Re: [eGroupWare-developers] webdav file creation problem

[Ralf B. <rb...@st...>]

Ok, fix is commited and backport to all branches including 1.8

Ralf

Am 30.08.11 18:58, schrieb saw:
> I agree, this is a security issue. I had not considered this, because I
> thought the permission for file creation are checked otherwise and not
> with the lock function. But you are right, someone could obtain a simple
> lock command and lock files without permission. Your lock patch for
> class.egw_vfs.inc.php fixes the problem too and it is more global nature
> because it works with other vfs. Please apply this to the next EGW
> revision. Thanks in advance, S. Wefel
> ------------------------------------------------------------------------
> View this message in context: Re: webdav file creation problem
> <http://egroupware.219119.n3.nabble.com/webdav-file-creation-problem-tp3295144p3296100.html>
> Sent from the egroupware-developers mailing list archive
> <http://egroupware.219119.n3.nabble.com/egroupware-developers-f278587.html>
> at Nabble.com.
>
>
> ------------------------------------------------------------------------------
> Special Offer -- Download ArcSight Logger for FREE!
> Finally, a world-class log management solution at an even better
> price-free! And you'll get a free "Love Thy Logs" t-shirt when you
> download Logger. Secure your free ArcSight Logger TODAY!
> http://p.sf.net/sfu/arcsisghtdev2dev
>
>
>
> _______________________________________________
> eGroupWare-developers mailing list
> eGr...@li...
> https://lists.sourceforge.net/lists/listinfo/egroupware-developers


-- 
Ralf Becker
Director Software Development

Stylite AG

Morschheimer Strasse 15 | Tel. +49 6352 70629 0
D-67292 Kirchheimbolanden | Fax. +49 6352 70629 30

Email: rb...@st...

www.stylite.de | www.egroupware.org

Managing Directors: Andre Keller | Ralf Becker | Gudrun Mueller
Chairman of the supervisory board: Prof. Dr. Birger Leon Kropshofer

Commerzbank BLZ 55040022 | Account 218111300
IBAN DE33 5504 0022 0218 1113 00 | BIC COBADEFFXXX
VAT DE214280951 | Registered HRB 31158 Kaiserslautern Germany