prevent nil by disallowing CreateHome in public scope

Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
cs3org · Mar 22, 2022 · 20392fb · 20392fb
1 parent 2833e9b
commit 20392fb
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/pkg/auth/scope/publicshare.go b/pkg/auth/scope/publicshare.go
@@ -71,6 +71,8 @@ func publicshareScope(ctx context.Context, scope *authpb.Scope, resource interfa
  }
  }
  return checkStorageRef(ctx, &share, ref), nil
+ case *provider.CreateHomeRequest:
+ return false, nil
  case *provider.GetPathRequest:
  return checkStorageRef(ctx, &share, &provider.Reference{ResourceId: v.GetResourceId()}), nil
  case *provider.StatRequest:
@@ -127,7 +129,7 @@ func publicshareScope(ctx context.Context, scope *authpb.Scope, resource interfa
  return checkResourcePath(v), nil
  }
 
- msg := "resource type assertion failed"
+ msg := "public resource type assertion failed"
  logger.Debug().Str("scope", "publicshareScope").Interface("resource", resource).Msg(msg)
  return false, errtypes.InternalError(msg)
 }