Skip to content

fix(sharesstorageprovider): reject a share deleted by its mount point - #917

Merged
v-scharf merged 1 commit into
mainfrom
fix/delete-share-root-by-path
Oct 27, 2026
Merged

v-scharf merged 1 commit into
mainfrom
fix/delete-share-root-by-path

Conversation

@v-scharf

@v-scharf v-scharf commented Oct 26, 2026 •

Copy link
Copy Markdown

Deleting a received share by its mount point (DELETE /Shares/<name>) was forwarded to the owner's storage instead of rejecting the share, and is denied with 403 since #916.

Failing test: https://ci.opencloud.rocks/repos/3/pipeline/4690/355

A DELETE of /Shares/<name> reaches the sharesstorageprovider relative to the
share jail root, e.g. './<name>'. Only a reference by share id with the path
'.' rejected the share, so this one was forwarded to the owner's storage and
deleted the shared resource itself. Since #916 that is denied with 403.
@v-scharf
v-scharf force-pushed the fix/delete-share-root-by-path branch from 91f8794 to b72c529 Compare October 26, 2026 17:09
@micbar

micbar commented Oct 26, 2026

Copy link
Copy Markdown
Member

Good catch!

@aduffeck could we have fallout from #916 in other areas?

@github-project-automation github-project-automation Bot moved this to Qualification in OpenCloud Team Board Oct 27, 2026
@v-scharf
v-scharf merged commit 56ca320 into main Oct 27, 2026
19 checks passed
@v-scharf
v-scharf deleted the fix/delete-share-root-by-path branch October 27, 2026 10:03
@github-project-automation github-project-automation Bot moved this from Qualification to Done in OpenCloud Team Board Oct 27, 2026
@openclouders openclouders mentioned this pull request Oct 27, 2026
1 task
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

Status: Done

Development

Successfully merging this pull request may close these issues.

4 participants