ZP-994 On missing permissions WebserviceInfo->ListUserFolders() returns

own folders.

Released under the Affero GNU General Public License (AGPL) version 3.

src/lib/webservice/webserviceinfo.php

@@ -57,6 +57,7 @@ class WebserviceInfo {
         $hasRights = ZPush::GetBackend()->Setup($user);
         ZLog::Write(LOGLEVEL_INFO, sprintf("WebserviceInfo::ListUserFolders(): permissions to open store '%s': %s", $user, Utils::PrintAsString($hasRights)));
 
+        if ($hasRights) {
             $folders = ZPush::GetBackend()->GetHierarchy();
             ZPush::GetTopCollector()->AnnounceInformation(sprintf("Retrieved details of %d folders", count($folders)), true);
 
@@ -65,6 +66,7 @@ class WebserviceInfo {
                 unset($folder->Store, $folder->flags, $folder->content, $folder->NoBackendFolder);
                 $output[] = $folder;
             }
+        }
 
         return $output;
     }