anusii / anusii/solidpod

SOLIDPOD: prevent external file recipient from changing file owner's access permissions

Open
#586 2 comments 0 reactions 1 assignee View on GitHub

@jesscmoore is already working on this.

Since Nov 3, 2025.

Dominant language
Dart
Stars
10
Forks
7
Avg merge
1d 3h
Merged PRs (30d)
6

Description

Describe the Bug

Solidpod should sensibly handle the situation when the recipient of an external file tries to change the permissions of the owner of the file. In notepod app, using the GrantPermissionUI, a recipient of an external note can select the note owner as the individual recipient and assign new permissions and clicks 'Grant Permission' button which causes a granting permission error shown as snackbar message:

 'Permission granting failed. Check console logs...' 

Console message:

flutter: 💥 [GrantPermission] Exception occurred: 'package:solidpod/src/solid/utils/permission.dart': Failed assertion: line 68 pos 12: '!thirdPartyAccess.containsKey(ownerWebId)': is not true.

To Reproduce

Steps to reproduce the behavior in Notepod:

  1. Go to 'Shared Notes'
  2. Click on any note.
  3. Click share button
  4. On clicking 'Individual' to share to an individual, the suggestion list naturally shows webid's of people with access to the note, excluding the user.

Closing Crieria

  • App provides a useful message, e.g. that a note recipient is unable to change the access of a note owner of an external file
  • App does not hang

Screenshots

Here I am logged in as jesscmoore and have clicked Grant Permissions to edit permissions of the file owner jessicamoore.

Image Image

Context

Where has the issue been observed:

  • iOS
  • Web

App Version: 0.2.23
Flutter Version: Flutter 3.32.8

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.