diff options
author | binsky <timo@binsky.org> | 2021-04-03 17:00:42 +0300 |
---|---|---|
committer | binsky <timo@binsky.org> | 2021-04-03 17:00:42 +0300 |
commit | b996e2dc69ae3e0759b134f29d27d56c5acd82c1 (patch) | |
tree | f119c7344a68d94d02f61e3c7fd1973a5c52e9ee /controller | |
parent | 11d774405be2af4d4dcfa3a5d84c04b8968e221c (diff) |
fix sharing method access
Diffstat (limited to 'controller')
-rw-r--r-- | controller/sharecontroller.php | 9 |
1 files changed, 8 insertions, 1 deletions
diff --git a/controller/sharecontroller.php b/controller/sharecontroller.php index 4428e774..4b1f534e 100644 --- a/controller/sharecontroller.php +++ b/controller/sharecontroller.php @@ -226,7 +226,10 @@ class ShareController extends ApiController { return new JSONResponse(array('result' => true)); } - + /** + * @NoAdminRequired + * @NoCSRFRequired + */ public function unshareCredentialFromUser($item_guid, $user_id) { $acl = null; $sr = null; @@ -436,6 +439,8 @@ class ShareController extends ApiController { * @param $item_guid * @return JSONResponse|NotFoundResponse * @throws \OCP\DB\Exception + * @NoAdminRequired + * @NoCSRFRequired */ public function getItemAcl($item_guid) { $acl = $this->shareService->getCredentialAclList($item_guid); @@ -462,6 +467,8 @@ class ShareController extends ApiController { * @return array|File|NotFoundJSONResponse * @throws DoesNotExistException * @throws MultipleObjectsReturnedException + * @NoAdminRequired + * @NoCSRFRequired */ public function getFile($item_guid, $file_guid) { try { |