feat: Check download attribute when fetching previews

Signed-off-by: Louis Chemineau <louis@chmn.me> [skip ci]
nextcloud · Apr 18, 2024 · e386f8a · e386f8a
1 parent 3f4012b
commit e386f8a
Show file tree

Hide file tree

Showing 2 changed files with 24 additions and 0 deletions.
diff --git a/lib/Controller/PreviewController.php b/lib/Controller/PreviewController.php
@@ -90,6 +90,21 @@ public function index(
 		}
 
 		$nodes = $this->userFolder->getById($fileId);
+		$nodes = array_filter(
+			$nodes,
+			function ($node) {
+				$storage = $node->getStorage();
+				if (!$storage->instanceOfStorage(SharedStorage::class)) {
+					return true;
+				}
+
+				/** @var SharedStorage $storage */
+				$share = $storage->getShare();
+				$attributes = $share->getAttributes();
+
+				return $attributes === null || $attributes->getAttribute('permissions', 'download') !== false;
+			},
+		);
 
 		/** @var \OCA\Photos\Album\AlbumInfo[] */
 		$checkedAlbums = [];

diff --git a/tests/psalm-baseline.xml b/tests/psalm-baseline.xml
@@ -6,10 +6,19 @@
       <code>\OCA\GroupFolders\Mount\GroupFolderStorage</code>
     </UndefinedClass>
   </file>
+  <file src="lib/Controller/PreviewController.php">
+    <UndefinedDocblockClass occurrences="4">
+      <code>OCA\Files_Sharing\SharedStorage</code>
+    </UndefinedDocblockClass>
+    <UndefinedClass occurrences="1">
+      <code>SharedStorage</code>
+    </UndefinedClass>
+  </file>
   <file src="lib/Controller/PageController.php">
     <InvalidArgument occurrences="1">
       <code>new SearchQuery(new SearchComparison(ISearchComparison::COMPARE_EQUAL, 'systemtag', $tag-&gt;getName()), 0, 0, [], $user)</code>
     </InvalidArgument>
+
     <UndefinedClass occurrences="12">
       <code>$e</code>
       <code>LoadSidebar</code>