[GH-ISSUE #268] A limited user shows root folder when using webdav #141

Closed
opened 2026-04-08 16:50:38 +03:00 by zhus · 1 comment
Owner

Originally created by @fimmspin on GitHub (Sep 26, 2023).
Original GitHub issue: https://github.com/sigoden/dufs/issues/268

I have an admin user with full access to / folder and a limited user with access only to /TEMP folder.

If connecting via web all is OK and showed correctly.

If connecting via Windows Webdav mapped drive using the limited user credentials i see the / root folder file listing and folders (there is really no access to file contents, resulting in a 401 or 403 error, correctly).

Would it be possible to set the /TEMP folder directly as / root when using the limited user credentials, as in the web version?

Environment:

  • Dufs version: 0.36.0
  • Browser/Webdav Info: Chrome/Windows 8.1 webdav
  • OS Info: Windows 8.1
Originally created by @fimmspin on GitHub (Sep 26, 2023). Original GitHub issue: https://github.com/sigoden/dufs/issues/268 I have an admin user with full access to / folder and a limited user with access only to /TEMP folder. If connecting via web all is OK and showed correctly. If connecting via Windows Webdav mapped drive using the limited user credentials i see the / root folder file listing and folders (there is really no access to file contents, resulting in a 401 or 403 error, correctly). Would it be possible to set the /TEMP folder directly as / root when using the limited user credentials, as in the web version? **Environment:** - Dufs version: 0.36.0 - Browser/Webdav Info: Chrome/Windows 8.1 webdav - OS Info: Windows 8.1
zhus closed this issue 2026-04-08 16:50:38 +03:00
Author
Owner

@sigoden commented on GitHub (Sep 26, 2023):

The awser is same to #263

Webdav must be designed like this.

This is because some webdav clients do not carry the Authorization header when listing files.

<!-- gh-comment-id:1735349155 --> @sigoden commented on GitHub (Sep 26, 2023): The awser is same to #263 Webdav must be designed like this. This is because some webdav clients do not carry the Authorization header when listing files.
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: sigoden/dufs#141