Edouard Vanbelle f5f5b1167f feat(drive): remove _for_owner() and use authz ...

remove related IDOR protection as Hurl tests are covering this surface

2026-07-02 01:14:02 +02:00

..

admin_handler.rs

feat(drive): personal drives have the user's quota in commun

2026-06-26 13:59:02 +02:00

app_password_handler.rs

feat(passwordless): pass4: add env variable to enable mgaiclink on account with password

2026-06-03 00:35:25 +02:00

auth_handler.rs

feat(drive): personal drives have the user's quota in commun

2026-06-26 13:59:02 +02:00

batch_handler.rs

feat(openapi): show explicitly path requiring bearerAuth

2026-05-28 00:48:20 +02:00

caldav_handler.rs

fix(webdav): achieve 100% litmus compliance (59/59 tests)

2026-06-30 08:58:13 +02:00

carddav_handler.rs

fix(webdav): achieve 100% litmus compliance (59/59 tests)

2026-06-30 08:58:13 +02:00

chunked_upload_handler.rs

feat(drive): add quota calculus per drive

2026-06-24 22:28:31 +02:00

contacts_handler.rs

feat(drive): UI: add drive edition for admin

2026-06-24 01:20:44 +02:00

dedup_handler.rs

refactor(api): remove 5 dead routes + stale deprecation markers

2026-06-21 11:35:09 +02:00

delta_upload_handler.rs

Delta download: file manifest + user-scoped chunk fetch for sync clients

2026-06-11 16:38:02 +00:00

device_auth_handler.rs

chore: remove all executable attributes on non bash files

2026-04-01 23:14:42 +02:00

drive_handler.rs

feat(drive): prepare removal of user_id

2026-07-02 00:01:20 +02:00

favorites_handler.rs

fix(drive): fix drive_id on copy to other drive

2026-06-29 23:21:17 +02:00

file_handler.rs

feat(drive): add quota calculus per drive

2026-06-24 22:28:31 +02:00

folder_handler.rs

feat(drive): remove _for_owner() and use authz

2026-07-02 01:14:02 +02:00

grant_handler.rs

feat(drive): add drive policie

2026-06-26 14:04:36 +02:00

i18n_handler.rs

feat(i18n): add i18n on server side

2026-06-03 13:27:12 +02:00

magic_link_handler.rs

security(/magic): no cache + no referer + no index

2026-06-03 16:19:03 +02:00

mod.rs

fix(webdav): remove spurious calendar_rest_handler module declaration

2026-06-25 22:44:27 +02:00

music_handler.rs

feat(openapi): show explicitly path requiring bearerAuth

2026-05-28 00:48:20 +02:00

people_handler.rs

refactor(api): remove 5 dead routes + stale deprecation markers

2026-06-21 11:35:09 +02:00

photos_handler.rs

feat(drive): prepare removal of user_id

2026-07-02 00:01:20 +02:00

recent_handler.rs

fix(drive): fix drive_id on copy to other drive

2026-06-29 23:21:17 +02:00

search_handler.rs

perf(search): clamp search page size to bound per-request memory

2026-06-09 14:59:01 +00:00

share_handler.rs

refactor: remove dead OptimizedFileContent::Mmap variant

2026-06-22 08:10:54 +00:00

subject_group_handler.rs

security(external_user): protect unnecessary route access to external users

2026-06-03 00:32:00 +02:00

trash_handler.rs

feat(drive): permanent deletion per drive

2026-06-24 21:56:27 +02:00

users_handler.rs

feat(api): can grant external user (via email)

2026-06-03 00:31:59 +02:00

webdav_handler.rs

feat(drive): repl user_id by caller has read access

2026-07-02 01:03:39 +02:00

wopi_handler.rs

feat(drive): complete updated_by created_by

2026-06-19 16:06:38 +02:00