Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix(auth/scope): fix nested resource check when creating a new resource #4660

Merged
merged 1 commit into from
Apr 29, 2024

Conversation

rhafer
Copy link
Contributor

@rhafer rhafer commented Apr 25, 2024

When creating a reource (e.g a document via the app/new endpoint) below a next folder structure of a public link, we can't stat the resource itself (it doesn't exit yet) for checking if it is a descendant of the share root. We now stat the resource's parent instead in that case.

Fixes: owncloud/ocis#8957

@rhafer rhafer marked this pull request as ready for review April 25, 2024 13:42
@rhafer rhafer requested review from labkode, glpatcern and a team as code owners April 25, 2024 13:42
@rhafer rhafer requested review from butonic and kobergj and removed request for labkode and glpatcern April 25, 2024 14:15
internal/grpc/interceptors/auth/scope.go Outdated Show resolved Hide resolved
internal/grpc/interceptors/auth/scope.go Outdated Show resolved Hide resolved
When creating a reource (e.g a document via the app/new endpoint) below a next
folder structure of a public link, we can't stat the resource itself (it
doesn't exit yet) for checking if it is a descendant of the share root.
We now stat the resource's parent instead in that case.

Fixes: owncloud/ocis#8957
@rhafer rhafer merged commit 5faad8d into cs3org:edge Apr 29, 2024
9 checks passed
@micbar micbar mentioned this pull request Jun 19, 2024
24 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants