Merge pull request #42907 from nextcloud/fix/caldav/update-acls-deletedcalendarobjectscollection-stable27

[stable27] fix(CalDAV): set acls for DeletedCalendarObjectsCollection

1 files changed, 24 insertions, 1 deletions

diff --git a/apps/dav/lib/CalDAV/Trashbin/DeletedCalendarObjectsCollection.php b/apps/dav/lib/CalDAV/Trashbin/DeletedCalendarObjectsCollection.php
index 20d05c047b1..0c54839127c 100644
--- a/apps/dav/lib/CalDAV/Trashbin/DeletedCalendarObjectsCollection.php
+++ b/apps/dav/lib/CalDAV/Trashbin/DeletedCalendarObjectsCollection.php
@@ -31,11 +31,15 @@ use Sabre\DAV\Exception\BadRequest;
 use Sabre\DAV\Exception\Forbidden;
 use Sabre\DAV\Exception\NotFound;
 use Sabre\DAV\Exception\NotImplemented;
+use Sabre\DAVACL\ACLTrait;
+use Sabre\DAVACL\IACL;
 use function array_map;
 use function implode;
 use function preg_match;
 
-class DeletedCalendarObjectsCollection implements ICalendarObjectContainer {
+class DeletedCalendarObjectsCollection implements ICalendarObjectContainer, IACL {
+	use ACLTrait;
+
 	public const NAME = 'objects';
 
 	/** @var CalDavBackend */
@@ -129,4 +133,23 @@ class DeletedCalendarObjectsCollection implements ICalendarObjectContainer {
 			[$calendarInfo['id'], 'ics'],
 		);
 	}
+
+	public function getOwner() {
+		return $this->principalInfo['uri'];
+	}
+
+	public function getACL(): array {
+		return [
+			[
+				'privilege' => '{DAV:}read',
+				'principal' => $this->getOwner(),
+				'protected' => true,
+			],
+			[
+				'privilege' => '{DAV:}unbind',
+				'principal' => '{DAV:}owner',
+				'protected' => true,
+			]
+		];
+	}
 }