aboutsummaryrefslogtreecommitdiffstats
path: root/lib/private/Share
diff options
context:
space:
mode:
Diffstat (limited to 'lib/private/Share')
-rw-r--r--lib/private/Share/Constants.php79
-rw-r--r--lib/private/Share/Helper.php35
-rw-r--r--lib/private/Share/Share.php832
3 files changed, 34 insertions, 912 deletions
diff --git a/lib/private/Share/Constants.php b/lib/private/Share/Constants.php
index 03c4c2ba828..c55caee6f0a 100644
--- a/lib/private/Share/Constants.php
+++ b/lib/private/Share/Constants.php
@@ -1,86 +1,23 @@
<?php
+
/**
- * @copyright Copyright (c) 2016, ownCloud, Inc.
- *
- * @author Björn Schießle <bjoern@schiessle.org>
- * @author Christopher Schäpers <kondou@ts.unde.re>
- * @author Christoph Wurst <christoph@winzerhof-wurst.at>
- * @author Daniel Calviño Sánchez <danxuliu@gmail.com>
- * @author Joas Schilling <coding@schilljs.com>
- * @author Julius Härtl <jus@bitgrid.net>
- *
- * @license AGPL-3.0
- *
- * This code is free software: you can redistribute it and/or modify
- * it under the terms of the GNU Affero General Public License, version 3,
- * as published by the Free Software Foundation.
- *
- * This program is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- * GNU Affero General Public License for more details.
- *
- * You should have received a copy of the GNU Affero General Public License, version 3,
- * along with this program. If not, see <http://www.gnu.org/licenses/>
- *
+ * SPDX-FileCopyrightText: 2016-2024 Nextcloud GmbH and Nextcloud contributors
+ * SPDX-FileCopyrightText: 2016 ownCloud, Inc.
+ * SPDX-License-Identifier: AGPL-3.0-only
*/
namespace OC\Share;
-use OCP\Share\IShare;
-
class Constants {
- /**
- * @deprecated 17.0.0 - use IShare::TYPE_USER instead
- */
- public const SHARE_TYPE_USER = 0;
- /**
- * @deprecated 17.0.0 - use IShare::TYPE_GROUP instead
- */
- public const SHARE_TYPE_GROUP = 1;
- // const SHARE_TYPE_USERGROUP = 2; // Internal type used by DefaultShareProvider
- /**
- * @deprecated 17.0.0 - use IShare::TYPE_LINK instead
- */
- public const SHARE_TYPE_LINK = 3;
- /**
- * @deprecated 17.0.0 - use IShare::TYPE_EMAIL instead
- */
- public const SHARE_TYPE_EMAIL = 4;
- public const SHARE_TYPE_CONTACT = 5; // ToDo Check if it is still in use otherwise remove it
- /**
- * @deprecated 17.0.0 - use IShare::TYPE_REMOTE instead
- */
- public const SHARE_TYPE_REMOTE = 6;
- /**
- * @deprecated 17.0.0 - use IShare::TYPE_CIRCLE instead
- */
- public const SHARE_TYPE_CIRCLE = 7;
- /**
- * @deprecated 17.0.0 - use IShare::TYPE_GUEST instead
- */
- public const SHARE_TYPE_GUEST = 8;
- /**
- * @deprecated 17.0.0 - use IShare::REMOTE_GROUP instead
- */
- public const SHARE_TYPE_REMOTE_GROUP = 9;
- /**
- * @deprecated 17.0.0 - use IShare::TYPE_ROOM instead
- */
- public const SHARE_TYPE_ROOM = 10;
- // const SHARE_TYPE_USERROOM = 11; // Internal type used by RoomShareProvider
- /**
- * @deprecated 21.0.0 - use IShare::TYPE_DECK instead
- */
- public const SHARE_TYPE_DECK = 12;
- // const SHARE_TYPE_DECK_USER = 13; // Internal type used by DeckShareProvider
-
public const FORMAT_NONE = -1;
public const FORMAT_STATUSES = -2;
public const FORMAT_SOURCES = -3; // ToDo Check if it is still in use otherwise remove it
public const RESPONSE_FORMAT = 'json'; // default response format for ocs calls
- public const TOKEN_LENGTH = 15; // old (oc7) length is 32, keep token length in db at least that for compatibility
+ public const MIN_TOKEN_LENGTH = 6; // 19,770,609,664 different possible variations
+ public const DEFAULT_TOKEN_LENGTH = 15; // 54,960,434,128,018,667,122,720,768 different possible variations
+ public const MAX_TOKEN_LENGTH = 32; // 8,167,835,760,036,914,488,254,418,108,462,708,901,695,678,621,570,564,096 different possible variations
+ public const TOKEN_LENGTH = self::DEFAULT_TOKEN_LENGTH; // old (oc7) length is 32, keep token length in db at least that for compatibility
protected static $shareTypeUserAndGroups = -1;
protected static $shareTypeGroupUserUnique = 2;
diff --git a/lib/private/Share/Helper.php b/lib/private/Share/Helper.php
index f1b9ae2b9fa..d53f9d6ed94 100644
--- a/lib/private/Share/Helper.php
+++ b/lib/private/Share/Helper.php
@@ -1,27 +1,9 @@
<?php
+
/**
- * @copyright Copyright (c) 2016, ownCloud, Inc.
