Dominik Schmidt d18c1a1edb fix(graph): advertise only what the public link grants ...

Navigating by id bypasses the publicstorageprovider, so the permission sets
are the owner's: a view-only link advertised delete and upload on items below
the root. Intersect with the link's permissions, the same reduction the
publicstorageprovider applies on its own responses; enforcement was always
intact through the token scope.

2026-09-08 11:21:02 +02:00

..

changeRole.feature

removing without skeleton files string from the user creation steps

2024-12-02 09:12:57 +05:45

colonSyntaxPathLookup.feature

docs(graph): frame colon paths as "encode segments" instead of a raw-colon edge case

2026-07-01 17:44:31 +02:00

enforcePasswordPublicLink.feature

[full-ci] use graph api in the enforcePasswordPublicLink.feature (#2050)

2025-12-18 14:05:52 +01:00

favorites.feature

api-tests: search for favorites (#2487)

2026-03-18 11:10:09 +01:00

getApplications.feature

fix gherkin lint

2025-03-10 15:10:32 +01:00

getAssignedRole.feature

add test to check settings api response

2025-01-09 09:52:39 +05:45

publicLinkDriveItemListing.feature

fix(graph): advertise only what the public link grants

2026-09-08 11:21:02 +02:00

roleManagementEndpoint.feature

fix: show special roles at the end of the list (#806)

2025-05-10 11:23:01 +02:00

unassignRole.feature

removing without skeleton files string from the user creation steps

2024-12-02 09:12:57 +05:45

userGDPRExport.feature

[full-ci] Enhance getSpaceByName: check local cache before Graph API calls (#1574)

2025-09-30 13:08:21 +02:00