mirrors/copyparty
1
0
Fork 0
mirror of https://github.com/9001/copyparty.git synced 2025-11-24 07:23:22 -07:00
Code Issues Actions Packages Projects Releases Wiki Activity

fix og-specific issue with single-file volumes;

Browse source 
if a textfile was shared with permission r below/inside a more
restrictive volume, then:

* if the parent volume had either permission g or h, then the files in
  the parent folder could be accessed

* if the parent volume had anything stricter than g or h, then filenames
  in the parent volume could be seen, but not accessed
This commit is contained in:
ed 2025-10-25 14:23:55 +00:00
parent db87ea5ce1
commit 36ab77e0bf
1 changed files with 7 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
copyparty/authsrv.py
View file

@ -2652,6 +2652,13 @@ class AuthSrv(object):
self.log(t.format(vol.vpath, mtp), 1)
errors = True
for vol in vfs.all_nodes.values():
if not vol.flags.get("is_file"):
continue
zs = "og opds xlink"
for zs in zs.split():
vol.flags.pop(zs, None)
for vol in vfs.all_nodes.values():
if not vol.realpath or vol.flags.get("is_file"):
continue