- *
- * @author Björn Schießle <bjoern@schiessle.org>
- * @author Christoph Wurst <christoph@winzerhof-wurst.at>
- * @author Joas Schilling <coding@schilljs.com>
- * @author Miguel Prokop <miguel.prokop@vtu.com>
- * @author Morris Jobke <hey@morrisjobke.de>
- *
- * @license AGPL-3.0
- *
- * This code is free software: you can redistribute it and/or modify
- * it under the terms of the GNU Affero General Public License, version 3,
- * as published by the Free Software Foundation.
- *
- * This program is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- * GNU Affero General Public License for more details.
- *
- * You should have received a copy of the GNU Affero General Public License, version 3,
- * along with this program. If not, see <http://www.gnu.org/licenses/>
- *
+ * SPDX-FileCopyrightText: 2016-2024 Nextcloud GmbH and Nextcloud contributors
+ * SPDX-FileCopyrightText: 2016 ownCloud, Inc.
+ * SPDX-License-Identifier: AGPL-3.0-only
*/
namespace OC\Share;
@@ -144,4 +126,13 @@ class Helper extends \OC\Share\Constants {
return false;
}
+
+ public static function getTokenLength(): int {
+ $config = \OCP\Server::get(\OCP\IAppConfig::class);
+ $tokenLength = $config->getValueInt('core', 'shareapi_token_length', self::DEFAULT_TOKEN_LENGTH);
+ $tokenLength = $tokenLength ?: self::DEFAULT_TOKEN_LENGTH;
+
+ // Token length should be within the defined min and max limits
+ return max(self::MIN_TOKEN_LENGTH, min($tokenLength, self::MAX_TOKEN_LENGTH));
+ }
}
diff --git a/lib/private/Share/Share.php b/lib/private/Share/Share.php
index 487625affc1..1121d71e45f 100644
--- a/lib/private/Share/Share.php
+++ b/lib/private/Share/Share.php
@@ -1,45 +1,13 @@
<?php
+
/**
- * @copyright Copyright (c) 2016, ownCloud, Inc.
- *
- * @author Arthur Schiwon <blizzz@arthur-schiwon.de>
- * @author Bart Visscher <bartv@thisnet.nl>
- * @author Bernhard Reiter <ockham@raz.or.at>
- * @author Björn Schießle <bjoern@schiessle.org>
- * @author Christoph Wurst <christoph@winzerhof-wurst.at>
- * @author Joas Schilling <coding@schilljs.com>
- * @author Morris Jobke <hey@morrisjobke.de>
- * @author Robin Appelman <robin@icewind.nl>
- * @author Robin McCorkell <robin@mccorkell.me.uk>
- * @author Roeland Jago Douma <roeland@famdouma.nl>
- * @author Sebastian Döll <sebastian.doell@libasys.de>
- * @author Thomas Müller <thomas.mueller@tmit.eu>
- * @author Vincent Petry <vincent@nextcloud.com>
- * @author Volkan Gezer <volkangezer@gmail.com>
- *
- * @license AGPL-3.0
- *
- * This code is free software: you can redistribute it and/or modify
- * it under the terms of the GNU Affero General Public License, version 3,
- * as published by the Free Software Foundation.
- *
- * This program is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- * GNU Affero General Public License for more details.
- *
- * You should have received a copy of the GNU Affero General Public License, version 3,
- * along with this program. If not, see <http://www.gnu.org/licenses/>
- *
+ * SPDX-FileCopyrightText: 2016-2024 Nextcloud GmbH and Nextcloud contributors
+ * SPDX-FileCopyrightText: 2016 ownCloud, Inc.
+ * SPDX-License-Identifier: AGPL-3.0-only
*/
-
namespace OC\Share;
use OCA\Files_Sharing\ShareBackend\File;
-use OCP\DB\Exception;
-use OCP\DB\QueryBuilder\IQueryBuilder;
-use OCP\IDBConnection;
-use OCP\Share\IShare;
use Psr\Log\LoggerInterface;
/**
@@ -63,7 +31,7 @@ class Share extends Constants {
* Apps are required to handle permissions on their own, this class only
* stores and manages the permissions of shares
*
- * @see lib/public/constants.php
+ * @see lib/public/Constants.php
*/
/**
@@ -86,169 +54,14 @@ class Share extends Constants {
return true;
}
\OC::$server->get(LoggerInterface::class)->warning(
- 'Sharing backend '.$class.' not registered, '.self::$backendTypes[$itemType]['class']
- .' is already registered for '.$itemType,
+ 'Sharing backend ' . $class . ' not registered, ' . self::$backendTypes[$itemType]['class']
+ . ' is already registered for ' . $itemType,
['app' => 'files_sharing']);
}
return false;
}
/**
- * Get the items of item type shared with the current user
- *
- * @param string $itemType
- * @param int $format (optional) Format type must be defined by the backend
- * @param mixed $parameters (optional)
- * @param int $limit Number of items to return (optional) Returns all by default
- * @param boolean $includeCollections (optional)
- * @return mixed Return depends on format
- * @deprecated TESTS ONLY - this methods is only used by tests
- * called like this:
- * \OC\Share\Share::getItemsSharedWith('folder'); (apps/files_sharing/tests/UpdaterTest.php)
- */
- public static function getItemsSharedWith() {
- return self::getItems('folder', null, self::$shareTypeUserAndGroups, \OC_User::getUser());
- }
-
- /**
- * Get the items of item type shared with a user
- *
- * @param string $itemType
- * @param string $user id for which user we want the shares
- * @param int $format (optional) Format type must be defined by the backend
- * @param mixed $parameters (optional)
- * @param int $limit Number of items to return (optional) Returns all by default
- * @param boolean $includeCollections (optional)
- * @return mixed Return depends on format
- * @deprecated TESTS ONLY - this methods is only used by tests
- * called like this:
- * \OC\Share\Share::getItemsSharedWithUser('test', $shareWith); (tests/lib/Share/Backend.php)
- */
- public static function getItemsSharedWithUser($itemType, $user) {
