github/filestash
4
0
Fork 0
mirror of https://github.com/mickael-kerjean/filestash.git synced 2024-04-21 12:32:08 +00:00
Code Issues Releases Wiki Activity

fix (webdav): network drive permissions

Browse Source
This commit is contained in:
MickaelK
2024-04-21 20:38:32 +10:00
parent 26ab48a635
commit 87d6911288
1 changed files with 14 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
server/ctrl/webdav.go
+14 -4
View File
@@ -19,10 +19,10 @@ func WebdavHandler(ctx *App, res http.ResponseWriter, req *http.Request) {
// https://github.com/golang/net/blob/master/webdav/webdav.go#L49-L68
canRead := model.CanRead(ctx)
canWrite := model.CanRead(ctx)
canWrite := model.CanEdit(ctx)
canUpload := model.CanUpload(ctx)
switch req.Method {
case "OPTIONS", "GET", "HEAD", "POST", "PROPFIND":
case "OPTIONS", "HEAD", "GET":
if canRead == false {
SendErrorResult(res, ErrPermissionDenied)
return
@@ -32,8 +32,18 @@ func WebdavHandler(ctx *App, res http.ResponseWriter, req *http.Request) {
SendErrorResult(res, ErrPermissionDenied)
return
}
case "PUT", "LOCK", "UNLOCK":
if canWrite == false && canUpload == false {
case "PROPFIND":
if canRead == false {
SendErrorResult(res, ErrPermissionDenied)
return
}
case "PUT":
if canWrite == false || canUpload == false {
SendErrorResult(res, ErrPermissionDenied)
return
}
case "LOCK", "UNLOCK":
if canWrite == false || canUpload == false {
SendErrorResult(res, ErrPermissionDenied)
return
}