From b045b2be864732ddad96ab2be39abc12c9f1816d Mon Sep 17 00:00:00 2001 From: Dominik Schmidt Date: Sun, 6 Sep 2026 23:13:47 +0200 Subject: [PATCH] fix(vendor): filterPermissions misses DenyGrant The publicstorageprovider reduces child permissions to what the link grants, field by field, but DenyGrant is not in the list: a child of a view-only link could advertise deny. Same vendored-reva caveat as checkGraphDrivesPath, goes into the reva PR later. --- .../grpc/services/publicstorageprovider/publicstorageprovider.go | 1 + 1 file changed, 1 insertion(+) diff --git a/vendor/github.com/opencloud-eu/reva/v2/internal/grpc/services/publicstorageprovider/publicstorageprovider.go b/vendor/github.com/opencloud-eu/reva/v2/internal/grpc/services/publicstorageprovider/publicstorageprovider.go index e2643547ba..1a1ce89f94 100644 --- a/vendor/github.com/opencloud-eu/reva/v2/internal/grpc/services/publicstorageprovider/publicstorageprovider.go +++ b/vendor/github.com/opencloud-eu/reva/v2/internal/grpc/services/publicstorageprovider/publicstorageprovider.go @@ -871,6 +871,7 @@ func filterPermissions(l *provider.ResourcePermissions, r *provider.ResourcePerm l.RestoreRecycleItem = l.RestoreRecycleItem && r.RestoreRecycleItem l.Stat = l.Stat && r.Stat l.UpdateGrant = l.UpdateGrant && r.UpdateGrant + l.DenyGrant = l.DenyGrant && r.DenyGrant } func (s *service) ListFileVersions(ctx context.Context, req *provider.ListFileVersionsRequest) (*provider.ListFileVersionsResponse, error) {