- return self::getItems('test', null, self::$shareTypeUserAndGroups, $user);
- }
-
- /**
- * Get the item of item type shared with a given user by source
- *
- * @param string $itemType
- * @param string $itemSource
- * @param ?string $user User to whom the item was shared
- * @param ?string $owner Owner of the share
- * @param ?int $shareType only look for a specific share type
- * @return array Return list of items with file_target, permissions and expiration
- * @throws Exception
- */
- public static function getItemSharedWithUser(string $itemType, string $itemSource, ?string $user = null, ?string $owner = null, ?int $shareType = null) {
- $shares = [];
- $fileDependent = $itemType === 'file' || $itemType === 'folder';
- $qb = self::getSelectStatement(self::FORMAT_NONE, $fileDependent);
- $qb->from('share', 's');
- if ($fileDependent) {
- $qb->innerJoin('s', 'filecache', 'f', $qb->expr()->eq('file_source', 'f.fileid'));
- $qb->innerJoin('s', 'storages', 'st', $qb->expr()->eq('numeric_id', 'f.storage'));
- $column = 'file_source';
- } else {
- $column = 'item_source';
- }
-
- $qb->where($qb->expr()->eq($column, $qb->createNamedParameter($itemSource)))
- ->andWhere($qb->expr()->eq('item_type', $qb->createNamedParameter($itemType)));
-
- // for link shares $user === null
- if ($user !== null) {
- $qb->andWhere($qb->expr()->eq('share_with', $qb->createNamedParameter($user)));
- }
-
- if ($shareType !== null) {
- $qb->andWhere($qb->expr()->eq('share_type', $qb->createNamedParameter($shareType, IQueryBuilder::PARAM_INT)));
- }
-
- if ($owner !== null) {
- $qb->andWhere($qb->expr()->eq('uid_owner', $qb->createNamedParameter($owner)));
- }
-
- $result = $qb->executeQuery();
- while ($row = $result->fetch()) {
- if ($fileDependent && !self::isFileReachable($row['path'], $row['storage_id'])) {
- continue;
- }
- if ($fileDependent && (int)$row['file_parent'] === -1) {
- // if it is a mount point we need to get the path from the mount manager
- $mountManager = \OC\Files\Filesystem::getMountManager();
- $mountPoint = $mountManager->findByStorageId($row['storage_id']);
- if (!empty($mountPoint)) {
- $path = $mountPoint[0]->getMountPoint();
- $path = trim($path, '/');
- $path = substr($path, strlen($owner) + 1); //normalize path to 'files/foo.txt`
- $row['path'] = $path;
- } else {
- \OC::$server->get(LoggerInterface::class)->warning(
- 'Could not resolve mount point for ' . $row['storage_id'],
- ['app' => 'OCP\Share']
- );
- }
- }
- $shares[] = $row;
- }
- $result->closeCursor();
-
- // if we didn't found a result then let's look for a group share.
- if (empty($shares) && $user !== null) {
- $userObject = \OC::$server->getUserManager()->get($user);
- $groups = [];
- if ($userObject) {
- $groups = \OC::$server->getGroupManager()->getUserGroupIds($userObject);
- }
-
- if (!empty($groups)) {
- $qb = self::getSelectStatement(self::FORMAT_NONE, $fileDependent);
- $qb->from('share', 's');
-
- if ($fileDependent) {
- $qb->innerJoin('s', 'filecache', 'f', $qb->expr()->eq('file_source', 'f.fileid'))
- ->innerJoin('s', 'storages', 'st', $qb->expr()->eq('numeric_id', 'f.storage'));
- }
-
- $qb->where($qb->expr()->eq($column, $qb->createNamedParameter($itemSource)))
- ->andWhere($qb->expr()->eq('item_type', $qb->createNamedParameter($itemType, IQueryBuilder::PARAM_STR)))
- ->andWhere($qb->expr()->in('share_with', $qb->createNamedParameter($groups, IQueryBuilder::PARAM_STR_ARRAY)));
-
- if ($owner !== null) {
- $qb->andWhere($qb->expr()->eq('uid_owner', $qb->createNamedParameter($owner)));
- }
- $result = $qb->executeQuery();
-
- while ($row = $result->fetch()) {
- $shares[] = $row;
- }
- $result->closeCursor();
- }
- }
-
- return $shares;
- }
-
- /**
- * Get the shared item of item type owned by the current user
- *
- * @param string $itemType
- * @param string $itemSource
- * @param int $format (optional) Format type must be defined by the backend
- * @param mixed $parameters
- * @param boolean $includeCollections
- * @return mixed Return depends on format
- *
- * Refactoring notes:
- * * defacto $parameters and $format is always the default and therefore is removed in the subsequent call
- */
- public static function getItemShared($itemType, $itemSource, $format = self::FORMAT_NONE,
- $parameters = null, $includeCollections = false) {
- return self::getItems($itemType, $itemSource, null, null, \OC_User::getUser(), self::FORMAT_NONE,
- null, -1, $includeCollections);
- }
-
- /**
* Get the backend class for the specified item type
*
* @param string $itemType
@@ -256,8 +69,8 @@ class Share extends Constants {
* @throws \Exception
*/
public static function getBackend($itemType) {
- $l = \OC::$server->getL10N('lib');
- $logger = \OC::$server->get(LoggerInterface::class);
+ $l = \OCP\Util::getL10N('lib');
+ $logger = \OCP\Server::get(LoggerInterface::class);
if (isset(self::$backends[$itemType])) {
return self::$backends[$itemType];
} elseif (isset(self::$backendTypes[$itemType]['class'])) {
@@ -303,421 +116,6 @@ class Share extends Constants {
}
/**
- * Get a list of collection item types for the specified item type
- *
- * @param string $itemType
- * @return array|false
- */
- private static function getCollectionItemTypes(string $itemType) {
- $collectionTypes = [$itemType];
- foreach (self::$backendTypes as $type => $backend) {
- if (in_array($backend['collectionOf'], $collectionTypes)) {
- $collectionTypes[] = $type;
- }
- }
- // TODO Add option for collections to be collection of themselves, only 'folder' does it now...
