Remove files field from sharing response if user does not have permission to see files

This commit is contained in:
Marcos Zuriaga 2016-10-03 15:01:30 +02:00
parent 68cf16c10b
commit 4844aa1ce0
No known key found for this signature in database
GPG key ID: 7D15585354D072FF

View file

@ -103,6 +103,8 @@ class ShareService {
$tmp = $entry->jsonSerialize();
$tmp['credential_data'] = $this->credential->getCredentialById($entry->getItemId())->jsonSerialize();
if (!$entry->hasPermission(SharingACL::FILES)) unset($tmp['credential_data']['files']);
unset($tmp['credential_data']['shared_key']);
$return[] = $tmp;
}