Verify denied operations on the actual file-drop DAV endpoint
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883
This commit is contained in:
codex 2026-09-05 20:41:23 +02:00
parent feee30988b
commit 47425d35bb

View file

@ -137,7 +137,8 @@ def run(args, receipt):
restored = subprocess_bytes(['age', '-d', '-i', '/dev/stdin', str(cipher)], (values['AGE_PRIVATE_KEY'].strip() + '\n').encode())
require(restored == plain, 'decrypted_fixture_mismatch')
for method in ['GET', 'DELETE']:
code, _ = request(HOST + '/public.php/webdav' + fixture_path, method, auth=(token, ''))
code, _ = request(upload_root + fixture_path, method, auth=(token, ''))
receipt['runtime_' + method.lower() + '_http_status'] = code
require(code in (401, 403, 404), 'upload_grant_exceeds_create_only')
code, present = request(owner_root + fixture_path, auth=auth)
require(code == 200 and present == encrypted, 'fixture_not_preserved_by_negative_check')