- if (isset(self::$backendTypes[$itemType]) && (!self::getBackend($itemType) instanceof \OCP\Share_Backend_Collection || $itemType != 'folder')) {
- unset($collectionTypes[0]);
- }
- // Return array if collections were found or the item type is a
- // collection itself - collections can be inside collections
- if (count($collectionTypes) > 0) {
- return $collectionTypes;
- }
- return false;
- }
-
- /**
- * Get shared items from the database
- *
- * @param string $itemType
- * @param string $item Item source or target (optional)
- * @param int $shareType SHARE_TYPE_USER, SHARE_TYPE_GROUP, SHARE_TYPE_LINK, $shareTypeUserAndGroups, or $shareTypeGroupUserUnique
- * @param string $shareWith User or group the item is being shared with
- * @param string $uidOwner User that is the owner of shared items (optional)
- * @param int $format Format to convert items to with formatItems() (optional)
- * @param mixed $parameters to pass to formatItems() (optional)
- * @param int $limit Number of items to return, -1 to return all matches (optional)
- * @param boolean $includeCollections Include collection item types (optional)
- * @param boolean $itemShareWithBySource (optional)
- * @param boolean $checkExpireDate
- * @return array
- *
- * See public functions getItem(s)... for parameter usage
- *
- * Refactoring notes:
- * * defacto $limit, $itemsShareWithBySource, $checkExpireDate, $parameters and $format is always the default and therefore is removed in the subsequent call
- */
- public static function getItems($itemType, ?string $item = null, ?int $shareType = null, $shareWith = null,
- $uidOwner = null, $format = self::FORMAT_NONE, $parameters = null, $limit = -1,
- $includeCollections = false, $itemShareWithBySource = false, $checkExpireDate = true) {
- if (\OC::$server->getConfig()->getAppValue('core', 'shareapi_enabled', 'yes') != 'yes') {
- return [];
- }
- $fileDependent = $itemType == 'file' || $itemType == 'folder';
- $qb = self::getSelectStatement(self::FORMAT_NONE, $fileDependent, $uidOwner);
- $qb->from('share', 's');
-
- $backend = self::getBackend($itemType);
- $collectionTypes = false;
- // Get filesystem root to add it to the file target and remove from the
- // file source, match file_source with the file cache
- if ($fileDependent) {
- if (!is_null($uidOwner)) {
- $root = \OC\Files\Filesystem::getRoot();
- } else {
- $root = '';
- }
- if (isset($item)) {
- $qb->innerJoin('s', 'filecache', 'f', $qb->expr()->eq('file_source', 'f.fileid'));
- } else {
- $qb->innerJoin('s', 'filecache', 'f', $qb->expr()->andX(
- $qb->expr()->eq('file_source', 'f.fileid'),
- $qb->expr()->isNotNull('file_target')
- ));
- }
- $qb->innerJoin('s', 'storages', 'st', $qb->expr()->eq('numeric_id', 'f.storage'));
- } else {
- $root = '';
- $collectionTypes = self::getCollectionItemTypes($itemType);
- if ($includeCollections && !isset($item) && $collectionTypes) {
- // If includeCollections is true, find collections of this item type, e.g. a music album contains songs
- if (!in_array($itemType, $collectionTypes)) {
- $itemTypes = array_merge([$itemType], $collectionTypes);
- } else {
- $itemTypes = $collectionTypes;
- }
- $qb->where($qb->expr()->in('item_type', $qb->createNamedParameter($itemTypes, IQueryBuilder::PARAM_STR_ARRAY)));
- } else {
- $qb->where($qb->expr()->eq('item_type', $qb->createNamedParameter($itemType)));
- }
- }
- if (\OC::$server->getConfig()->getAppValue('core', 'shareapi_allow_links', 'yes') !== 'yes') {
- $qb->andWhere($qb->expr()->neq('share_type', $qb->createNamedParameter(IShare::TYPE_LINK, IQueryBuilder::PARAM_INT)));
- }
- if (isset($shareType)) {
- // Include all user and group items
- if ($shareType === self::$shareTypeUserAndGroups && isset($shareWith)) {
- $qb->andWhere($qb->expr()->andX(
- $qb->expr()->in('share_type', $qb->createNamedParameter([IShare::TYPE_USER, self::$shareTypeGroupUserUnique], IQueryBuilder::PARAM_INT_ARRAY)),
- $qb->expr()->eq('share_with', $qb->createNamedParameter($shareWith))
- ));
-
- $user = \OC::$server->getUserManager()->get($shareWith);
- $groups = [];
- if ($user) {
- $groups = \OC::$server->getGroupManager()->getUserGroupIds($user);
- }
- if (!empty($groups)) {
- $qb->orWhere($qb->expr()->andX(
- $qb->expr()->eq('share_type', $qb->createNamedParameter(IShare::TYPE_GROUP, IQueryBuilder::PARAM_INT)),
- $qb->expr()->in('share_with', $qb->createNamedParameter($groups, IQueryBuilder::PARAM_STR_ARRAY))
- ));
- }
-
- // Don't include own group shares
- $qb->andWhere($qb->expr()->neq('uid_owner', $qb->createNamedParameter($shareWith)));
