checking download attribute to download (Fix #687)feature/share-download

1 files changed, 11 insertions, 0 deletions

diff --git a/controller/editorcontroller.php b/controller/editorcontroller.php
index 80b25d3..92e7b60 100644
--- a/controller/editorcontroller.php
+++ b/controller/editorcontroller.php
@@ -1048,6 +1048,17 @@ class EditorController extends Controller {
             }
         }
 
+        $fileStorage = $file->getStorage();
+        if ($fileStorage->instanceOfStorage("\OCA\Files_Sharing\SharedStorage")) {
+            if (method_exists(IShare::class, "getAttributes")) {
+                $share = empty($share) ? $fileStorage->getShare() : $share;
+                $attributes = $share->getAttributes();
+                if ($attributes !== null && !$attributes->getAttribute("permissions", "download")) {
+                    return $this->renderError($this->trans->t("Not permitted"));
+                }
+            }
+        }
+
         $fileName = $file->getName();
         $ext = strtolower(pathinfo($fileName, PATHINFO_EXTENSION));
         $toExtension = strtolower($toExtension);