mirror of
https://github.com/inverse-inc/sogo.git
synced 2026-05-28 06:35:26 +00:00
oc: Check permissions on read opening a shared folder
This is a security issue that allowed a user to read the number of messages and its subjects when it does not have any permission to read. Now the user cannot see other's folder without asking for me to the owner.
This commit is contained in:
@@ -244,8 +244,13 @@ static void mapiapp_cleanup(void)
|
||||
\details Create a connection context to the sogo backend
|
||||
|
||||
\param mem_ctx pointer to the memory context
|
||||
\param conn_info pointer to the connection information available for this context
|
||||
(database connection, connected user, replica server info)
|
||||
\param indexing pointer to the indexing database connection
|
||||
\param uri pointer to the sogo path
|
||||
\param private_data pointer to the private backend context
|
||||
|
||||
\note the developer must free allocated private_data
|
||||
*/
|
||||
|
||||
static enum mapistore_error
|
||||
|
||||
Reference in New Issue
Block a user