Henrique Dias fb02929c3a fix: authorize the destination collection a copy or move replaces ...

A COPY or MOVE onto an existing destination replaces it, which destroys
everything the destination collection held. Only the source subtree was
authorized per descendant, and the destination itself was authorized as an
update, so a rule restricting a subtree held against DELETE but not against
an overwrite of the collection above it. Removing a collection is now
authorized the way DELETE on it would be, on the collection and on every
path beneath it. Writing over a file stays an update.

2026-09-20 16:25:19 +02:00

..

casefold.go

fix: authorize every path an operation touches

2026-09-04 14:32:32 +02:00

config_test.go

feat: support CORS Private Network Access (#350)

2026-08-28 15:27:04 +02:00

config.go

feat: support CORS Private Network Access (#350)

2026-08-28 15:27:04 +02:00

files.go

fix(deps): update all dependencies

2025-06-20 07:56:09 +02:00

handler_test.go

fix: authorize the destination collection a copy or move replaces

2026-09-20 16:25:19 +02:00

handler.go

fix: authorize the destination collection a copy or move replaces

2026-09-20 16:25:19 +02:00

locksystem_test.go

fix: use slash-separated lock paths on Windows (#344)

2026-07-25 07:15:27 +02:00

locksystem.go

fix: use slash-separated lock paths on Windows (#344)

2026-07-25 07:15:27 +02:00

multidir_test.go

feat: add multi directories support (#335)

2026-07-12 09:51:10 +02:00

multidir.go

feat: add multi directories support (#335)

2026-07-12 09:51:10 +02:00

partial_update.go

fix: authorize every path an operation touches

2026-09-04 14:32:32 +02:00

permissions_fs.go

fix: authorize every path an operation touches

2026-09-04 14:32:32 +02:00

permissions_test.go

test: compare flipCase results with OS-native separators

2026-09-04 14:36:46 +02:00

permissions.go

fix: authorize every path an operation touches

2026-09-04 14:32:32 +02:00

request.go

Merge commit from fork

2026-08-05 10:18:13 +02:00

user.go

fix: environment parsing for username

2024-10-20 09:09:05 +02:00