Skip to content

adjust local controller to better handle permission checks#2522

Merged
AndyScherzinger merged 1 commit into
masterfrom
fix/noid/local-controller-refactor
Jun 16, 2026
Merged

adjust local controller to better handle permission checks#2522
AndyScherzinger merged 1 commit into
masterfrom
fix/noid/local-controller-refactor

Conversation

@cristianscheid

@cristianscheid cristianscheid commented Jun 15, 2026

Copy link
Copy Markdown
Member

Summary

  • add permission checks and brute force protection on lib/Controller/LocalController.php

Checklist

AI (if applicable)

  • The content of this PR was partly or fully generated using AI

@cristianscheid
cristianscheid force-pushed the fix/noid/local-controller-refactor branch from 1016287 to 575e2fb Compare June 15, 2026 16:01
@cristianscheid cristianscheid changed the title Fix/noid/local controller refactor LocalController refactor Jun 15, 2026
@cristianscheid cristianscheid changed the title LocalController refactor adjust local controller to better handle permission checks Jun 15, 2026
@cristianscheid cristianscheid self-assigned this Jun 15, 2026
Signed-off-by: Cristian Scheid <cristianscheid@gmail.com>
@cristianscheid

Copy link
Copy Markdown
Member Author

/backport to stable34

@cristianscheid

Copy link
Copy Markdown
Member Author

/backport to stable33

@cristianscheid

Copy link
Copy Markdown
Member Author

/backport to stable32

@cristianscheid

Copy link
Copy Markdown
Member Author

/backport to stable31

@jonas2515

Copy link
Copy Markdown

This PR broke circle members listing and adding of members to circles (and likely more) for us in both Nextcloud 32 and 33.

The problem is once again nesting and the mess with groups vs circles. We're seeing requests fail for a circle which has only a single member: A group (not a circle). The requests fail for members of that group, as they are part of the circle only via nesting.

It's really unfortunate, that PRs like this get backported so handwave-y, and apparently without any testing. :(

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants