From bd7405a033a0b541445a5acfe7c5fb447e253f6c Mon Sep 17 00:00:00 2001 From: Peter Bieringer Date: Sun, 19 Jul 2026 10:54:12 +0200 Subject: [PATCH] sharing/proppatch: add forgotten honor of 'p' in case of write access --- radicale/app/proppatch.py | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/radicale/app/proppatch.py b/radicale/app/proppatch.py index 1fc5b6de..ee7f8685 100644 --- a/radicale/app/proppatch.py +++ b/radicale/app/proppatch.py @@ -142,6 +142,12 @@ class ApplicationPartProppatch(ApplicationBase): else: logger.trace("PROPPATCH/xml_proppatch: write-access: %r", path) if share: + if "p" in share['Permissions']: + logger.notice("PROPPATCH request on shared %r: write-permissions, but disabled by share permission 'p'", path_orig) + return httputils.NOT_ALLOWED + elif "p" in raw_permissions: + logger.notice("PROPPATCH request on shared %r: write-permissions, but disabled by rights permission 'p'", path_orig) + return httputils.NOT_ALLOWED # write access -> check for enforced properties overlay logger.trace("PROPPATCH/xml_proppatch: write-access/sharing: %r", path_orig) if self._sharing.enforce_properties_overlay: