filip/Stalwart
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity

WebDAV: Fix ACL validation for target folders.

Browse Source
This commit is contained in:
Maurus Decimus
2026-04-24 20:11:48 +02:00
parent e73b65c5a3
commit fb9a1cc211
4 changed files with 16 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
crates/dav/src/file/copy_move.rs
View File

@@ -160,7 +160,7 @@ impl FileCopyMoveRequestHandler for Server {
if let Some(document_id) = destination.document_id {
if let Some(delete_destination) = &delete_destination
&& !access_token.is_member(to_account_id)
&& !from_resources.has_access_to_container(
&& !to_resources.has_access_to_container(
access_token,
delete_destination.document_id.unwrap(),
Acl::Delete,
@@ -170,7 +170,7 @@ impl FileCopyMoveRequestHandler for Server {
}
if !access_token.is_member(to_account_id)
&& !from_resources.has_access_to_container(access_token, document_id, Acl::Modify)
&& !to_resources.has_access_to_container(access_token, document_id, Acl::Modify)
{
return Err(DavError::Code(StatusCode::FORBIDDEN));
}