owncloud / owncloud/ocis

trying to lock file of another user gives http 500

Open
#2,176 4 comments 0 reactions 0 assignees View on GitHub
Type:Bug
Dominant language
Go
Stars
2.1k
Forks
274
Avg merge
2d 1h
Merged PRs (30d)
103

Description

## Describe the bug

trying to lock file of another user gives http 200 when it should be 403

## Steps to reproduce

Steps to reproduce the behavior:

1. As einstein try to lock file of user `admin`
```
curl -XLOCK https://localhost:9200/remote.php/dav/files/admin/space.jpg -u Einstein:relativity -k -d " "
```

## Expected behavior
status 403 with body
```

Sabre\DAV\Exception\Forbidden
Permission denied to create file (filename space.jpg)

```

## Actual behavior
status 200 with body
```





Second-604800
Infinity

opaquelocktoken:00000000-0000-0000-0000-000000000000



%
```

## Setup

Please describe how you started the server and provide a list of relevant environment variables.

```console
OCIS_VERSION=git
BRANCH=master
STORAGE_FRONTEND_UPLOAD_DISABLE_TUS=false
```

## Additional context
Add any other context about the problem here.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.