hpi-schul-cloud / webdav

POC/MVP to have SC files available via WebDav
1 stars 0 forks source link

_delete doesn't check if resource is a course/team #15

Closed DevSchmidtchen closed 3 years ago

DevSchmidtchen commented 3 years ago

You can try to delete a course/team-directory and the server tries to delete this resource using the normal fileStorage-endpoint. This should be intercepted before the API-Request happens and throw Error 403.