From a5a42546b44df781fe9db98c06fcb68f04c29707 Mon Sep 17 00:00:00 2001 From: Peter Bieringer Date: Tue, 9 Jun 2026 21:34:42 +0200 Subject: [PATCH] sharing/update: check given Conversion --- radicale/sharing/__init__.py | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/radicale/sharing/__init__.py b/radicale/sharing/__init__.py index 0c010330..fbbde5b5 100644 --- a/radicale/sharing/__init__.py +++ b/radicale/sharing/__init__.py @@ -1301,6 +1301,11 @@ class BaseSharing: logger.warning(api_info + ": PathMapped=%r Permissions=%r not supported for Conversion=%r", PathMapped, Permissions, Conversion) return httputils.bad_request("Permissions are not supported for conversion") + if Conversion is not None and share['Conversion'] is not None: + if Conversion != share['Conversion']: + logger.warning(api_info + ": PathMapped=%r change of Conversion %r -> %r is not supported", PathMapped, share['Conversion'], Conversion) + return httputils.bad_request("Change of conversion is not supported") + if user == share['Owner']: if PathMapped is not None: # check access Permissions