nextcloud / nextcloud/files_lock
File locking is possible although limited rights on a groupfolder
Nobody has claimed this yet.
- Dominant language
- JavaScript
- Stars
- 39
- Forks
- 10
- Avg merge
- 1d 11h
- Merged PRs (30d)
- 48
Description
Hello, thank you for your great app.
If a User have limited rigths (only read) for exampleb on a groupfolder, he can't lock a file in the folder via Browser on PC. There is no menu item then. This should be the normal behaviour I think. But currently via the nextcloud smartphone app it is possible to lock files, even if you have no rights. Actually, I expected that there is no item "file lock" at the contextmenu of a file in the smartphone app too.
Unfortunately, users manage to lock files unintentionally via the app, even though they don't actually have the right to do so.
Systeminformation:
Nextcloud 24.0.12 Enterprise
Ubuntu Linux 20.04.LTS
Temporary files lock 26.0.0
Is there a way to stop users from locking files through the app when they actually don't have enough rights?
Thanks a lot!
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Reproduce the issue with Nextcloud 24.0.12 and the Temporary files lock app 26.0.0 using a read-only user on a groupfolder. Compare file-locking actions in the browser and smartphone app; done means the app no longer allows that user to lock files.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- javascript
- Domain
- authorization
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100