Merge pull request #2251 from nextcloud/backport/2250/stable14

[stable14] fix(FoldersController): Refactor addToFolder
nextcloud · Dec 24, 2024 · 97c2075 · 97c2075
2 parents d6b07c2 + 552ea54
commit 97c2075
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/lib/Controller/FoldersController.php b/lib/Controller/FoldersController.php
@@ -220,7 +220,7 @@ public function getFolder($folderId): JSONResponse {
 	 * @throws UnauthenticatedError
 	 */
 	public function addToFolder($folderId, $bookmarkId): JSONResponse {
-		if (!Authorizer::hasPermission(Authorizer::PERM_WRITE, $this->authorizer->getPermissionsForFolder($folderId, $this->request)) &&
+		if (!Authorizer::hasPermission(Authorizer::PERM_WRITE, $this->authorizer->getPermissionsForFolder($folderId, $this->request)) ||
 			!Authorizer::hasPermission(Authorizer::PERM_EDIT, $this->authorizer->getPermissionsForBookmark($bookmarkId, $this->request))) {
 			$res = new JSONResponse(['status' => 'error', 'data' => ['Not found']], Http::STATUS_NOT_FOUND);
 			$res->throttle();