Skip to content

[stable5.2] fix: require explicit share permission for bulk submission endpoints#3292

Merged
Chartman123 merged 1 commit intostable5.2from
backport/3290-stable5.2
Apr 14, 2026
Merged

[stable5.2] fix: require explicit share permission for bulk submission endpoints#3292
Chartman123 merged 1 commit intostable5.2from
backport/3290-stable5.2

Conversation

@pringelmann
Copy link
Copy Markdown
Collaborator

Backport of #3290

…3290)

* fix: require explicit share permission for bulk submission actions

Add permission guard to deleteAllSubmissions() to verify the user
holds the required share-level permission, matching the pattern
already used by the single-item endpoint.
-e
Signed-off-by: Peter Ringelmann <peter.ringelmann@nextcloud.com>

* PR feedback
-e
Signed-off-by: Peter Ringelmann <peter.ringelmann@nextcloud.com>

---------

Signed-off-by: Peter Ringelmann <peter.ringelmann@nextcloud.com>
@codecov
Copy link
Copy Markdown

codecov bot commented Apr 14, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

@Chartman123 Chartman123 merged commit a74641f into stable5.2 Apr 14, 2026
58 checks passed
@Chartman123 Chartman123 deleted the backport/3290-stable5.2 branch April 14, 2026 08:06
@pringelmann pringelmann mentioned this pull request Apr 15, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants