Skip to content

Commit

Permalink
fix: Block incompatible operations with remote tokens
Browse files Browse the repository at this point in the history
With federated tokens we do not allow storage operations that would be

relative to the file path so we should block them

Signed-off-by: Julius Härtl <jus@bitgrid.net>

[skip ci]
  • Loading branch information
juliushaertl authored and backportbot[bot] committed Apr 30, 2024
1 parent 75bfff6 commit 96c4685
Showing 1 changed file with 2 additions and 2 deletions.
4 changes: 2 additions & 2 deletions lib/Controller/WopiController.php
Original file line number Diff line number Diff line change
Expand Up @@ -205,8 +205,8 @@ public function checkFileInfo($fileId, $access_token) {
'UserCanNotWriteRelative' => $this->encryptionManager->isEnabled() || $isPublic || $wopi->getHideDownload(),
'PostMessageOrigin' => $wopi->getServerHost(),
'LastModifiedTime' => Helper::toISO8601($file->getMTime()),
'SupportsRename' => !$isVersion,
'UserCanRename' => !$isPublic && !$isVersion,
'SupportsRename' => !$isVersion && !$wopi->isRemoteToken(),
'UserCanRename' => !$isPublic && !$isVersion && !$wopi->isRemoteToken(),
'EnableInsertRemoteImage' => !$isPublic,
'EnableShare' => $file->isShareable() && !$isVersion && !$isPublic,
'HideUserList' => '',
Expand Down

0 comments on commit 96c4685

Please sign in to comment.