diff options
| author | John Molakvoæ <skjnldsv@protonmail.com> | 2023-09-01 13:53:41 +0200 |
|---|---|---|
| committer | John Molakvoæ <skjnldsv@protonmail.com> | 2023-09-01 13:53:41 +0200 |
| commit | 750a9f2c4a966471aa3e305502f8c81c7ca73a6d (patch) | |
| tree | 6d799a95b373f8da9b8cb382c2b50294e5a902c5 /lib | |
| parent | 4711c775b8267f831a4674718228927bca8fc6e4 (diff) | |
| download | nextcloud-server-750a9f2c4a966471aa3e305502f8c81c7ca73a6d.tar.gz nextcloud-server-750a9f2c4a966471aa3e305502f8c81c7ca73a6d.zip | |
fix: prevent sharing permissions on user root folder
Signed-off-by: John Molakvoæ <skjnldsv@protonmail.com>
Diffstat (limited to 'lib')
| -rw-r--r-- | lib/private/Files/Node/LazyUserFolder.php | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/lib/private/Files/Node/LazyUserFolder.php b/lib/private/Files/Node/LazyUserFolder.php index 8fbdec4b49d..7093f5ebd8f 100644 --- a/lib/private/Files/Node/LazyUserFolder.php +++ b/lib/private/Files/Node/LazyUserFolder.php @@ -63,7 +63,8 @@ class LazyUserFolder extends LazyFolder { } }, [ 'path' => $this->path, - 'permissions' => Constants::PERMISSION_ALL, + // Sharing user root folder is not allowed + 'permissions' => Constants::PERMISSION_ALL ^ Constants::PERMISSION_SHARE, 'type' => FileInfo::TYPE_FOLDER, 'mimetype' => FileInfo::MIMETYPE_FOLDER, ]); |