fix: prevent sharing permissions on user root folder

Signed-off-by: John Molakvoæ <skjnldsv@protonmail.com>
nextcloud · Sep 4, 2023 · c3f146b · c3f146b
1 parent 057b65d
commit c3f146b
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/lib/private/Files/Node/LazyUserFolder.php b/lib/private/Files/Node/LazyUserFolder.php
@@ -49,7 +49,8 @@ public function __construct(IRootFolder $rootFolder, IUser $user) {
 			}
 		}, [
 			'path' => $this->path,
-			'permissions' => Constants::PERMISSION_ALL,
+			// Sharing user root folder is not allowed
+			'permissions' => Constants::PERMISSION_ALL ^ Constants::PERMISSION_SHARE,
 			'type' => FileInfo::TYPE_FOLDER,
 			'mimetype' => FileInfo::MIMETYPE_FOLDER,
 		]);