diff options
author | C. Montero Luque <cmonteroluque@users.noreply.github.com> | 2016-02-09 22:01:08 +0100 |
---|---|---|
committer | C. Montero Luque <cmonteroluque@users.noreply.github.com> | 2016-02-09 22:01:08 +0100 |
commit | f64dbc67c65077f4f0879d47ca4ea6ac0770a4a3 (patch) | |
tree | 0b5499f2f43f0d765947fe07307ca8d3b1a896f5 /apps/dav/appinfo | |
parent | 962d0c3290fc5b881c579d553373f3facaa3ab3e (diff) | |
parent | acd8c72d3dc25787950de8d1d7b8e735eff7b28f (diff) | |
download | nextcloud-server-f64dbc67c65077f4f0879d47ca4ea6ac0770a4a3.tar.gz nextcloud-server-f64dbc67c65077f4f0879d47ca4ea6ac0770a4a3.zip |
Merge pull request #20928 from owncloud/publicdav-check-permissions
Check that the owner of a link share still has share permissions on access
Diffstat (limited to 'apps/dav/appinfo')
-rw-r--r-- | apps/dav/appinfo/v1/publicwebdav.php | 8 |
1 files changed, 7 insertions, 1 deletions
diff --git a/apps/dav/appinfo/v1/publicwebdav.php b/apps/dav/appinfo/v1/publicwebdav.php index 6ddb570aca8..b0ee264aac3 100644 --- a/apps/dav/appinfo/v1/publicwebdav.php +++ b/apps/dav/appinfo/v1/publicwebdav.php @@ -46,7 +46,9 @@ $serverFactory = new OCA\DAV\Connector\Sabre\ServerFactory( $requestUri = \OC::$server->getRequest()->getRequestUri(); -$server = $serverFactory->createServer($baseuri, $requestUri, $authBackend, function () use ($authBackend) { +$linkCheckPlugin = new \OCA\DAV\Files\Sharing\PublicLinkCheckPlugin(); + +$server = $serverFactory->createServer($baseuri, $requestUri, $authBackend, function (\Sabre\DAV\Server $server) use ($authBackend, $linkCheckPlugin) { $isAjax = (isset($_SERVER['HTTP_X_REQUESTED_WITH']) && $_SERVER['HTTP_X_REQUESTED_WITH'] === 'XMLHttpRequest'); if (OCA\Files_Sharing\Helper::isOutgoingServer2serverShareEnabled() === false && !$isAjax) { // this is what is thrown when trying to access a non-existing share @@ -68,9 +70,13 @@ $server = $serverFactory->createServer($baseuri, $requestUri, $authBackend, func OC_Util::setupFS($owner); $ownerView = \OC\Files\Filesystem::getView(); $path = $ownerView->getPath($fileId); + $fileInfo = $ownerView->getFileInfo($path); + $linkCheckPlugin->setFileInfo($fileInfo); return new \OC\Files\View($ownerView->getAbsolutePath($path)); }); +$server->addPlugin($linkCheckPlugin); + // And off we go! $server->exec(); |