nextcloud / nextcloud/android

File Detail Sharing Does Not Properly Restrict Permissions Based on Received Share

Open
#14,854 0 comments 0 reactions 0 assignees View on GitHub
0. Needs triage bug
Dominant language
Kotlin
Stars
5.6k
Forks
2k
Avg merge
2d 18h
Merged PRs (30d)
92

Description

### ⚠️ Before posting ⚠️

- [x] This is a **bug**, not a question or an enhancement.
- [x] I've [searched for similar issues](https://github.com/nextcloud/android/issues) and didn't find a duplicate.
- [x] I've written a clear and descriptive title for this issue, not just "Bug" or "Crash".
- [x] I agree to follow Nextcloud's [Code of Conduct](https://nextcloud.com/contribute/code-of-conduct/).

### Steps to reproduce

User1 shares a file or folder with User3, granting limited permissions (e.g., read, update-only).
User3 attempts to share the same item with User2
UI displays all permission options, including those User3 does not actually have. UI should show only existed permission for User3's share (e.g., read, update-only).

### Expected behaviour

The sharing UI should only allow User3 to grant permissions they have been given. Permissions that are not available to User3 should be grayed out in the UI.

### Actual behaviour

All permissions appear selectable in the sharing UI, even if User3 lacks the authority to grant them.

### Android version

15

### Device brand and model

Android Emulator

### Stock or custom OS?

Stock

### Nextcloud android app version

3.31.0

### Nextcloud server version

31.0.0

### Using a reverse proxy?

I don't know

### Android logs

_No response_

### Server error logs

```bash

```

### Additional information

_No response_

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.