Merge pull request #4771 from JammingBen/fix/dav-delete-via-id

fix: dav delete via resource id

changelog/unreleased/fix-dav-id-based-delete.md

@@ -0,0 +1,6 @@
+Bugfix: Deleting resources via their id
+
+We fixed a bug where deleting resources by using their id via the `/dav/spaces/` endpoint would not work.
+
+https://github.com/cs3org/reva/pull/4771
+https://github.com/owncloud/ocis/issues/9619

internal/http/services/owncloud/ocdav/delete.go

@@ -137,8 +137,11 @@ func (s *svc) handleSpacesDelete(w http.ResponseWriter, r *http.Request, spaceID
 
  // do not allow deleting spaces via dav endpoint - use graph endpoint instead
  // we get a relative reference coming from the space root
- // so if the path is "empty" we a referencing the space
- if ref.GetPath() == "." {
+ // so if the path is "empty" and no opaque id is present or the opaque id equals
+ // the space id, we are referencing the space
+ rid := ref.GetResourceId()
+ if ref.GetPath() == "." &&
+ (rid.GetOpaqueId() == "" || rid.GetOpaqueId() == rid.GetSpaceId()) {
  return http.StatusMethodNotAllowed, errors.New("deleting spaces via dav is not allowed")
  }