Add ability to limit sharing to owner

Signed-off-by: Georg Ehrke <developer@georgehrke.com>

Author: georgehrke

apps/dav/lib/CalDAV/Publishing/PublishPlugin.php

@@ -130,8 +130,13 @@ public function propFind(PropFind $propFind, INode $node) {
 			});
 
 			$propFind->handle('{'.self::NS_CALENDARSERVER.'}allowed-sharing-modes', function () use ($node) {
-				$canShare = (!$node->isSubscription() && $node->canWrite());
-				$canPublish = (!$node->isSubscription() && $node->canWrite());
+				if ($this->config->getAppValue('dav', 'limitAddressBookAndCalendarSharingToOwner', 'no') === 'yes') {
+					$canShare = (!$node->isSubscription() && $node->getOwner() === $node->getPrincipalURI());
+					$canPublish = (!$node->isSubscription() && $node->getOwner() === $node->getPrincipalURI());
+				} else {
+					$canShare = (!$node->isSubscription() && $node->canWrite());
+					$canPublish = (!$node->isSubscription() && $node->canWrite());
+				}
 
 				return new AllowedSharingModes($canShare, $canPublish);
 			});
@@ -190,7 +195,14 @@ public function httpPost(RequestInterface $request, ResponseInterface $response)
 
 			// If there's no ACL support, we allow everything
 			if ($acl) {
+				/** @var \Sabre\DAVACL\Plugin $acl */
 				$acl->checkPrivileges($path, '{DAV:}write');
+
+				$limitSharingToOwner = $this->config->getAppValue('dav', 'limitAddressBookAndCalendarSharingToOwner', 'no') === 'yes';
+				$isOwner = $acl->getCurrentUserPrincipal() === $node->getOwner();
+				if ($limitSharingToOwner && !$isOwner) {
+					return;
+				}
 			}
 
 			$node->setPublishStatus(true);
@@ -218,7 +230,13 @@ public function httpPost(RequestInterface $request, ResponseInterface $response)
 
 			// If there's no ACL support, we allow everything
 			if ($acl) {
+				/** @var \Sabre\DAVACL\Plugin $acl */
 				$acl->checkPrivileges($path, '{DAV:}write');
+
+				if ($this->config->getAppValue('dav', 'limitAddressBookAndCalendarSharingToOwner', false)
+					&& $acl->getCurrentUserPrincipal() !== $node->getOwner()) {
+					return;
+				}
 			}
 
 			$node->setPublishStatus(false);

apps/dav/lib/DAV/Sharing/Plugin.php

@@ -27,6 +27,7 @@
 use OCA\DAV\Connector\Sabre\Auth;
 use OCA\DAV\DAV\Sharing\Xml\Invite;
 use OCA\DAV\DAV\Sharing\Xml\ShareRequest;
+use OCP\IConfig;
 use OCP\IRequest;
 use Sabre\DAV\Exception\NotFound;
 use Sabre\DAV\INode;
@@ -46,15 +47,20 @@ class Plugin extends ServerPlugin {
 	/** @var IRequest */
 	private $request;
 
+	/** @var IConfig */
+	private $config;
+
 	/**
 	 * Plugin constructor.
 	 *
 	 * @param Auth $authBackEnd
 	 * @param IRequest $request
+	 * @param IConfig $config
 	 */
-	public function __construct(Auth $authBackEnd, IRequest $request) {
+	public function __construct(Auth $authBackEnd, IRequest $request, IConfig $config) {
 		$this->auth = $authBackEnd;
 		$this->request = $request;
+		$this->config = $config;
 	}
 
 	/**
@@ -164,6 +170,12 @@ public function httpPost(RequestInterface $request, ResponseInterface $response)
 				if ($acl) {
 					/** @var \Sabre\DAVACL\Plugin $acl */
 					$acl->checkPrivileges($path, '{DAV:}write');
+
+					$limitSharingToOwner = $this->config->getAppValue('dav', 'limitAddressBookAndCalendarSharingToOwner', 'no') === 'yes';
+					$isOwner = $acl->getCurrentUserPrincipal() === $node->getOwner();
+					if ($limitSharingToOwner && !$isOwner) {
+						return;
+					}
 				}
 
 				$node->updateShares($message->set, $message->remove);