haiwen/seahub
1
0
Fork 0
mirror of https://github.com/haiwen/seahub.git synced 2025-09-22 11:57:34 +00:00
Code Issues Releases Wiki Activity

not allow user set folder perm in virtual repo

Browse Source
This commit is contained in:
lian
2016-10-10 15:23:01 +08:00
parent 9e956826d1
commit c24f871a7c
3 changed files with 14 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
seahub/views/ajax.py
View File

@@ -1683,10 +1683,15 @@ def set_user_folder_perm(request, repo_id):
return HttpResponse(json.dumps({"error": _('Argument missing')}),
status=400, content_type=content_type)
if not seafile_api.get_repo(repo_id):
repo = seafile_api.get_repo(repo_id)
if not repo:
return HttpResponse(json.dumps({"error": _('Library does not exist')}),
status=400, content_type=content_type)
if repo.is_virtual:
return HttpResponse(json.dumps({"error": _('Permission denied')}),
status=403, content_type=content_type)
if is_org_context(request):
repo_owner = seafile_api.get_org_repo_owner(repo_id)
else:
@@ -1825,10 +1830,15 @@ def set_group_folder_perm(request, repo_id):
status=400, content_type=content_type)
## check params
if not seafile_api.get_repo(repo_id):
repo = seafile_api.get_repo(repo_id)
if not repo:
return HttpResponse(json.dumps({"error": _('Library does not exist')}),
status=400, content_type=content_type)
if repo.is_virtual:
return HttpResponse(json.dumps({"error": _('Permission denied')}),
status=403, content_type=content_type)
if is_org_context(request):
repo_owner = seafile_api.get_org_repo_owner(repo_id)
else: