Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Share permissions misbehaving #2679

Closed
andreas-p opened this issue Dec 14, 2016 · 9 comments
Closed

Share permissions misbehaving #2679

andreas-p opened this issue Dec 14, 2016 · 9 comments

Comments

@andreas-p
Copy link

Testing using the web GUI:
I have a folder shared to others, with privileges limited to create only. With NC10, the behaviour was as expected: other users could add files to the directory and view them, but couldn't edit or delete them (archiving access). Files uploaded by me were read-only for other users.
For maintenance purposes, the owner of the share (me) was allowed everything on the files (the share owner is considered to be the owner of files in shared folders as well).

With NC11, I see files created with filecache.permissions=1 if other users upload to my shared directory, preventing me from changing/deleting those files (subdirectories as well). I have to add the delete permission bit to filecache.permissions to delete them.

@andreas-p
Copy link
Author

More bad behaviour:
Other uses can delete directories on that share, even if they can't delete files that are in those directories.

@LukasReschke
Copy link
Member

@icewind1991

@LukasReschke LukasReschke added this to the Nextcloud 11.0.1 milestone Dec 14, 2016
@LukasReschke
Copy link
Member

@icewind1991 Also please add integration tests. Thanks. Preferably real ones and not the ones in PHPunit ;)

@LukasReschke
Copy link
Member

@icewind1991 I'd also appreciate to have such kind of tests for any permission related changes.

cc @rullzer FYI

@rullzer
Copy link
Member

rullzer commented Dec 14, 2016

The permission=1 thing is solved by #2673

@rullzer
Copy link
Member

rullzer commented Dec 14, 2016

More bad behaviour:
Other uses can delete directories on that share, even if they can't delete files that are in those directories.

I can't reproduce this on NC11
Can you post detailed steps?

@andreas-p
Copy link
Author

I can't reproduce that delete directory issue now.
I think I've seen the share user being able to delete a file created by the share owner, but couldn't reproduce it either.
I'm not sure if it's a spurious program issue or a user glitch.

@nickvergessen nickvergessen changed the title NC11: share permissions misbehaving Share permissions misbehaving Dec 15, 2016
@rullzer
Copy link
Member

rullzer commented Dec 15, 2016

Ok then this is solved by #2673

@andreas-p if you manage to reproduce the delete problem. Please open a new issue.

@rullzer rullzer closed this as completed Dec 15, 2016
@andreas-p
Copy link
Author

Will do so.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

4 participants