tobias/radicale
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Add access check to PROPFIND

Browse Source
This commit is contained in:
Unrud 2016-08-08 06:59:15 +02:00
parent 9f2cbb81a3
commit f294b1cf17
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
radicale/__init__.py
View File

@ -509,6 +509,8 @@ class Application:
def do_PROPFIND(self, environ, path, content, user): def do_PROPFIND(self, environ, path, content, user):
"""Manage PROPFIND request.""" """Manage PROPFIND request."""
if not self._access(user, path, "r"):
return NOT_ALLOWED
with self._lock_collection("r", user): with self._lock_collection("r", user):
items = self.Collection.discover( items = self.Collection.discover(
path, environ.get("HTTP_DEPTH", "0")) path, environ.get("HTTP_DEPTH", "0"))