- } else {
- $qb->andWhere($qb->expr()->eq('share_type', $qb->createNamedParameter($shareType, IQueryBuilder::PARAM_INT)));
- if (isset($shareWith)) {
- $qb->andWhere($qb->expr()->eq('share_with', $qb->createNamedParameter($shareWith, IQueryBuilder::PARAM_STR)));
- }
- }
- }
- if (isset($uidOwner)) {
- $qb->andWhere($qb->expr()->eq('uid_owner', $qb->createNamedParameter($uidOwner)));
- if (!isset($shareType)) {
- // Prevent unique user targets for group shares from being selected
- $qb->andWhere($qb->expr()->neq('share_type', $qb->createNamedParameter(self::$shareTypeGroupUserUnique, IQueryBuilder::PARAM_INT)));
- }
- if ($fileDependent) {
- $column = 'file_source';
- } else {
- $column = 'item_source';
- }
- } else {
- if ($fileDependent) {
- $column = 'file_target';
- } else {
- $column = 'item_target';
- }
- }
- if (isset($item)) {
- $collectionTypes = self::getCollectionItemTypes($itemType);
- // If looking for own shared items, check item_source else check item_target
- if (isset($uidOwner)) {
- // If item type is a file, file source needs to be checked in case the item was converted
- if ($fileDependent) {
- $expr = $qb->expr()->eq('file_source', $qb->createNamedParameter($item));
- $column = 'file_source';
- } else {
- $expr = $qb->expr()->eq('item_source', $qb->createNamedParameter($item));
- $column = 'item_source';
- }
- } else {
- if ($fileDependent) {
- $item = \OC\Files\Filesystem::normalizePath($item);
- $expr = $qb->expr()->eq('file_target', $qb->createNamedParameter($item));
- } else {
- $expr = $qb->expr()->eq('item_target', $qb->createNamedParameter($item));
- }
- }
- if ($includeCollections && $collectionTypes && !in_array('folder', $collectionTypes)) {
- $qb->andWhere($qb->expr()->orX(
- $expr,
- $qb->expr()->in('item_type', $qb->createNamedParameter($collectionTypes, IQueryBuilder::PARAM_STR_ARRAY))
- ));
- } else {
- $qb->andWhere($expr);
- }
- }
- $qb->orderBy('s.id', 'ASC');
- try {
- $result = $qb->executeQuery();
- } catch (\Exception $e) {
- \OCP\Server::get(LoggerInterface::class)->error(
- 'Error while selecting shares: ' . $qb->getSQL(),
- [
- 'app' => 'files_sharing',
- 'exception' => $e
- ]);
- throw new \RuntimeException('Wrong SQL query', 500, $e);
- }
-
- $root = strlen($root);
- $items = [];
- $targets = [];
- $switchedItems = [];
- $mounts = [];
- while ($row = $result->fetch()) {
- //var_dump($row);
- self::transformDBResults($row);
- // Filter out duplicate group shares for users with unique targets
- if ($fileDependent && !self::isFileReachable($row['path'], $row['storage_id'])) {
- continue;
- }
- if ($row['share_type'] == self::$shareTypeGroupUserUnique && isset($items[$row['parent']])) {
- $row['share_type'] = IShare::TYPE_GROUP;
- $row['unique_name'] = true; // remember that we use a unique name for this user
- $row['share_with'] = $items[$row['parent']]['share_with'];
- // if the group share was unshared from the user we keep the permission, otherwise
- // we take the permission from the parent because this is always the up-to-date
- // permission for the group share
- if ($row['permissions'] > 0) {
- $row['permissions'] = $items[$row['parent']]['permissions'];
- }
- // Remove the parent group share
- unset($items[$row['parent']]);
- if ($row['permissions'] == 0) {
- continue;
- }
- } elseif (!isset($uidOwner)) {
- // Check if the same target already exists
- if (isset($targets[$row['id']])) {
- // Check if the same owner shared with the user twice
- // through a group and user share - this is allowed
- $id = $targets[$row['id']];
- if (isset($items[$id]) && $items[$id]['uid_owner'] == $row['uid_owner']) {
- // Switch to group share type to ensure resharing conditions aren't bypassed
- if ($items[$id]['share_type'] != IShare::TYPE_GROUP) {
- $items[$id]['share_type'] = IShare::TYPE_GROUP;
- $items[$id]['share_with'] = $row['share_with'];
- }
- // Switch ids if sharing permission is granted on only
- // one share to ensure correct parent is used if resharing
- if (~(int)$items[$id]['permissions'] & \OCP\Constants::PERMISSION_SHARE
- && (int)$row['permissions'] & \OCP\Constants::PERMISSION_SHARE) {
- $items[$row['id']] = $items[$id];
- $switchedItems[$id] = $row['id'];
- unset($items[$id]);
- $id = $row['id'];
- }
- $items[$id]['permissions'] |= (int)$row['permissions'];
- }
- continue;
- } elseif (!empty($row['parent'])) {
- $targets[$row['parent']] = $row['id'];
- }
- }
- // Remove root from file source paths if retrieving own shared items
- if (isset($uidOwner) && isset($row['path'])) {
- if (isset($row['parent'])) {
