diff options
| author | Robin Appelman <robin@icewind.nl> | 2024-12-23 19:24:39 +0100 |
|---|---|---|
| committer | Git'Fellow <12234510+solracsf@users.noreply.github.com> | 2025-01-09 09:22:29 +0100 |
| commit | 0dc754bb000499a39b8d2ae82b9d775899dc3fe0 (patch) | |
| tree | e913c09d5bd2ebc3606f60b2029663a7e606546e /build/integration | |
| parent | 9196d47945ed2bf6e49e46868fcd0ecc8e112e06 (diff) | |
| download | nextcloud-server-0dc754bb000499a39b8d2ae82b9d775899dc3fe0.tar.gz nextcloud-server-0dc754bb000499a39b8d2ae82b9d775899dc3fe0.zip | |
fix: block moving files to it's own parent with davbackport/49966/stable29
Signed-off-by: Robin Appelman <robin@icewind.nl>
Diffstat (limited to 'build/integration')
| -rw-r--r-- | build/integration/dav_features/dav-v2.feature | 10 | ||||
| -rw-r--r-- | build/integration/dav_features/webdav-related.feature | 10 |
2 files changed, 20 insertions, 0 deletions
diff --git a/build/integration/dav_features/dav-v2.feature b/build/integration/dav_features/dav-v2.feature index a3ac59578e9..82d58a908e9 100644 --- a/build/integration/dav_features/dav-v2.feature +++ b/build/integration/dav_features/dav-v2.feature @@ -9,6 +9,16 @@ Feature: dav-v2 When User "user0" moves file "/textfile0.txt" to "/FOLDER/textfile0.txt" Then the HTTP status code should be "201" + Scenario: Moving and overwriting it's parent + Given using new dav path + And As an "admin" + And user "user0" exists + And As an "user0" + And user "user0" created a folder "/test" + And user "user0" created a folder "/test/test" + When User "user0" moves file "/test/test" to "/test" + Then the HTTP status code should be "403" + Scenario: download a file with range using new endpoint Given using new dav path And As an "admin" diff --git a/build/integration/dav_features/webdav-related.feature b/build/integration/dav_features/webdav-related.feature index 28a0cad619b..6bb600dcb89 100644 --- a/build/integration/dav_features/webdav-related.feature +++ b/build/integration/dav_features/webdav-related.feature @@ -36,6 +36,16 @@ Feature: webdav-related Then the HTTP status code should be "204" And Downloaded content when downloading file "/textfile0.txt" with range "bytes=0-6" should be "Welcome" + Scenario: Moving and overwriting it's parent + Given using old dav path + And As an "admin" + And user "user0" exists + And As an "user0" + And user "user0" created a folder "/test" + And user "user0" created a folder "/test/test" + When User "user0" moves file "/test/test" to "/test" + Then the HTTP status code should be "403" + Scenario: Moving a file to a folder with no permissions Given using old dav path And As an "admin" |