summaryrefslogtreecommitdiffstats
path: root/lib/private/Contacts
diff options
context:
space:
mode:
authorJulius Härtl <jus@bitgrid.net>2020-02-18 19:44:49 +0100
committerJulius Härtl <jus@bitgrid.net>2020-03-20 10:43:56 +0100
commit49e7576ae0e7403cb266a3f78ef4f0208483eb07 (patch)
tree87acd38bade5f845d90f0fb2a5301bf6718d0a6f /lib/private/Contacts
parentc97ab39acb73941d19f911583b31587cf7b65de2 (diff)
downloadnextcloud-server-49e7576ae0e7403cb266a3f78ef4f0208483eb07.tar.gz
nextcloud-server-49e7576ae0e7403cb266a3f78ef4f0208483eb07.zip
Limit enumeration in contacts store
Signed-off-by: Julius Härtl <jus@bitgrid.net>
Diffstat (limited to 'lib/private/Contacts')
-rw-r--r--lib/private/Contacts/ContactsMenu/ContactsStore.php3
1 files changed, 2 insertions, 1 deletions
diff --git a/lib/private/Contacts/ContactsMenu/ContactsStore.php b/lib/private/Contacts/ContactsMenu/ContactsStore.php
index b6e401cbe71..9efa42b9a4d 100644
--- a/lib/private/Contacts/ContactsMenu/ContactsStore.php
+++ b/lib/private/Contacts/ContactsMenu/ContactsStore.php
@@ -107,12 +107,13 @@ class ContactsStore implements IContactsStore {
array $entries,
$filter) {
$disallowEnumeration = $this->config->getAppValue('core', 'shareapi_allow_share_dialog_user_enumeration', 'yes') !== 'yes';
+ $restrictEnumeration = $this->config->getAppValue('core', 'shareapi_restrict_user_enumeration_to_group', 'yes') === 'yes';
$excludedGroups = $this->config->getAppValue('core', 'shareapi_exclude_groups', 'no') === 'yes';
// whether to filter out local users
$skipLocal = false;
// whether to filter out all users which doesn't have the same group as the current user
- $ownGroupsOnly = $this->config->getAppValue('core', 'shareapi_only_share_with_group_members', 'no') === 'yes';
+ $ownGroupsOnly = $this->config->getAppValue('core', 'shareapi_only_share_with_group_members', 'no') === 'yes' || $restrictEnumeration;
$selfGroups = $this->groupManager->getUserGroupIds($self);