ahtlon/deck
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 1 Wiki Activity

fix: permission check for cloning board

Browse Source 
Signed-off-by: Luka Trovic <luka@nextcloud.com>
This commit is contained in:
Luka Trovic
2024-04-10 20:02:33 +02:00
committed by backportbot[bot]
parent 95020c4adf
commit 7baaa333ed
2 changed files with 12 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
lib/Service/BoardService.php
View File

@@ -547,6 +547,10 @@ class BoardService {
public function clone($id, $userId) {
$this->boardServiceValidator->check(compact('id', 'userId'));
if (!$this->permissionService->canCreate()) {
throw new NoPermissionException('Creating boards has been disabled for your account.');
}
$this->permissionService->checkPermission($this->boardMapper, $id, Acl::PERMISSION_READ);
$board = $this->boardMapper->find($id);