Avii/Radicale
1
0
Fork 0
Code Issues Pull Requests Actions 2 Packages Projects Releases Wiki Activity

sharing/proppatch: add forgotten honor of 'p' in case of write access

Browse Source
This commit is contained in:
Peter Bieringer
2026-07-19 10:54:12 +02:00
parent 49a4bffa85
commit bd7405a033
1 changed files with 6 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
radicale/app/proppatch.py
View File

@@ -142,6 +142,12 @@ class ApplicationPartProppatch(ApplicationBase):
else: else:
logger.trace("PROPPATCH/xml_proppatch: write-access: %r", path) logger.trace("PROPPATCH/xml_proppatch: write-access: %r", path)
if share: if share:
if "p" in share['Permissions']:
logger.notice("PROPPATCH request on shared %r: write-permissions, but disabled by share permission 'p'", path_orig)
return httputils.NOT_ALLOWED
elif "p" in raw_permissions:
logger.notice("PROPPATCH request on shared %r: write-permissions, but disabled by rights permission 'p'", path_orig)
return httputils.NOT_ALLOWED
# write access -> check for enforced properties overlay # write access -> check for enforced properties overlay
logger.trace("PROPPATCH/xml_proppatch: write-access/sharing: %r", path_orig) logger.trace("PROPPATCH/xml_proppatch: write-access/sharing: %r", path_orig)
if self._sharing.enforce_properties_overlay: if self._sharing.enforce_properties_overlay: