From 09a26166b4f79446e7174c017380f6db45444e32 Mon Sep 17 00:00:00 2001 From: Henrique Dias Date: Sat, 14 Mar 2026 08:31:55 +0100 Subject: [PATCH] fix: make perm.share depend on share.download --- frontend/src/views/files/FileListing.vue | 5 ++++- http/share.go | 2 +- 2 files changed, 5 insertions(+), 2 deletions(-) diff --git a/frontend/src/views/files/FileListing.vue b/frontend/src/views/files/FileListing.vue index f612ab1d..0ad8bd8c 100644 --- a/frontend/src/views/files/FileListing.vue +++ b/frontend/src/views/files/FileListing.vue @@ -480,7 +480,10 @@ const headerButtons = computed(() => { shell: authStore.user?.perm.execute && enableExec, delete: fileStore.selectedCount > 0 && authStore.user?.perm.delete, rename: fileStore.selectedCount === 1 && authStore.user?.perm.rename, - share: fileStore.selectedCount === 1 && authStore.user?.perm.share, + share: + fileStore.selectedCount === 1 && + authStore.user?.perm.share && + authStore.user?.perm.download, move: fileStore.selectedCount > 0 && authStore.user?.perm.rename, copy: fileStore.selectedCount > 0 && authStore.user?.perm.create, }; diff --git a/http/share.go b/http/share.go index 509a7b21..35125dba 100644 --- a/http/share.go +++ b/http/share.go @@ -20,7 +20,7 @@ import ( func withPermShare(fn handleFunc) handleFunc { return withUser(func(w http.ResponseWriter, r *http.Request, d *data) (int, error) { - if !d.user.Perm.Share { + if !d.user.Perm.Share || !d.user.Perm.Download { return http.StatusForbidden, nil }