fix: Return only administered groups of a user for subadmins

Signed-off-by: Christopher Ng <chrng8@gmail.com>
nextcloud · Mar 12, 2024 · 6c4e4a4 · 6c4e4a4
1 parent 9d4f954
commit 6c4e4a4
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/apps/provisioning_api/lib/Controller/AUserData.php b/apps/provisioning_api/lib/Controller/AUserData.php
@@ -137,6 +137,9 @@ protected function getUserData(string $userId, bool $includeScopes = false): ?ar
 		$groups = $this->groupManager->getUserGroups($targetUserObject);
 		$gids = [];
 		foreach ($groups as $group) {
+			if (!$this->groupManager->getSubAdmin()->isSubAdminOfGroup($currentLoggedInUser, $group)) {
+				continue;
+			};
 			$gids[] = $group->getGID();
 		}