib/private/files/view.php index a56135d9b3c..c0b9f0fc9c8 100644 --- a/lib/private/files/view.php +++ b/lib/private/files/view.php @@ -904,7 +904,8 @@ class View { $permissions = $subStorage->getPermissions($rootEntry['path']); $subPermissionsCache->set($rootEntry['fileid'], $user, $permissions); } - $rootEntry['permissions'] = $permissions; + // do not allow renaming/deleting the mount point + $rootEntry['permissions'] = $permissions & (\OCP\PERMISSION_ALL - (\OCP\PERMISSION_UPDATE | \OCP\PERMISSION_DELETE)); //remove any existing entry with the same name foreach ($files as $i => $file) { |