sharing/update: fix for self-owned
This commit is contained in:
@@ -1023,17 +1023,33 @@ class BaseSharing:
|
|||||||
logger.warning(api_info + ": access to %r not allowed for user %r", PathMapped, user)
|
logger.warning(api_info + ": access to %r not allowed for user %r", PathMapped, user)
|
||||||
return httputils.NOT_ALLOWED
|
return httputils.NOT_ALLOWED
|
||||||
|
|
||||||
result = self.database_update_sharing(
|
if user == share['User']:
|
||||||
ShareType=ShareType,
|
# self-owned share
|
||||||
PathMapped=PathMapped,
|
result = self.database_update_sharing(
|
||||||
Permissions=Permissions,
|
ShareType=ShareType,
|
||||||
EnabledByOwner=Enabled,
|
PathMapped=PathMapped,
|
||||||
HiddenByOwner=Hidden,
|
Permissions=Permissions,
|
||||||
PathOrToken=PathOrToken,
|
EnabledByOwner=Enabled,
|
||||||
OwnerOrUser=user,
|
EnabledByUser=Enabled,
|
||||||
User=User,
|
HiddenByOwner=Hidden,
|
||||||
Timestamp=Timestamp,
|
HiddenByUser=Hidden,
|
||||||
Properties=Properties)
|
PathOrToken=PathOrToken,
|
||||||
|
OwnerOrUser=user,
|
||||||
|
User=User,
|
||||||
|
Timestamp=Timestamp,
|
||||||
|
Properties=Properties)
|
||||||
|
else:
|
||||||
|
result = self.database_update_sharing(
|
||||||
|
ShareType=ShareType,
|
||||||
|
PathMapped=PathMapped,
|
||||||
|
Permissions=Permissions,
|
||||||
|
EnabledByOwner=Enabled,
|
||||||
|
HiddenByOwner=Hidden,
|
||||||
|
PathOrToken=PathOrToken,
|
||||||
|
OwnerOrUser=user,
|
||||||
|
User=User,
|
||||||
|
Timestamp=Timestamp,
|
||||||
|
Properties=Properties)
|
||||||
|
|
||||||
elif user == share['User']:
|
elif user == share['User']:
|
||||||
# User is only allowed to update Properties
|
# User is only allowed to update Properties
|
||||||
|
|||||||
Reference in New Issue
Block a user