SOLIDPOD: prevent external file recipient from changing file owner's access permissions
@jesscmoore is already working on this.
Since Nov 3, 2025.
- Dominant language
- Dart
- Stars
- 10
- Forks
- 7
- Avg merge
- 1d 3h
- Merged PRs (30d)
- 6
Description
Describe the Bug
Solidpod should sensibly handle the situation when the recipient of an external file tries to change the permissions of the owner of the file. In notepod app, using the GrantPermissionUI, a recipient of an external note can select the note owner as the individual recipient and assign new permissions and clicks 'Grant Permission' button which causes a granting permission error shown as snackbar message:
'Permission granting failed. Check console logs...'
Console message:
flutter: 💥 [GrantPermission] Exception occurred: 'package:solidpod/src/solid/utils/permission.dart': Failed assertion: line 68 pos 12: '!thirdPartyAccess.containsKey(ownerWebId)': is not true.
To Reproduce
Steps to reproduce the behavior in Notepod:
- Go to 'Shared Notes'
- Click on any note.
- Click share button
- On clicking 'Individual' to share to an individual, the suggestion list naturally shows webid's of people with access to the note, excluding the user.
Closing Crieria
- App provides a useful message, e.g. that a note recipient is unable to change the access of a note owner of an external file
- App does not hang
Screenshots
Here I am logged in as jesscmoore and have clicked Grant Permissions to edit permissions of the file owner jessicamoore.
Context
Where has the issue been observed:
- iOS
- Web
App Version: 0.2.23
Flutter Version: Flutter 3.32.8
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.