frappe / frappe/drive

Folder and File Level Access Restriction Needed

Open
#548 0 comments 0 reactions 0 assignees View on GitHub
enhancement
Dominant language
Vue
Stars
735
Forks
316
Avg merge
8m
Merged PRs (30d)
2

Description

**Current Behavior:**
Currently, if a user has access to the **Team** directory, they can view **all** its subfolders and files, regardless of individual folder or file permissions.

```
Team/
├─ Folder/ (RW)
│ ├─ File.txt (RW)
│ │ └─ Sub-Folder/ (Restricted: X)
│ └─ Folder-Restricted/ (Restricted: X)
└─ Folder-2/ (R)
└─ File-2.txt (R)
```

At present, users with access to `Team` can still navigate into `Folder-Restricted/` and `Sub-Folder/`, even though those are intended to be restricted.

---

**Expected Behavior:**

* Access should be **controlled at folder and file level**, not just inherited from the parent (`Team`).
* If a folder or file is marked as **Restricted (X)**, it should **not be visible or accessible** to users without explicit permission.
* Permissions should respect:

* **R** (Read): View only
* **RW** (Read/Write): View and modify
* **X** (Restricted): No access

Contributor guide

No contributing guide indexed for this repository

Research direction

No files, tests, or entry points are named. Start by tracing how access inherited from the Team directory is currently handled, then verify that restricted folders and files are hidden and inaccessible while R and RW permissions retain their stated behavior.

Written by the indexing model from the issue text.

Assessment

Domain
authorization
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.