diff options
author | Maxence Lange <maxence@artificial-owl.com> | 2024-03-20 00:30:00 -0100 |
---|---|---|
committer | backportbot[bot] <backportbot[bot]@users.noreply.github.com> | 2024-03-20 11:13:14 +0000 |
commit | 0fdd3d19a6979e98520aa1978e946db508a8dc76 (patch) | |
tree | 3bfbc3fe94afd0925494b9dcb322eb5ceb33af92 /lib | |
parent | b5938db846d1a4b5df55c91c06a008972b152092 (diff) | |
download | nextcloud-server-0fdd3d19a6979e98520aa1978e946db508a8dc76.tar.gz nextcloud-server-0fdd3d19a6979e98520aa1978e946db508a8dc76.zip |
fix(share): use share owner to confirm reshare
Signed-off-by: Maxence Lange <maxence@artificial-owl.com>
Diffstat (limited to 'lib')
-rw-r--r-- | lib/private/Share20/Manager.php | 12 |
1 files changed, 9 insertions, 3 deletions
diff --git a/lib/private/Share20/Manager.php b/lib/private/Share20/Manager.php index acb104a1ca7..62dfeafe26a 100644 --- a/lib/private/Share20/Manager.php +++ b/lib/private/Share20/Manager.php @@ -212,7 +212,7 @@ class Manager implements IManager { * * @suppress PhanUndeclaredClassMethod */ - protected function generalCreateChecks(IShare $share) { + protected function generalCreateChecks(IShare $share, bool $isUpdate = false) { if ($share->getShareType() === IShare::TYPE_USER) { // We expect a valid user as sharedWith for user shares if (!$this->userManager->userExists($share->getSharedWith())) { @@ -298,8 +298,14 @@ class Manager implements IManager { $isFederatedShare = $share->getNode()->getStorage()->instanceOfStorage('\OCA\Files_Sharing\External\Storage'); $permissions = 0; + + $isReshare = $share->getNode()->getOwner() && $share->getNode()->getOwner()->getUID() !== $share->getSharedBy(); + if (!$isReshare && $isUpdate) { + // in case of update on owner-less filesystem, we use share owner to improve reshare detection + $isReshare = $share->getShareOwner() !== $share->getSharedBy(); + } - if (!$isFederatedShare && $share->getNode()->getOwner() && $share->getNode()->getOwner()->getUID() !== $share->getSharedBy()) { + if (!$isFederatedShare && $isReshare) { $userMounts = array_filter($userFolder->getById($share->getNode()->getId()), function ($mount) { // We need to filter since there might be other mountpoints that contain the file // e.g. if the user has access to the same external storage that the file is originating from @@ -997,7 +1003,7 @@ class Manager implements IManager { throw new \InvalidArgumentException('Cannot share with the share owner'); } - $this->generalCreateChecks($share); + $this->generalCreateChecks($share, true); if ($share->getShareType() === IShare::TYPE_USER) { $this->userCreateChecks($share); |