mirrors/copyparty
1
0
Fork 0
mirror of https://github.com/9001/copyparty.git synced 2026-04-12 23:32:32 -06:00
Code Issues Actions Packages Projects Releases Wiki Activity

shares: dotfiles can be granted

Browse source
This commit is contained in:
ed 2026-03-22 16:56:07 +00:00
parent 134e378e3a
commit 66f9c95097
3 changed files with 18 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
README.md
View file

@ -622,6 +622,8 @@ anyone can access these if they know the name, but they normally don't appear in
a client can request to see dotfiles in directory listings if global option `-ed` is specified, or the volume has volflag `dots`, or the user has permission `.` a client can request to see dotfiles in directory listings if global option `-ed` is specified, or the volume has volflag `dots`, or the user has permission `.`
> for [shares](#shares), the `dots` volflag is ignored
dotfiles do not appear in search results unless one of the above is true, **and** the global option / volflag `dotsrch` is set dotfiles do not appear in search results unless one of the above is true, **and** the global option / volflag `dotsrch` is set
> even if user has permission to see dotfiles, they are default-hidden unless `--see-dots` is set, and/or user has enabled the `dotfiles` option in the settings tab > even if user has permission to see dotfiles, they are default-hidden unless `--see-dots` is set, and/or user has enabled the `dotfiles` option in the settings tab

4
copyparty/authsrv.py
View file

@ -1985,6 +1985,10 @@ class AuthSrv(object):
[sun] if "m" in s_pr else [], [sun] if "m" in s_pr else [],
[sun] if "d" in s_pr else [], [sun] if "d" in s_pr else [],
[sun] if "g" in s_pr else [], [sun] if "g" in s_pr else [],
[], # G
[], # h
[], # a
[sun] if "." in s_pr or self.args.ed else [],
) )
# don't know the abspath yet + wanna ensure the user # don't know the abspath yet + wanna ensure the user

14
copyparty/httpcli.py
View file

@ -6452,13 +6452,18 @@ class HttpCli(object):
s_rd = "read" in req["perms"] s_rd = "read" in req["perms"]
s_wr = "write" in req["perms"] s_wr = "write" in req["perms"]
s_get = "get" in req["perms"] s_get = "get" in req["perms"]
s_dot = "dot" in req["perms"]
s_axs = [s_rd, s_wr, False, False, s_get] s_axs = [s_rd, s_wr, False, False, s_get]
s_axsd = s_axs + [s_dot]
if s_axs == [False] * 5: if s_axs == [False] * 5:
raise Pebkac(400, "select at least one permission") raise Pebkac(400, "select at least one permission")
try: try:
vfs, rem = self.asrv.vfs.get(vp, self.uname, *s_axs) vfs, rem = self.asrv.vfs.get(vp, self.uname, *s_axs)
can_dot = self.uname in vfs.axs.udot
if s_dot and not can_dot:
raise Exception()
except: except:
raise Pebkac(400, "you dont have all the perms you tried to grant") raise Pebkac(400, "you dont have all the perms you tried to grant")
@ -6471,7 +6476,10 @@ class HttpCli(object):
raise Pebkac(400, "you dont have perms to create shares from this volume") raise Pebkac(400, "you dont have perms to create shares from this volume")
ap, reals, _ = vfs.ls(rem, self.uname, not self.args.no_scandir, [s_axs]) ap, reals, _ = vfs.ls(rem, self.uname, not self.args.no_scandir, [s_axs])
rfns = set([x[0] for x in reals]) zsl = [x[0] for x in reals]
if not can_dot:
zsl = exclude_dotfiles(zsl)
rfns = set(zsl)
for fn in fns: for fn in fns:
if fn not in rfns: if fn not in rfns:
raise Pebkac(400, "selected file not found on disk: %r" % (fn,)) raise Pebkac(400, "selected file not found on disk: %r" % (fn,))
@ -6482,7 +6490,7 @@ class HttpCli(object):
sexp = req["exp"] sexp = req["exp"]
exp = int(sexp) if sexp else 0 exp = int(sexp) if sexp else 0
exp = now + exp * 60 if exp else 0 exp = now + exp * 60 if exp else 0
pr = "".join(zc for zc, zb in zip("rwmdg", s_axs) if zb) pr = "".join(zc for zc, zb in zip("rwmdg.", s_axsd) if zb)
q = "insert into sh values (?,?,?,?,?,?,?,?)" q = "insert into sh values (?,?,?,?,?,?,?,?)"
cur.execute(q, (skey, pw, vp, pr, len(fns), self.uname, now, exp)) cur.execute(q, (skey, pw, vp, pr, len(fns), self.uname, now, exp))
@ -7018,6 +7026,8 @@ class HttpCli(object):
perms.append("move") perms.append("move")
if self.can_delete: if self.can_delete:
perms.append("delete") perms.append("delete")
if self.can_dot:
perms.append("dot")
if self.can_get: if self.can_get:
perms.append("get") perms.append("get")
if self.can_upget: if self.can_upget: