fix(FolderController): Require Groupfolder admin on all endpoints

Signed-off-by: provokateurin <[email protected]>
nextcloud · Jan 6, 2025 · d59b902 · d59b902
1 parent 7ecfebc
commit d59b902
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/lib/Controller/FolderController.php b/lib/Controller/FolderController.php
@@ -95,6 +95,7 @@ private function formatFolder(array $folder): array {
 	 *
 	 * 200: Groupfolders returned
 	 */
+	#[RequireGroupFolderAdmin]
 	#[NoAdminRequired]
 	#[FrontpageRoute(verb: 'GET', url: '/folders')]
 	public function getFolders(bool $applicable = false): DataResponse {
@@ -133,6 +134,7 @@ public function getFolders(bool $applicable = false): DataResponse {
 	 *
 	 * 200: Groupfolder returned
 	 */
+	#[RequireGroupFolderAdmin]
 	#[NoAdminRequired]
 	#[FrontpageRoute(verb: 'GET', url: '/folders/{id}')]
 	public function getFolder(int $id): DataResponse {
@@ -479,6 +481,7 @@ private function folderDataForXML(array $data): array {
 	 *
 	 * 200: ACL Mappings returned
 	 */
+	#[RequireGroupFolderAdmin]
 	#[NoAdminRequired]
 	#[FrontpageRoute(verb: 'GET', url: '/folders/{id}/search')]
 	public function aclMappingSearch(int $id, string $search = ''): DataResponse {