From fcc239667fb711ccb321fe228f14990f119ca534 Mon Sep 17 00:00:00 2001 From: Louis Chemineau Date: Mon, 26 Feb 2024 16:57:30 +0100 Subject: [PATCH] fix(dav): Init ViewOnlyPlugin after auth Signed-off-by: Louis Chemineau --- apps/dav/lib/Server.php | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/apps/dav/lib/Server.php b/apps/dav/lib/Server.php index 9eeaf52229d73..70768e3d2791e 100644 --- a/apps/dav/lib/Server.php +++ b/apps/dav/lib/Server.php @@ -237,11 +237,6 @@ public function __construct(IRequest $request, string $baseUri) { $this->server->addPlugin(new FakeLockerPlugin()); } - // Allow view-only plugin for webdav requests - $this->server->addPlugin(new ViewOnlyPlugin( - \OC::$server->getUserFolder(), - )); - if (BrowserErrorPagePlugin::isBrowserRequest($request)) { $this->server->addPlugin(new BrowserErrorPagePlugin()); } @@ -251,6 +246,11 @@ public function __construct(IRequest $request, string $baseUri) { // wait with registering these until auth is handled and the filesystem is setup $this->server->on('beforeMethod:*', function () use ($root, $lazySearchBackend, $logger) { + // Allow view-only plugin for webdav requests + $this->server->addPlugin(new ViewOnlyPlugin( + \OC::$server->getUserFolder(), + )); + // custom properties plugin must be the last one $userSession = \OC::$server->getUserSession(); $user = $userSession->getUser();