diff --git a/lib/TokenManager.php b/lib/TokenManager.php index c58e846786..b1128953c2 100644 --- a/lib/TokenManager.php +++ b/lib/TokenManager.php @@ -105,11 +105,11 @@ public function generateWopiToken(string $fileId, ?string $shareToken = null, ?s throw new ShareNotFound(); } + $owneruid = $share->getShareOwner(); $updatable = (bool)($share->getPermissions() & \OCP\Constants::PERMISSION_UPDATE); + $updatable = $updatable && $this->permissionManager->userCanEdit($owneruid); $hideDownload = $share->getHideDownload(); - $owneruid = $share->getShareOwner(); $rootFolder = $this->rootFolder->getUserFolder($owneruid); - } elseif ($this->userId !== null) { try { $editoruid = $this->userId;