Share access combination: read-only and upload of new files in same (internal)share or link

[cguentherTUChemnitz]

Motivation: Is your feature request related to a problem? Please describe.
nextcloud as family event image sharing platform

event-content-sharing:
Nextcloud is used as a private instance to share family and party photos internally for the family. Every household has it's own account, like grandparents, parents and children. (Some households have their own nextcloud instance connected via federated share, but this should not impact the described use-case here.) Every household has a sync-client on the desktop syncing the "shared-with-me" folder. When family event like a birthday takes place, a lot of different people take photos there. So afterwards a central family member creates a share for the event and shares it with every party attended household. The sync-client creates automatically the folder for everyone receiving this share and everyone who did take a pictures is able to place its own photos there, as well as looking for the images of the others.

The problem there is, that we need access right combination in a single share of:

• read-only access to existing files
• upload capability for new files
• forbidden delete existing files
• forbidden overwrite or modification of existing files

So this comes down to access rights of read-only with upload capability.

For now this can be achieved by providing two different shares to the same folder, one as upload-only and one as read-only. But this is too complex to explain and maintain, especially for not technical advanced people like grandparents. So this is a crucial feature here for this use-case to keep it simple for the share-receiving party, providing data safety against erroneous file- overwrites, deletes, moves etc.

Describe the solution you'd like
The solution in my eyes would be to make it possible to combine the read-only and upload share option in the same share, providing read-only access to existing files and possibility to upload new ones, but protect against erroneous file- overwrites, deletes, moves. It is also in my eyes fine, that the uploader has after the upload only read-only access to its own uploaded files. The management access should lie in the ownership of the share, like the user who created the share, or the group-members of the groupfolder where it resides in.

Describe alternatives you've considered
In my eyes also business use-cases can benefit from this option, like the possibility to check days after an upload-only share upload, if the correct files were uploaded. It happens in my eyes also there quite often that a business needs a file-drop from a partner. When later questions arrive and a phone-call is initialized, where both sides need to sync their understanding, if they are talking about the "same" uploaded content. In this case it would be beneficial if also the uploader would be able to look into his own already uploaded file in read-only mode using the same share / link where the upload was done.

[joshtrichards]

Hi @cguentherTUChemnitz - Have you attempted any of this through the optional groupfolders app and Advanced Permissions? You may have, and I apologize if so, but that's unclear from the above.

https://github.com/nextcloud/groupfolders/#setting-advanced-permissions

There may also be some new paths by way of Shared Albums in the >=2.x NC Photos app. Or even the Memories app: https://apps.nextcloud.com/apps/memories