filebrowser/settings
Henrique Dias fb6aeba9ea
fix(users): make the provisioned scope check atomic with the save
The check that stops two usernames normalizing to the same home directory
ran as a storage operation separate from the save, so two first-time users
provisioned concurrently could both observe a free scope and both be saved
into it, ending up sharing one home directory.

Move the check into users.Storage.SaveProvisioned, which holds a single
lock across the lookup and the save, and reduce CreateUserHome to deriving
and creating the directory. This covers all three provisioning paths:
signup, proxy auth and hook auth.

Refs GHSA-j7jh-37pf-mf8h
2026-07-25 22:15:27 +02:00
..
branding.go feat: add a new setting that disables the display of the disk usage (#2136) 2023-02-15 23:30:48 +01:00
defaults.go feat: add "redirect after copy/move" user setting (#5662) 2026-01-10 10:27:54 +01:00
dir.go fix(users): make the provisioned scope check atomic with the save 2026-07-25 22:15:27 +02:00
dir_test.go fix(users): make the provisioned scope check atomic with the save 2026-07-25 22:15:27 +02:00
settings.go fix: restore symlink behavior as opt-in followExternalSymlinks 2026-06-23 13:19:51 +02:00
storage.go refactor: cleanup package names (#5605) 2025-12-06 10:52:11 +01:00
tus.go feat: integrate tus.io for resumable and chunked uploads (#2145) 2023-07-28 18:15:44 +02:00