aboutsummaryrefslogtreecommitdiffstats
path: root/build/integration
diff options
context:
space:
mode:
authorRobin Appelman <robin@icewind.nl>2024-12-23 19:24:39 +0100
committerRobin Appelman <robin@icewind.nl>2025-01-03 15:30:20 +0100
commit9193cd664ea9e229765aedb77eadff121ed521c9 (patch)
treec34dce30186fa728b5d8cc0093fd320f2300a753 /build/integration
parentb16f5a00435e9356cbbd757b7fadb5823d8f903a (diff)
downloadnextcloud-server-9193cd664ea9e229765aedb77eadff121ed521c9.tar.gz
nextcloud-server-9193cd664ea9e229765aedb77eadff121ed521c9.zip
fix: block moving files to it's own parent with davblock-dav-move-parent
Signed-off-by: Robin Appelman <robin@icewind.nl>
Diffstat (limited to 'build/integration')
-rw-r--r--build/integration/dav_features/dav-v2.feature10
-rw-r--r--build/integration/dav_features/webdav-related.feature10
2 files changed, 20 insertions, 0 deletions
diff --git a/build/integration/dav_features/dav-v2.feature b/build/integration/dav_features/dav-v2.feature
index 02d90242a05..2c74030c462 100644
--- a/build/integration/dav_features/dav-v2.feature
+++ b/build/integration/dav_features/dav-v2.feature
@@ -12,6 +12,16 @@ Feature: dav-v2
When User "user0" moves file "/textfile0.txt" to "/FOLDER/textfile0.txt"
Then the HTTP status code should be "201"
+ Scenario: Moving and overwriting it's parent
+ Given using new dav path
+ And As an "admin"
+ And user "user0" exists
+ And As an "user0"
+ And user "user0" created a folder "/test"
+ And user "user0" created a folder "/test/test"
+ When User "user0" moves file "/test/test" to "/test"
+ Then the HTTP status code should be "403"
+
Scenario: download a file with range using new endpoint
Given using new dav path
And As an "admin"
diff --git a/build/integration/dav_features/webdav-related.feature b/build/integration/dav_features/webdav-related.feature
index fdf633bd580..f97cc8f6f71 100644
--- a/build/integration/dav_features/webdav-related.feature
+++ b/build/integration/dav_features/webdav-related.feature
@@ -38,6 +38,16 @@ Feature: webdav-related
Then the HTTP status code should be "204"
And Downloaded content when downloading file "/textfile0.txt" with range "bytes=0-6" should be "Welcome"
+ Scenario: Moving and overwriting it's parent
+ Given using old dav path
+ And As an "admin"
+ And user "user0" exists
+ And As an "user0"
+ And user "user0" created a folder "/test"
+ And user "user0" created a folder "/test/test"
+ When User "user0" moves file "/test/test" to "/test"
+ Then the HTTP status code should be "403"
+
Scenario: Moving a file to a folder with no permissions
Given using old dav path
And As an "admin"