search

owncloud / customgroups

Let users create their own custom groups
GNU Affero General Public License v3.0
8 stars 14 forks source link

fix: prevent non-admins from retrieving all customgroups #605

Closed JammingBen closed 11 months ago

JammingBen commented 11 months ago

Fixes an issue where any user could retrieve all customgroups of an instance when querying /remote.php/dav/customgroups/groups. This should only be possible for admin users.

fixes https://github.com/owncloud/enterprise/issues/5873

sonarcloud[bot] commented 11 months ago

Kudos, SonarCloud Quality Gate passed!    Quality Gate passed

Bug A 0 Bugs
Vulnerability A 0 Vulnerabilities
Security Hotspot A 0 Security Hotspots
Code Smell A 0 Code Smells

0.0% 0.0% Coverage
0.0% 0.0% Duplication