diff options
| author | Thomas Müller <thomas.mueller@tmit.eu> | 2013-10-08 11:43:44 +0200 |
|---|---|---|
| committer | Thomas Müller <thomas.mueller@tmit.eu> | 2013-10-08 11:43:44 +0200 |
| commit | c77f74e1defddaa277f85bc9b6242371a13fda42 (patch) | |
| tree | fcb950bc8805f2c49ce483b91e5969f441e8b14a /lib | |
| parent | 2123ef57d830abe24684b54f9819b75ab780834e (diff) | |
| download | nextcloud-server-c77f74e1defddaa277f85bc9b6242371a13fda42.tar.gz nextcloud-server-c77f74e1defddaa277f85bc9b6242371a13fda42.zip | |
adding check isDeletable() on $sourcePath
Diffstat (limited to 'lib')
| -rw-r--r-- | lib/private/connector/sabre/objecttree.php | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/lib/private/connector/sabre/objecttree.php b/lib/private/connector/sabre/objecttree.php index 80c3840b99d..df8902f66e2 100644 --- a/lib/private/connector/sabre/objecttree.php +++ b/lib/private/connector/sabre/objecttree.php @@ -87,6 +87,9 @@ class ObjectTree extends \Sabre_DAV_ObjectTree { if (!$fs->isUpdatable($destinationDir)) { throw new \Sabre_DAV_Exception_Forbidden(); } + if (!$fs->isDeletable($sourcePath)) { + throw new \Sabre_DAV_Exception_Forbidden(); + } } $renameOkay = $fs->rename($sourcePath, $destinationPath); |