mbk-lab
/
nextcloud
2
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Disallow to share with the owner of the resource

This commit is contained in:
Thomas Müller 2016-02-01 11:47:41 +01:00
parent 4b14ca672f
commit 6f933fde60
1 changed files with 15 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

20
apps/dav/lib/dav/sharing/backend.php
View File

@ -58,7 +58,7 @@ class Backend {
$this->shareWith($shareable, $element);
}
foreach($remove as $element) {
$this->unshare($shareable->getResourceId(), $element);
$this->unshare($shareable, $element);
}
}
@ -73,8 +73,13 @@ class Backend {
return;
}
// don't share with owner
if ($shareable->getOwner() === $parts[1]) {
return;
}
// remove the share if it already exists
$this->unshare($shareable->getResourceId(), $element['href']);
$this->unshare($shareable, $element['href']);
$access = self::ACCESS_READ;
if (isset($element['readOnly'])) {
$access = $element['readOnly'] ? self::ACCESS_READ : self::ACCESS_READ_WRITE;
@ -92,18 +97,23 @@ class Backend {
}
/**
* @param int $resourceId
* @param IShareable $shareable
* @param string $element
*/
private function unshare($resourceId, $element) {
private function unshare($shareable, $element) {
$parts = explode(':', $element, 2);
if ($parts[0] !== 'principal') {
return;
}
// don't share with owner
if ($shareable->getOwner() === $parts[1]) {
return;
}
$query = $this->db->getQueryBuilder();
$query->delete('dav_shares')
->where($query->expr()->eq('resourceid', $query->createNamedParameter($resourceId)))
->where($query->expr()->eq('resourceid', $query->createNamedParameter($shareable->getResourceId())))
->andWhere($query->expr()->eq('type', $query->createNamedParameter($this->resourceType)))
->andWhere($query->expr()->eq('principaluri', $query->createNamedParameter($parts[1])))
;