nextcloud/passman
1
1
Fork 0
mirror of https://github.com/nextcloud/passman.git synced 2025-02-25 07:53:32 +08:00
Code Issues Projects Releases Packages Wiki Activity

fix overwriting shared files field without permission

Browse source
This commit is contained in:
binsky 2023-12-31 17:16:21 +01:00
parent 82eccc6f1a
commit a56b9d7162
No known key found for this signature in database
GPG key ID: B438F7FA2E3AC98F
1 changed files with 5 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
lib/Controller/CredentialController.php
View file

@ -155,6 +155,11 @@ class CredentialController extends ApiController {
if (!$this->settings->isEnabled('user_sharing_enabled')) {
return new DataResponse(['msg' => 'Not authorized'], Http::STATUS_UNAUTHORIZED);
}
if (!$acl->hasPermission(SharingACL::FILES)) {
// what ever the client transmitted, if it has no files permission, the previous files content will be preserved
$credential['files'] = $storedCredential->getFiles();
}
}