Skip to content

Conversation

@rullzer
Copy link
Member

@rullzer rullzer commented Nov 13, 2016

Fixes the following:

  1. user0 shares folder with user1 (RO but with sharing permissions)
  2. user1 shares by link
  3. Get the share id of the link share: curl -u user:pass -H 'OCS-APIREQUEST: true' http://<server>/ocs/v2.php/apps/files_sharing/api/v1/shares
  4. user1 send 'publicUpload=true' OCS request to the link share: curl -u user:pass -H 'OCS-APIREQUEST: true' http://<server>/ocs/v2.php/apps/files_sharing/api/v1/shares/<id> -X PUT -d 'publicUpload=true

before this increased the permissions of the link share. Which should
not happen.

now: API reponds with an error that the permissions can't be increased.

CC: @LukasReschke @schiessle @nickvergessen @MorrisJobke

Fixes the following:

1. user0 shares folder with user1 (RO but with sharing permissions)
2. user1 shares by link
3. user1 send 'publicUpload=true' OCS request to the link share

before this increased the permissions of the link share. Which should
not happen.

now: API reponds with an error that the permissions can't be increased.

Signed-off-by: Roeland Jago Douma <[email protected]>
@mention-bot
Copy link

@rullzer, thanks for your PR! By analyzing the history of the files in this pull request, we identified @PVince81, @schiessle and @icewind1991 to be potential reviewers.

@icewind1991
Copy link
Member

👍

@nickvergessen
Copy link
Member

Integration test for this please 🤕

@rullzer
Copy link
Member Author

rullzer commented Nov 14, 2016

Unit test fully cover this. (they did not before).

Intergration test should be doable but not from a phone ;-)

Signed-off-by: Roeland Jago Douma <[email protected]>
@rullzer
Copy link
Member Author

rullzer commented Nov 14, 2016

Happy now @nickvergessen 😉

@MorrisJobke
Copy link
Member

Tested and works 👍

@MorrisJobke MorrisJobke added 4. to release Ready to be released and/or waiting for tests to finish and removed 3. to review Waiting for reviews labels Nov 14, 2016
@rullzer rullzer merged commit ff96fff into master Nov 14, 2016
@rullzer rullzer deleted the do_not_increse_link_share_perms branch November 14, 2016 14:21
rullzer added a commit that referenced this pull request Nov 14, 2016
rullzer added a commit that referenced this pull request Nov 14, 2016
rullzer added a commit that referenced this pull request Nov 15, 2016
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

4. to release Ready to be released and/or waiting for tests to finish bug feature: sharing regression

Projects

None yet

Development

Successfully merging this pull request may close these issues.

7 participants