nextcloud / nextcloud/groupfolders
Feature Request: Federated groups + native federation support for Group Folders (Team Folders)
Nobody has claimed this yet.
- Dominant language
- PHP
- Stars
- 343
- Forks
- 106
- Avg merge
- 2d 3h
- Merged PRs (30d)
- 34
Description
Summary
Group Folders (Team Folders) are widely used to manage structured, permission-based data for teams and departments.
Currently, Federated Cloud Sharing in Nextcloud only supports standard folders and user-level shares. This limits cross-instance collaboration when data is managed at the team level.
I propose two related improvements: one incremental and one long-term.
Option 1 — Incremental (recommended first step)
Allow adding federated users or federated groups directly to a Group Folder, for example:
hr@https://othernextcloudserver.com
Administrators should then be able to assign Advanced Permissions to these federated principals:
- read
- write
- create
- delete
- share
Expected behavior
- When access is granted, the remote Nextcloud instance receives the content under its standard “Shared” section.
- Permission logic remains controlled by the owning Group Folder, including inheritance and advanced permissions.
- No need for intermediary users or manual per-subfolder federation.
Option 2 — Native Federated Group Folder (long-term)
Introduce native federation support at the Group Folder level.
Concept:
- A Group Folder can be federated as a whole.
- The Group Folder itself becomes a first-class federated resource.
- Ownership, advanced permission inheritance, and centralized administration are preserved.
This could be exposed as a “Federated Group Folder” capability.
Why this matters
Current workarounds (federating subfolders, using intermediary users, or WebDAV-based external storage):
- Break permission inheritance
- Complicate auditing and ownership
- Increase administrative overhead
- Are unintuitive for administrators and end users
Use cases
- Cross-company project collaboration
- Holding companies with multiple Nextcloud instances
- Managed service providers serving separate customer instances
- Enterprise environments
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
The issue names no files, tests, or entry points. Start by reviewing the existing Group Folder permission model and federated sharing behavior described here, then scope whether incremental federated principals or native federation is feasible. Done would require an agreed design and implementation plan before coding can begin.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- php
- Domain
- authorization, backend, distributed-systems
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100