From 16e36a6df6f2b6defe02f2abab3fe3829fadc4a2 Mon Sep 17 00:00:00 2001 From: Alain Bourgeois Date: Wed, 17 Jan 2024 08:13:58 +0100 Subject: [PATCH 1/2] Update lib/acl-checker.js Co-authored-by: Ted Thibodeau Jr --- lib/acl-checker.js | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lib/acl-checker.js b/lib/acl-checker.js index eeb6a176..8ebba38a 100644 --- a/lib/acl-checker.js +++ b/lib/acl-checker.js @@ -133,7 +133,7 @@ class ACLChecker { // without Read, the response code will reveal whether a Container is empty or not if (directory && this.resource.endsWith('/')) resourceAccessDenied([ACL('Read'), ACL('Write')]) // if resource and acl have same parent container, - // then Read Write from parent is required + // then both Read and Write on parent is required else if (!directory && aclFile.value.endsWith(`/${this.suffix}`)) await accessdeniedFromParent([ACL('Read'), ACL('Write')]) // deleting a Document From 897207c1f6b94457da16102c5af9a31f011f68c5 Mon Sep 17 00:00:00 2001 From: Alain Bourgeois Date: Wed, 17 Jan 2024 08:14:04 +0100 Subject: [PATCH 2/2] Update lib/acl-checker.js Co-authored-by: Ted Thibodeau Jr --- lib/acl-checker.js | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lib/acl-checker.js b/lib/acl-checker.js index 8ebba38a..89bcef8e 100644 --- a/lib/acl-checker.js +++ b/lib/acl-checker.js @@ -170,7 +170,7 @@ class ACLChecker { return `${parts.join('/')}/` } - // Gets the ACL's that applies to the resource + // Gets any ACLs that apply to the resource // DELETE uses docAcl when docAcl is parent to the resource // or docAcl and parentAcl when docAcl is the ACL of the Resource async getNearestACL (method) {