Block download when needed on direct download endpoint

Signed-off-by: Vincent Petry <vincent@nextcloud.com>

1 files changed, 2 insertions, 0 deletions

diff --git a/apps/files_sharing/lib/AppInfo/Application.php b/apps/files_sharing/lib/AppInfo/Application.php
index 97bb9447713..79952c053b1 100644
--- a/apps/files_sharing/lib/AppInfo/Application.php
+++ b/apps/files_sharing/lib/AppInfo/Application.php
@@ -164,6 +164,7 @@ class Application extends App implements IBootstrap {
 			'file.beforeGetDirect',
 			function (GenericEvent $event) use ($userSession, $rootFolder) {
 				$pathsToCheck = [$event->getArgument('path')];
+				$event->setArgument('run', true);
 
 				// Check only for user/group shares. Don't restrict e.g. share links
 				if ($userSession && $userSession->isLoggedIn()) {
@@ -172,6 +173,7 @@ class Application extends App implements IBootstrap {
 						$rootFolder->getUserFolder($uid)
 					);
 					if (!$viewOnlyHandler->check($pathsToCheck)) {
+						$event->setArgument('run', false);
 						$event->setArgument('errorMessage', 'Access to this resource or one of its sub-items has been denied.');
 					}
 				}