mirror of
https://gitlab.com/davical-project/davical.git
synced 2026-08-22 17:16:06 +00:00
Check for unbind permission on container before DELETE.
This commit is contained in:
parent
541525919f
commit
36d564452e
@ -12,7 +12,8 @@ dbg_error_log("delete", "DELETE method handler");
|
||||
|
||||
require_once('DAVResource.php');
|
||||
$dav_resource = new DAVResource($request->path);
|
||||
$dav_resource->NeedPrivilege('DAV::unbind');
|
||||
$container = $dav_resource->FetchParentContainer();
|
||||
$container->NeedPrivilege('DAV::unbind');
|
||||
|
||||
$lock_opener = $request->FailIfLocked();
|
||||
|
||||
|
||||
Loading…
x
Reference in New Issue
Block a user