- $query = \OC::$server->getDatabaseConnection()->getQueryBuilder();
- $query->select('file_target')
- ->from('share')
- ->where($query->expr()->eq('id', $query->createNamedParameter($row['parent'])));
-
- $parentRow = false;
- try {
- $parentResult = $query->executeQuery();
- $parentRow = $parentResult->fetchOne();
- $parentResult->closeCursor();
-
- $tmpPath = $parentRow['file_target'];
- // find the right position where the row path continues from the target path
- $pos = strrpos($row['path'], $parentRow['file_target']);
- $subPath = substr($row['path'], $pos);
- $splitPath = explode('/', $subPath);
- foreach (array_slice($splitPath, 2) as $pathPart) {
- $tmpPath = $tmpPath . '/' . $pathPart;
- }
- $row['path'] = $tmpPath;
- } catch (Exception $e) {
- \OCP\Server::get(LoggerInterface::class)
- ->error('Can\'t select parent :' . $e->getMessage() . ' query=' . $query->getSQL(), [
- 'exception' => $e,
- 'app' => 'core'
- ]);
- }
- } else {
- if (!isset($mounts[$row['storage']])) {
- $mountPoints = \OC\Files\Filesystem::getMountByNumericId($row['storage']);
- if (is_array($mountPoints) && !empty($mountPoints)) {
- $mounts[$row['storage']] = current($mountPoints);
- }
- }
- if (!empty($mounts[$row['storage']])) {
- $path = $mounts[$row['storage']]->getMountPoint() . $row['path'];
- $relPath = substr($path, $root); // path relative to data/user
- $row['path'] = rtrim($relPath, '/');
- }
- }
- }
-
- // Check if resharing is allowed, if not remove share permission
- if (isset($row['permissions']) && (!self::isResharingAllowed() | \OCP\Util::isSharingDisabledForUser())) {
- $row['permissions'] &= ~\OCP\Constants::PERMISSION_SHARE;
- }
- // Add display names to result
- $row['share_with_displayname'] = $row['share_with'];
- if (isset($row['share_with']) && $row['share_with'] != '' &&
- $row['share_type'] === IShare::TYPE_USER) {
- $shareWithUser = \OC::$server->getUserManager()->get($row['share_with']);
- $row['share_with_displayname'] = $shareWithUser === null ? $row['share_with'] : $shareWithUser->getDisplayName();
- } elseif (isset($row['share_with']) && $row['share_with'] != '' &&
- $row['share_type'] === IShare::TYPE_REMOTE) {
- $addressBookEntries = \OC::$server->getContactsManager()->search($row['share_with'], ['CLOUD'], [
- 'limit' => 1,
- 'enumeration' => false,
- 'fullmatch' => false,
- 'strict_search' => true,
- ]);
- foreach ($addressBookEntries as $entry) {
- foreach ($entry['CLOUD'] as $cloudID) {
- if ($cloudID === $row['share_with']) {
- $row['share_with_displayname'] = $entry['FN'];
- }
- }
- }
- }
- if (isset($row['uid_owner']) && $row['uid_owner'] != '') {
- $ownerUser = \OC::$server->getUserManager()->get($row['uid_owner']);
- $row['displayname_owner'] = $ownerUser === null ? $row['uid_owner'] : $ownerUser->getDisplayName();
- }
-
- if ($row['permissions'] > 0) {
- $items[$row['id']] = $row;
- }
- }
- $result->closeCursor();
-
- // group items if we are looking for items shared with the current user
- if (isset($shareWith) && $shareWith === \OC_User::getUser()) {
- $items = self::groupItems($items, $itemType);
- }
-
- if (!empty($items)) {
- $collectionItems = [];
- foreach ($items as &$row) {
- // Check if this is a collection of the requested item type
- if ($includeCollections && $collectionTypes && $row['item_type'] !== 'folder' && in_array($row['item_type'], $collectionTypes)) {
- if (($collectionBackend = self::getBackend($row['item_type']))
- && $collectionBackend instanceof \OCP\Share_Backend_Collection) {
- // Collections can be inside collections, check if the item is a collection
- if (isset($item) && $row['item_type'] == $itemType && $row[$column] == $item) {
- $collectionItems[] = $row;
- } else {
- $collection = [];
- $collection['item_type'] = $row['item_type'];
- if ($row['item_type'] == 'file' || $row['item_type'] == 'folder') {
- $collection['path'] = basename($row['path']);
- }
- $row['collection'] = $collection;
- // Fetch all the children sources
- $children = $collectionBackend->getChildren($row[$column]);
- foreach ($children as $child) {
- $childItem = $row;
- $childItem['item_type'] = $itemType;
- if ($row['item_type'] != 'file' && $row['item_type'] != 'folder') {
- $childItem['item_source'] = $child['source'];
- $childItem['item_target'] = $child['target'];
- }
- if ($backend instanceof \OCP\Share_Backend_File_Dependent) {
- if ($row['item_type'] == 'file' || $row['item_type'] == 'folder') {
- $childItem['file_source'] = $child['source'];
- } else { // TODO is this really needed if we already know that we use the file backend?
