diff options
author | Roeland Jago Douma <rullzer@owncloud.com> | 2016-02-29 19:12:19 +0100 |
---|---|---|
committer | Roeland Jago Douma <rullzer@owncloud.com> | 2016-02-29 19:30:14 +0100 |
commit | 8924b0a0dca9b23c77d0d5ae915c58705d2dfcaf (patch) | |
tree | f26d4b13ac151c414bc5daf389364c5e60f16e75 /build | |
parent | a38e8b6436ccfe173b4d368d094753c71bdbd69f (diff) | |
download | nextcloud-server-8924b0a0dca9b23c77d0d5ae915c58705d2dfcaf.tar.gz nextcloud-server-8924b0a0dca9b23c77d0d5ae915c58705d2dfcaf.zip |
Check correct permissions when resharing
Fixes #22675
Since we only get a share id we do not know the path for the sharer.
Now if we edit a share we start searching for shares for that user of
that node. And deduce the permissions that way.
* Intergration test added
* Fix unit tests
Diffstat (limited to 'build')
-rw-r--r-- | build/integration/features/sharing-v1.feature | 21 |
1 files changed, 21 insertions, 0 deletions
diff --git a/build/integration/features/sharing-v1.feature b/build/integration/features/sharing-v1.feature index bfd52ec6605..8faffdd2965 100644 --- a/build/integration/features/sharing-v1.feature +++ b/build/integration/features/sharing-v1.feature @@ -526,3 +526,24 @@ Feature: sharing When Updating last share with | permissions | 1 | Then the OCS status code should be "100" + + Scenario: Do not allow reshare to exceed permissions + Given user "user0" exists + And user "user1" exists + And user "user2" exists + And user "user0" created a folder "/TMP" + And As an "user0" + And creating a share with + | path | /TMP | + | shareType | 0 | + | shareWith | user1 | + | permissions | 21 | + And As an "user1" + And creating a share with + | path | /TMP | + | shareType | 0 | + | shareWith | user2 | + | permissions | 21 | + When Updating last share with + | permissions | 31 | + Then the OCS status code should be "404" |