From c6c99c89e68d43b705c702b4651cac81c78286d3 Mon Sep 17 00:00:00 2001
From: alecpl <alec@alec.pl>
Date: Thu, 04 Aug 2011 05:01:36 -0400
Subject: [PATCH] - Add ACL check on parent folder
---
program/steps/settings/save_folder.inc | 10 ++++++++++
1 files changed, 10 insertions(+), 0 deletions(-)
diff --git a/program/steps/settings/save_folder.inc b/program/steps/settings/save_folder.inc
index 498829c..2f51562 100644
--- a/program/steps/settings/save_folder.inc
+++ b/program/steps/settings/save_folder.inc
@@ -55,6 +55,16 @@
}
}
+// Check access rights to the parent folder
+if (!$error && strlen($path)) {
+ $parent_opts = $RCMAIL->imap->mailbox_info($path);
+ if ($parent_opts['namespace'] != 'personal'
+ && (empty($parent_opts['rights']) || !preg_match('/[ck]/', implode($parent_opts)))
+ ) {
+ $error = rcube_label('parentnotwritable');
+ }
+}
+
if ($error) {
$OUTPUT->command('display_message', $error, 'error');
}
--
Gitblit v1.9.1