- $meta = \OC\Files\Filesystem::getFileInfo($child['file_path']);
- $childItem['file_source'] = $meta['fileid'];
- }
- $childItem['file_target'] =
- \OC\Files\Filesystem::normalizePath($child['file_path']);
- }
- if (isset($item)) {
- if ($childItem[$column] == $item) {
- $collectionItems[] = $childItem;
- }
- } else {
- $collectionItems[] = $childItem;
- }
- }
- }
- }
- // Remove collection item
- $toRemove = $row['id'];
- if (array_key_exists($toRemove, $switchedItems)) {
- $toRemove = $switchedItems[$toRemove];
- }
- unset($items[$toRemove]);
- } elseif ($includeCollections && $collectionTypes && in_array($row['item_type'], $collectionTypes)) {
- // FIXME: Thats a dirty hack to improve file sharing performance,
- // see github issue #10588 for more details
- // Need to find a solution which works for all back-ends
- $collectionBackend = self::getBackend($row['item_type']);
- $sharedParents = $collectionBackend->getParents($row['item_source']);
- foreach ($sharedParents as $parent) {
- $collectionItems[] = $parent;
- }
- }
- }
- if (!empty($collectionItems)) {
- $collectionItems = array_unique($collectionItems, SORT_REGULAR);
- $items = array_merge($items, $collectionItems);
- }
-
- // filter out invalid items, these can appear when subshare entries exist
- // for a group in which the requested user isn't a member any more
- $items = array_filter($items, function ($item) {
- return $item['share_type'] !== self::$shareTypeGroupUserUnique;
- });
-
- return self::formatResult($items, $column, $backend);
- } elseif ($includeCollections && $collectionTypes && in_array('folder', $collectionTypes)) {
- // FIXME: Thats a dirty hack to improve file sharing performance,
- // see github issue #10588 for more details
- // Need to find a solution which works for all back-ends
- $collectionItems = [];
- $collectionBackend = self::getBackend('folder');
- $sharedParents = $collectionBackend->getParents($item, $shareWith, $uidOwner);
- foreach ($sharedParents as $parent) {
- $collectionItems[] = $parent;
- }
- return self::formatResult($collectionItems, $column, $backend);
- }
-
- return [];
- }
-
- /**
* group items with link to the same source
*
* @param array $items
@@ -735,8 +133,8 @@ class Share extends Constants {
// for file/folder shares we need to compare file_source, otherwise we compare item_source
// only group shares if they already point to the same target, otherwise the file where shared
// before grouping of shares was added. In this case we don't group them to avoid confusions
- if (($fileSharing && $item['file_source'] === $r['file_source'] && $item['file_target'] === $r['file_target']) ||
- (!$fileSharing && $item['item_source'] === $r['item_source'] && $item['item_target'] === $r['item_target'])) {
+ if (($fileSharing && $item['file_source'] === $r['file_source'] && $item['file_target'] === $r['file_target'])
+ || (!$fileSharing && $item['item_source'] === $r['item_source'] && $item['item_target'] === $r['item_target'])) {
// add the first item to the list of grouped shares
if (!isset($result[$key]['grouped'])) {
$result[$key]['grouped'][] = $result[$key];
@@ -757,194 +155,15 @@ class Share extends Constants {
}
/**
- * Construct select statement
- *
- * @param bool $fileDependent ist it a file/folder share or a general share
- */
- private static function getSelectStatement(int $format, bool $fileDependent, ?string $uidOwner = null): IQueryBuilder {
- /** @var IDBConnection $connection */
- $connection = \OC::$server->get(IDBConnection::class);
- $qb = $connection->getQueryBuilder();
- if ($format == self::FORMAT_STATUSES) {
- if ($fileDependent) {
- return $qb->select(
- 's.id',
- 's.parent',
- 'share_type',
- 'path',
- 'storage',
- 'share_with',
- 'uid_owner',
- 'file_source',
- 'stime',
- 's.permissions',
- 'uid_initiator'
- )->selectAlias('st.id', 'storage_id')
- ->selectAlias('f.parent', 'file_parent');
- }
- return $qb->select('id', 'parent', 'share_type', 'share_with', 'uid_owner', 'item_source', 'stime', 's.permissions');
- }
-
- if (isset($uidOwner)) {
- if ($fileDependent) {
- return $qb->select(
- 's.id',
- 'item_type',
- 'item_source',
- 's.parent',
- 'share_type',
- 'share_with',
- 'file_source',
- 'file_target',
- 'path',
- 's.permissions',
- 'stime',
- 'expiration',
- 'token',
- 'storage',
- 'mail_send',
- 'uid_owner',
- 'uid_initiator'
- )->selectAlias('st.id', 'storage_id')
- ->selectAlias('f.parent', 'file_parent');
- }
- return $qb->select('id', 'item_type', 'item_source', 'parent', 'share_type',
