diff options
| author | Robin Appelman <icewind@owncloud.com> | 2014-06-20 14:29:13 +0200 |
|---|---|---|
| committer | Robin Appelman <icewind@owncloud.com> | 2014-06-20 14:29:13 +0200 |
| commit | 80e6d357a2d0e42331208553a2bccb191ce4e41d (patch) | |
| tree | 43ca4a70f46b6448539962806c8e818496f4d97c /lib/private/connector | |
| parent | ca96b9d3d5197da9d2686c8fe8e0cdcc2fbfa800 (diff) | |
| download | nextcloud-server-80e6d357a2d0e42331208553a2bccb191ce4e41d.tar.gz nextcloud-server-80e6d357a2d0e42331208553a2bccb191ce4e41d.zip | |
Fix permissions check when moving a file to a different directory over webdav
Diffstat (limited to 'lib/private/connector')
| -rw-r--r-- | lib/private/connector/sabre/objecttree.php | 5 |
1 files changed, 1 insertions, 4 deletions
diff --git a/lib/private/connector/sabre/objecttree.php b/lib/private/connector/sabre/objecttree.php index f2578e3c097..54596db3c47 100644 --- a/lib/private/connector/sabre/objecttree.php +++ b/lib/private/connector/sabre/objecttree.php @@ -135,10 +135,7 @@ class ObjectTree extends \Sabre\DAV\ObjectTree { throw new \Sabre\DAV\Exception\Forbidden(); } if ($sourceDir !== $destinationDir) { - if (!$this->fileView->isUpdatable($sourceDir)) { - throw new \Sabre\DAV\Exception\Forbidden(); - } - if (!$this->fileView->isUpdatable($destinationDir)) { + if (!$this->fileView->isCreatable($destinationDir)) { throw new \Sabre\DAV\Exception\Forbidden(); } if (!$this->fileView->isDeletable($sourcePath) && !$isMovableMount) { |