tobias/radicale
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Merge pull request #570 from Unrud/patch-5

Browse Source 
Fix permissions for REPORT request
This commit is contained in:
Guillaume Ayoub 2017-04-15 09:20:01 +02:00 committed by GitHub
commit b173307f55
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
radicale/__init__.py
View File

@ -677,12 +677,12 @@ class Application:
def do_REPORT(self, environ, base_prefix, path, user):
"""Manage REPORT request."""
if not self._access(user, path, "w"):
if not self._access(user, path, "r"):
return NOT_ALLOWED
content = self._read_content(environ)
with self.Collection.acquire_lock("r", user):
item = next(self.Collection.discover(path), None)
if not self._access(user, path, "w", item):
if not self._access(user, path, "r", item):
return NOT_ALLOWED
if not item:
return NOT_FOUND