- 'share_with', 'uid_owner', 'file_source', 'stime', 's.permissions',
- 'expiration', 'token', 'mail_send');
- }
-
- if ($fileDependent) {
- if ($format == File::FORMAT_GET_FOLDER_CONTENTS || $format == File::FORMAT_FILE_APP_ROOT) {
- return $qb->select(
- 's.id',
- 'item_type',
- 'item_source',
- 's.parent',
- 'uid_owner',
- 'share_type',
- 'share_with',
- 'file_source',
- 'path',
- 'file_target',
- 's.permissions',
- 'stime',
- 'expiration',
- 'storage',
- 'name',
- 'mtime',
- 'mimepart',
- 'size',
- 'encrypted',
- 'etag',
- 'mail_send'
- )->selectAlias('f.parent', 'file_parent');
- }
- return $qb->select(
- 's.id',
- 'item_type',
- 'item_source',
- 'item_target',
- 's.parent',
- 'share_type',
- 'share_with',
- 'uid_owner',
- 'file_source',
- 'path',
- 'file_target',
- 's.permissions',
- 'stime',
- 'expiration',
- 'token',
- 'storage',
- 'mail_send',
- )->selectAlias('f.parent', 'file_parent')
- ->selectAlias('st.id', 'storage_id');
- }
- return $qb->select('*');
- }
-
-
- /**
- * transform db results
- *
- * @param array $row result
- */
- private static function transformDBResults(&$row) {
- if (isset($row['id'])) {
- $row['id'] = (int)$row['id'];
- }
- if (isset($row['share_type'])) {
- $row['share_type'] = (int)$row['share_type'];
- }
- if (isset($row['parent'])) {
- $row['parent'] = (int)$row['parent'];
- }
- if (isset($row['file_parent'])) {
- $row['file_parent'] = (int)$row['file_parent'];
- }
- if (isset($row['file_source'])) {
- $row['file_source'] = (int)$row['file_source'];
- }
- if (isset($row['permissions'])) {
- $row['permissions'] = (int)$row['permissions'];
- }
- if (isset($row['storage'])) {
- $row['storage'] = (int)$row['storage'];
- }
- if (isset($row['stime'])) {
- $row['stime'] = (int)$row['stime'];
- }
- if (isset($row['expiration']) && $row['share_type'] !== IShare::TYPE_LINK) {
- // discard expiration date for non-link shares, which might have been
- // set by ancient bugs
- $row['expiration'] = null;
- }
- }
-
- /**
- * format result
- *
- * @param array $items result
- * @param string $column is it a file share or a general share ('file_target' or 'item_target')
- * @param \OCP\Share_Backend $backend sharing backend
- * @param int $format
- * @param array $parameters additional format parameters
- * @return array format result
- */
- private static function formatResult($items, $column, $backend, $format = self::FORMAT_NONE, $parameters = null) {
- if ($format === self::FORMAT_NONE) {
- return $items;
- } elseif ($format === self::FORMAT_STATUSES) {
- $statuses = [];
- foreach ($items as $item) {
- if ($item['share_type'] === IShare::TYPE_LINK) {
- if ($item['uid_initiator'] !== \OC::$server->getUserSession()->getUser()->getUID()) {
- continue;
- }
- $statuses[$item[$column]]['link'] = true;
- } elseif (!isset($statuses[$item[$column]])) {
- $statuses[$item[$column]]['link'] = false;
- }
- if (!empty($item['file_target'])) {
- $statuses[$item[$column]]['path'] = $item['path'];
- }
- }
- return $statuses;
- } else {
- return $backend->formatItems($items, $format, $parameters);
- }
- }
-
- /**
* remove protocol from URL
*
* @param string $url
* @return string
*/
public static function removeProtocolFromUrl($url) {
- if (strpos($url, 'https://') === 0) {
+ if (str_starts_with($url, 'https://')) {
return substr($url, strlen('https://'));
- } elseif (strpos($url, 'http://') === 0) {
+ } elseif (str_starts_with($url, 'http://')) {
return substr($url, strlen('http://'));
}
@@ -958,29 +177,4 @@ class Share extends Constants {
public static function getExpireInterval() {
return (int)\OC::$server->getConfig()->getAppValue('core', 'shareapi_expire_after_n_days', '7');
}
-
- /**
- * Checks whether the given path is reachable for the given owner
- *
- * @param string $path path relative to files
- * @param string $ownerStorageId storage id of the owner
- *
- * @return boolean true if file is reachable, false otherwise
- */
- private static function isFileReachable($path, $ownerStorageId) {
- // if outside the home storage, file is always considered reachable
- if (!(substr($ownerStorageId, 0, 6) === 'home::' ||
- substr($ownerStorageId, 0, 13) === 'object::user:'
- )) {
- return true;
- }
-
- // if inside the home storage, the file has to be under "/files/"
- $path = ltrim($path, '/');
- if (substr($path, 0, 6) === 'files/') {
- return true;
- }
-
- return false;
- }
}
generated by cgit v1.2.3 (git 2.39.1) at 2025-08-15 09:11:53 +0000