Fix DAV: acl-principal-prop-set REPORT enforced the wrong privilege

2026-05-12 15:47:32 +02:00
parent bdba3f20e1
commit 415036dd64
30 changed files with 69 additions and 57 deletions
--- a/crates/dav/src/common/acl.rs
+++ b/crates/dav/src/common/acl.rs
@@ -256,7 +256,7 @@ impl DavAclHandler for Server {

        // Validate ACLs
        if !access_token.is_member(uri.account_id)
-            && !acls.effective_acl(access_token).contains(Acl::Read)
+            && !acls.effective_acl(access_token).contains(Acl::Share)
        {
            return Err(DavError::Code(StatusCode::FORBIDDEN));
        }