Disable sharing calendars via link when sharik via link is disabled

This mod disallows sharing calendars via link when `shareapi_allow_links` is disabled. Related: nextcloud/calendar#525 Related: nextcloud/calendar#4399 Author-Change-Id: IB#1126264 Signed-off-by: Pawel Boguslawski <[email protected]>
nextcloud · Oct 1, 2022 · 45eefc2 · 45eefc2
1 parent 2600a00
commit 45eefc2
Show file tree

Hide file tree

Showing 2 changed files with 15 additions and 0 deletions.
diff --git a/apps/dav/lib/CalDAV/CalDavBackend.php b/apps/dav/lib/CalDAV/CalDavBackend.php
@@ -3,6 +3,7 @@
  * @copyright Copyright (c) 2016, ownCloud, Inc.
  * @copyright Copyright (c) 2018 Georg Ehrke
  * @copyright Copyright (c) 2020, leith abdulla (<[email protected]>)
+ * @copyright Copyright (c) 2022 Informatyka Boguslawski sp. z o.o. sp.k., http://www.ib.pl/
  *
  * @author Chih-Hsuan Yen <[email protected]>
  * @author Christoph Wurst <[email protected]>
@@ -512,6 +513,10 @@ private function getUserDisplayName($uid) {
 	 * @return array
 	 */
 	public function getPublicCalendars() {
+		// Sharing via link must be enabled.
+		if ($this->config->getAppValue('core', 'shareapi_allow_links', 'yes') === 'no' ) {
+			return array_values([]);
+		}
 		$fields = array_column($this->propertyMap, 0);
 		$fields[] = 'a.id';
 		$fields[] = 'a.uri';
@@ -570,6 +575,10 @@ public function getPublicCalendars() {
 	 * @throws NotFound
 	 */
 	public function getPublicCalendar($uri) {
+		// Sharing via link must be enabled.
+		if ($this->config->getAppValue('core', 'shareapi_allow_links', 'yes') === 'no' ) {
+			throw new NotFound('Node with name \'' . $uri . '\' could not be found');
+		}
 		$fields = array_column($this->propertyMap, 0);
 		$fields[] = 'a.id';
 		$fields[] = 'a.uri';

diff --git a/apps/dav/lib/CalDAV/Publishing/PublishPlugin.php b/apps/dav/lib/CalDAV/Publishing/PublishPlugin.php
@@ -1,6 +1,7 @@
 <?php
 /**
  * @copyright Copyright (c) 2016 Thomas Citharel <[email protected]>
+ * @copyright Copyright (c) 2022 Informatyka Boguslawski sp. z o.o. sp.k., http://www.ib.pl/
  *
  * @author Christoph Wurst <[email protected]>
  * @author Georg Ehrke <[email protected]>
@@ -205,6 +206,11 @@ public function httpPost(RequestInterface $request, ResponseInterface $response)
 				}
 			}
 
+			// Sharing via link must be enabled.
+			if ($this->config->getAppValue('core', 'shareapi_allow_links', 'yes') === 'no') {
+				return;
+			}
+
 			$node->setPublishStatus(true);
 
 			// iCloud sends back the 202, so we will too.