mbk-lab
/
nextcloud
2
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Do not allow transfer ownership when the user isn't the owner 

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
This commit is contained in:
Christoph Wurst 2020-03-03 14:45:06 +01:00
parent 26ea9681ab
commit 68b764bb0f
No known key found for this signature in database
GPG Key ID: CC42AC2A7F0E56D8
4 changed files with 12 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
apps/files/js/dist/personal-settings.js vendored
View File

File diff suppressed because one or more lines are too long

2
apps/files/js/dist/personal-settings.js.map vendored
View File

File diff suppressed because one or more lines are too long

4
apps/files/lib/Controller/TransferOwnershipController.php
View File

@ -96,6 +96,10 @@ class TransferOwnershipController extends OCSController {
return new DataResponse([], Http::STATUS_BAD_REQUEST);
}
if ($node->getOwner()->getUID() !== $this->userId) {
return new DataResponse([], Http::STATUS_FORBIDDEN);
}
$transferOwnership = new TransferOwnershipEntity();
$transferOwnership->setSourceUser($this->userId);
$transferOwnership->setTargetUser($recipient);

6
apps/files/src/components/TransferOwnershipDialogue.vue
View File

@ -215,7 +215,11 @@ export default {
.catch(error => {
logger.error('Could not send ownership transfer request', { error })
this.submitError = error.message || t('files', 'Unknown error')
if (error?.response?.status === 403) {
this.submitError = t('files', 'Cannot transfter ownership of a file or folder you don\'t own')
} else {
this.submitError = error.message || t('files', 'Unknown error')
}
})
},
},