fix: Consider owner group membership for public share links

Signed-off-by: Julius Härtl <[email protected]>
nextcloud · Dec 22, 2023 · dd89e2b · dd89e2b
1 parent cab3da3
commit dd89e2b
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/lib/TokenManager.php b/lib/TokenManager.php
@@ -105,11 +105,11 @@ public function generateWopiToken(string $fileId, ?string $shareToken = null, ?s
 				throw new ShareNotFound();
 			}
 
+			$owneruid = $share->getShareOwner();
 			$updatable = (bool)($share->getPermissions() & \OCP\Constants::PERMISSION_UPDATE);
+			$updatable = $updatable && $this->permissionManager->userCanEdit($owneruid);
 			$hideDownload = $share->getHideDownload();
-			$owneruid = $share->getShareOwner();
 			$rootFolder = $this->rootFolder->getUserFolder($owneruid);
-
 		} elseif ($this->userId !== null) {
 			try {
 				$editoruid = $this->userId;