Jonas Meurer af00399893 Respect user enumeration settings in user status lists ... So far, the functions to find user statuses listed didn't respect user enumeration settings (`shareapi_allow_share_dialog_user_enumeration` and `shareapi_restrict_user_enumeration_to_group` core app settings). Fix this privacy issue by returning an empty list in case `shareapi_allow_share_dialog_user_enumeration` is unset or `shareapi_restrict_user_enumeration_to_group` is set. In the long run, we might want to return users from common groups if `shareapi_restrict_user_enumeration_to_group` is set. It's complicated to implement this in a way that scales, though. See the discussion at https://github.com/nextcloud/server/pull/27879#pullrequestreview-753655308 for details. Also, don't register the user_status dashboard widget at all if `shareapi_allow_share_dialog_user_enumeration` is unset or `shareapi_restrict_user_enumeration_to_group` is set. Fixes: #27122 Signed-off-by: Jonas Meurer <jonas@freesources.org>		2021-10-25 10:00:20 +02:00
..
AppInfo	Respect user enumeration settings in user status lists	2021-10-25 10:00:20 +02:00
BackgroundJob	Update php licenses	2021-06-04 22:02:41 +02:00
Connector	Update php licenses	2021-06-04 22:02:41 +02:00
Controller	Save a request everytime we send the heartbeat	2021-06-16 11:32:32 +02:00
Dashboard	Update php licenses	2021-06-04 22:02:41 +02:00
Db	Merge pull request #27375 from nextcloud/bugfix/noid/dont-update-offline-status	2021-06-07 12:12:33 +02:00
Exception	Update php licenses	2021-06-04 22:02:41 +02:00
Listener	Update php licenses	2021-06-04 22:02:41 +02:00
Migration	Update php licenses	2021-06-04 22:02:41 +02:00
Service	Respect user enumeration settings in user status lists	2021-10-25 10:00:20 +02:00
Capabilities.php	Update php licenses	2021-06-04 22:02:41 +02:00