cs3org / wopiserver

A vendor-neutral application gateway compatible with the WOPI specifications.
Apache License 2.0
55 stars 26 forks source link

Disable SaveAs when user is not owner #97

Closed glpatcern closed 2 years ago

glpatcern commented 2 years ago

This mini PR disables the capability to execute PutRelative (aka "Save As") when the user is not owner of the file.

The rationale is that on single-file shares this operation is bound to fail with permission denied, and even in folder shares the UX may not be great (as owner I may not like that collaborators rename or save copies of my files). Given that we don't have for now a mechanism to tell apart single-file shares from all the rest, this approach seems the safest.