nextcloud / nextcloud/files_accesscontrol

Denied folders are still displayed

Open
#97 3 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

enhancement
Dominant language
PHP
Stars
60
Forks
22
Avg merge
2d 11h
Merged PRs (30d)
34

Description

When access to a folder is denied, the folder is still listed and can be switched to. But then, instead of listing the folder contents, a redirect happens and the user is put in the root directory and sees an error message that what they just tried is not allowed.

Then why is it even offered? If access to something is denied, I'd expect it not to be visible at all. And if Nextcloud isn't capable of that, an indication before clicking on the folder would be helpful.

I'm not yet sure that Nextcloud is a good place for confidential data. All it takes is the File access app to be disabled and all files become accessible. This might happen during some updates, I have no idea. I'll have to rely on that app not to terminate.

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

The issue names no files, tests, or entry points. Start by reproducing the denied-folder behavior in the File access app, then trace how folder listings and redirects handle denied access; done means denied folders are no longer offered or are clearly marked while unauthorized access remains blocked.

Written by the indexing model from the issue text.

Assessment

Tech stack
php
Domain
authorization, security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.