diff options
| author | Vanessa Pertsch <vanessa.pertsch@nextcloud.com> | 2022-04-26 10:10:36 +0300 |
|---|---|---|
| committer | backportbot-nextcloud[bot] <backportbot-nextcloud[bot]@users.noreply.github.com> | 2022-05-11 09:51:30 +0300 |
| commit | 608fc82fd4634ba10bd40a24390c4cf204ba9b85 (patch) | |
| tree | 528656ef8ccae2602f262b74db5948fb930883f1 | |
| parent | 1def8bdd0e57379e00c59f703d057ddca5a51e72 (diff) | |
fix for transferring ownership of groupfoldersbackport/32149/stable23
Signed-off-by: Vanessa Pertsch <vanessa.pertsch@nextcloud.com>
| -rw-r--r-- | apps/files/lib/Controller/TransferOwnershipController.php | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/apps/files/lib/Controller/TransferOwnershipController.php b/apps/files/lib/Controller/TransferOwnershipController.php index fb1a8b33dc1..5abd65444bf 100644 --- a/apps/files/lib/Controller/TransferOwnershipController.php +++ b/apps/files/lib/Controller/TransferOwnershipController.php @@ -30,6 +30,7 @@ namespace OCA\Files\Controller; use OCA\Files\BackgroundJob\TransferOwnership; use OCA\Files\Db\TransferOwnership as TransferOwnershipEntity; use OCA\Files\Db\TransferOwnershipMapper; +use OCP\Files\IHomeStorage; use OCP\AppFramework\Db\DoesNotExistException; use OCP\AppFramework\Http; use OCP\AppFramework\Http\DataResponse; @@ -97,7 +98,7 @@ class TransferOwnershipController extends OCSController { return new DataResponse([], Http::STATUS_BAD_REQUEST); } - if ($node->getOwner()->getUID() !== $this->userId) { + if ($node->getOwner()->getUID() !== $this->userId || !$node->getStorage()->instanceOfStorage(IHomeStorage::class)) { return new DataResponse([], Http::STATUS_FORBIDDEN); } |