webdav

archive/webdav

Fork 0

mirror of https://github.com/hacdias/webdav.git synced 2026-09-22 03:20:41 +08:00

Commit Graph

Author	SHA1	Message	Date
Henrique Dias	3ded167a52	fix: authorize every path an operation touches Recursive COPY, MOVE, DELETE and PROPFIND were checked only against the requested path, reaching descendants their rules deny. A broad rule shadowed a narrower one naming a collection. LOCK was allowed on any permission, so a read-only user could create files and block writers. Rules compared case where the backing file system does not.	2026-09-04 14:32:32 +02:00
Janlay WuandHenrique Dias	3ddd9182f9	feat: add partial update support (#331 ) Co-authored-by: Henrique Dias <[email protected]>	2026-06-27 10:00:57 +02:00

Author

SHA1

Message

Date

Henrique Dias

3ded167a52

fix: authorize every path an operation touches

Recursive COPY, MOVE, DELETE and PROPFIND were checked only against the
requested path, reaching descendants their rules deny. A broad rule shadowed
a narrower one naming a collection. LOCK was allowed on any permission, so a
read-only user could create files and block writers. Rules compared case
where the backing file system does not.

2026-09-04 14:32:32 +02:00

Janlay WuandHenrique Dias

3ddd9182f9

feat: add partial update support (#331 )

Co-authored-by: Henrique Dias <[email protected]>

2026-06-27 10:00:57 +02:00