Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Sharing by link] The password is required twice #16553

Closed
davitol opened this issue May 25, 2015 · 3 comments
Closed

[Sharing by link] The password is required twice #16553

davitol opened this issue May 25, 2015 · 3 comments

Comments

@davitol
Copy link
Contributor

davitol commented May 25, 2015

Steps to reproduce

  1. Send a file to a user by link with password protection
  2. Copy the url in your browser

Expected behaviour

The pwd is required.

Actual behaviour

The pwd if required again when you accept to add the remote share. Maybe the pwd should be required once.

Server configuration

Operating system: ubuntu 14.04

Web server: apache 2.4.7

Database: mysql

PHP version: 5.5.9

ownCloud version: version":"8.1.0.5","versionstring":"8.1 beta 1","edition":"Enterprise"

Updated from an older ownCloud or fresh install: Fresh install

List of activated apps:
Enabled:

  • activity: 1.2.3
  • admin_audit: 0.6
  • encryption: 1.0.0
  • enterprise_key: 0.1.0
  • files: 1.1.9
  • files_locking:
  • files_pdfviewer: 0.7
  • files_sharing: 0.6.1
  • files_sharing_log: 0.5
  • files_texteditor: 0.4
  • files_trashbin: 0.6.2
  • files_versions: 1.0.5
  • files_videoviewer: 0.1.3
  • firewall: 0.91.2
  • firstrunwizard: 1.1
  • gallery: 0.6.0
  • provisioning_api: 0.2
  • templateeditor: 0.1
  • updater: 0.4
  • user_ldap: 0.6.0
  • windows_network_drive: 0.1.1

Are you using external storage, if yes which one: no

Are you using encryption: yes

Are you using an external user-backend, if yes which one: ActiveDirectory

Client configuration

Browser: Firefox
captura de pantalla 2015-05-25 a las 9 18 26

captura de pantalla 2015-05-25 a las 9 19 18

@PVince81
Copy link
Contributor

I believe that this is by design, at least for now, because we don't want to send the password in the URL (which is the only way to connect to the other server).

But maybe in the future this could be done with tokens, if possible.

@rullzer
Copy link
Contributor

rullzer commented May 27, 2015

CC @LukasReschke I assume you agree that we have to wait until we have proper tokens to support this.

@PVince81
Copy link
Contributor

Sending the password at this stage would cause security trouble.
This is a nice to have enhancement and we're past feature freeze => 9.0

@PVince81 PVince81 modified the milestones: 9.0-next, 8.2-current Sep 22, 2015
@ghost ghost modified the milestones: 9.1-next, 9.0-current Feb 20, 2016
@PVince81 PVince81 modified the milestones: 9.1-current, 9.2-next Jun 14, 2016
@PVince81 PVince81 modified the milestones: backlog, 10.0 Jan 27, 2017
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

5 participants