search

whole-tale / wt_home_dirs

0 stars 1 forks source link

Add OPTIONS to methods allowed by DAV:read privilege #17

Closed Xarthisius closed 5 years ago

Xarthisius commented 5 years ago

I was trying to mount a workspace as user that has read only access, but that raised girder.exceptions while accessing the Tale. After short debugging I found that DAV_READ_OPTS is missing verb OPTIONS. As per WebDAV standard:

3.1.  DAV:read Privilege

   The read privilege controls methods that return information about the
   state of the resource, including the resource's properties.  Affected
   methods include GET and PROPFIND.  Any implementation-defined
   privilege that also controls access to GET and PROPFIND must be
   aggregated under DAV:read - if an ACL grants access to DAV:read, the
   client may expect that no other privilege needs to be granted to have
   access to GET and PROPFIND.  Additionally, the read privilege MUST
   control the OPTIONS method.