nextcloud / nextcloud/files_accesscontrol
Denied folders are still displayed
Nobody has claimed this yet.
- Dominant language
- PHP
- Stars
- 60
- Forks
- 22
- Avg merge
- 2d 11h
- Merged PRs (30d)
- 34
Description
When access to a folder is denied, the folder is still listed and can be switched to. But then, instead of listing the folder contents, a redirect happens and the user is put in the root directory and sees an error message that what they just tried is not allowed.
Then why is it even offered? If access to something is denied, I'd expect it not to be visible at all. And if Nextcloud isn't capable of that, an indication before clicking on the folder would be helpful.
I'm not yet sure that Nextcloud is a good place for confidential data. All it takes is the File access app to be disabled and all files become accessible. This might happen during some updates, I have no idea. I'll have to rely on that app not to terminate.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
The issue names no files, tests, or entry points. Start by reproducing the denied-folder behavior in the File access app, then trace how folder listings and redirects handle denied access; done means denied folders are no longer offered or are clearly marked while unauthorized access remains blocked.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- php
- Domain
- authorization, security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100