Skip to content

I can create document in an account which is not own to me

related to : #28 (closed)

6a0830a4-630e-4f34-977d-291975a6c760 <- It's a passport id of some another user

lib.documentCreateDocument("/test.odt", "6a0830a4-630e-4f34-977d-291975a6c760", "application/zip")

7.1 I can upload document into account which is not own to me

6a0830a4-630e-4f34-977d-291975a6c760 <- It's a passport id of some another user

d628d848-f6c1-4042-8138-4537288f9aeb <- resource id from prevoius request

await lib.documentPutDocument("6a0830a4-630e-4f34-977d-291975a6c760", "d628d848-f6c1-4042-8138-4537288f9aeb" ,$0.files[0])

Result: {code: "200", data: "", status: "Document created"}

Should be access denied