Renaming folders: Security aspects
Please update the renameFolder
method to properly check that the user has MANAGE
permission on the source folder -- and that the user has WRITE
permission in the destination folder (if it exists -- or ADMINISTRATOR
role if target parent is /
).
After creating the new RepositoryFolder
the permissions assigned directly to the source folder are copied to the target folder.