plugins-nextcloud-mirror/richdocuments
1
0
Fork 0
mirror of https://github.com/nextcloud/richdocuments.git synced 2025-12-18 05:20:43 +01:00
Code Projects Releases Activity

fix: Ensure edit permissions are checked before template file token generation

Browse source 
otherwise file created from template will be editable for user with readonly permissions

Signed-off-by: Misha M.-Kupriyanov <kupriyanov@strato.de>
This commit is contained in:
Misha M.-Kupriyanov 2025-04-25 09:38:14 +02:00 • committed by Mikhailo Matiyenko-Kupriyanov
parent 9a89115d87
commit 9222570ccc
1 changed files with 2 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
lib/TokenManager.php
View file

@ -185,6 +185,8 @@ class TokenManager {
$updatable = $updatable && $shareUpdatable;
}
$updatable = $updatable && $this->permissionManager->userCanEdit($editoruid);
$serverHost = $this->urlGenerator->getAbsoluteURL('/');
return $this->wopiMapper->generateFileToken(