diff options
| author | Thomas Müller <thomas.mueller@tmit.eu> | 2013-10-08 06:18:29 -0700 |
|---|---|---|
| committer | Thomas Müller <thomas.mueller@tmit.eu> | 2013-10-08 06:18:29 -0700 |
| commit | e7e53363acd07f386a172a136ef564a6b501096b (patch) | |
| tree | 0beda878412b00f0c7278646315f39e5b0a99d90 /lib | |
| parent | f49de3437322283ca9e19e301627e9af9421c4c9 (diff) | |
| parent | c77f74e1defddaa277f85bc9b6242371a13fda42 (diff) | |
| download | nextcloud-server-e7e53363acd07f386a172a136ef564a6b501096b.tar.gz nextcloud-server-e7e53363acd07f386a172a136ef564a6b501096b.zip | |
Merge pull request #5194 from owncloud/fixing-5172-master
adding check isDeletable() on $sourcePath
Diffstat (limited to 'lib')
| -rw-r--r-- | lib/private/connector/sabre/objecttree.php | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/lib/private/connector/sabre/objecttree.php b/lib/private/connector/sabre/objecttree.php index 80c3840b99d..df8902f66e2 100644 --- a/lib/private/connector/sabre/objecttree.php +++ b/lib/private/connector/sabre/objecttree.php @@ -87,6 +87,9 @@ class ObjectTree extends \Sabre_DAV_ObjectTree { if (!$fs->isUpdatable($destinationDir)) { throw new \Sabre_DAV_Exception_Forbidden(); } + if (!$fs->isDeletable($sourcePath)) { + throw new \Sabre_DAV_Exception_Forbidden(); + } } $renameOkay = $fs->rename($sourcePath, $destinationPath); |