Security View with disabled Download permission Support
Nobody has claimed this yet.
- Dominant language
- JavaScript
- Stars
- 177
- Forks
- 68
- Avg merge
- 2d 22h
- Merged PRs (30d)
- 60
Description
In shares, there is a Security view that allows a user to see a file but forbids to download the file and hides the "Download" button from the UI.
It works for internal user share and internal group share. But it doesn't work for a circle.
Steps to reproduce:
- Create a circle
- Share a file with a circle
- Check "Read" permission
- Uncheck all other permissions, including "Download"
Expected behavior:
A user cannot download the file
Actual behavior:
A user can download the file
Versions
Nextcloud 27.1.0 + Circles 27.0.1 with AIO
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Reproduce the issue with a circle share using the listed Nextcloud and Circles versions, following the four steps in the report. Trace how circle shares enforce the disabled Download permission; done means the recipient can view the file but cannot download it, and the Download button remains hidden.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- javascript
- Domain
- authorization, backend
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100