Guests user cannot access to shared xlsx under GroupFolder from groupfolder app
Nobody has claimed this yet.
- Dominant language
- JavaScript
- Stars
- 61
- Forks
- 34
- Avg merge
- 3d 19h
- Merged PRs (30d)
- 22
Description
Steps to reproduce
- Create a Group folder under the Administration
- Add a user's group to that folder
- A member of that group creates a new onlyoffice sheet
- Share the file with a Guest user (new or existing)
- Guest user gets a notification, visit it
- The shared file has a the right name, but shown as a folder instead of file
- Clicking on it as the Guest opens the folder, which is empty
Expected behaviour
Guest user should see and access the file, not a folder with that name.
It is working as expected outside of Group folder, in other words it works in case of standard folders.
Actual behaviour
The shared file in the Group folder appears as folder, not file and behave like that: clicking on it we enter the folder, instead of opening it as file.

Server configuration detail
Operating system:
Webserver: Apache/2.4.38 (Debian) (fpm-fcgi)
Database:
PHP version:
7.4.9
Nextcloud version: 19.0.3 - 19.0.3.1
Updated from an older Nextcloud/ownCloud or fresh install:
Where did you install Nextcloud from:
Signing status
List of activated apps
Enabled:
- accessibility: 1.5.0
- activity: 2.12.0
- announcementcenter: 3.8.1
- appointments: 1.7.10
- apporder: 0.11.0
- audioplayer: 2.12.0
- bookmarks: 3.4.3
- bruteforcesettings: 2.0.1
- calendar: 2.0.4
- circles: 0.19.7
- cloud_federation_api: 1.2.0
- comments: 1.9.0
- contacts: 3.4.0
- cospend: 1.0.5
- data_request: 1.6.0
- dav: 1.15.0
- deck: 1.1.2
- documentserver_community: 0.1.8
- drawio: 0.9.7
- encryption: 2.7.0
- event_update_notification: 1.0.2
- external: 3.6.0
- extract: 1.2.4
- federatedfilesharing: 1.9.0
- federation: 1.9.0
- files: 1.14.0
- files_accesscontrol: 1.9.1
- files_downloadactivity: 1.8.0
- files_external: 1.10.0
- files_fulltextsearch: 1.4.3
- files_linkeditor: 1.1.2
- files_markdown: 2.3.1
- files_pdfviewer: 1.8.0
- files_photospheres: 1.19.1
- files_rightclick: 0.16.0
- files_sharing: 1.11.0
- files_trashbin: 1.9.0
- files_versions: 1.12.0
- files_videoplayer: 1.8.0
- firstrunwizard: 2.8.0
- flowupload: 1.0.0
- forms: 2.0.4
- fulltextsearch: 1.4.2
- groupfolders: 7.1.0
- groupquota: 0.1.4
- guests: 1.6.0
- impersonate: 1.6.1
- issuetemplate: 0.7.0
- keeweb: 0.6.3
- login_notes: 0.3.0
- logreader: 2.4.0
- lookup_server_connector: 1.7.0
- mail: 1.4.1
- maps: 0.1.6
- metadata: 0.12.0
- music: 0.16.0
- news: 14.2.2
- nextcloud_announcements: 1.8.0
- notes: 3.6.4
- notifications: 2.7.0
- oauth2: 1.7.0
- ocsms: 2.1.8
- onlyoffice: 6.0.2
- passman: 2.3.6
- password_policy: 1.9.1
- passwords: 2020.10.0
- phonetrack: 0.6.4
- photos: 1.1.0
- polls: 1.5.4
- previewgenerator: 2.3.0
- privacy: 1.3.0
- provisioning_api: 1.9.0
- qownnotesapi: 20.9.0
- quicknotes: 0.6.1
- quota_warning: 1.8.0
- sensorlogger: 0.1.2
- settings: 1.1.0
- sharebymail: 1.9.0
- side_menu: 1.17.0
- social: 0.3.1
- socialsharing_diaspora: 2.1.0
- socialsharing_facebook: 2.1.0
- socialsharing_twitter: 2.1.0
- spreed: 9.0.4
- survey_client: 1.7.0
- suspicious_login: 3.2.1
- systemtags: 1.9.0
- tasks: 0.13.4
- terms_of_service: 1.5.2
- text: 3.0.1
- theming: 1.10.0
- theming_customcss: 1.6.0
- timetracker: 0.0.43
- twofactor_backupcodes: 1.8.0
- twofactor_totp: 5.0.0
- unsplash: 1.1.6
- updatenotification: 1.9.0
- user_external: 1.0.0
- viewer: 1.3.0
- w2g2: 3.0.2
- weather: 1.7.3
- workflow_pdf_converter: 1.4.0
- workflow_script: 1.4.0
- workflowengine: 2.1.0
Disabled:
- admin_audit
- checksum
- contactsinteraction
- dicomviewer
- files_antivirus
- files_mindmap
- files_readmemd
- ocr
- radio
- recommendations
- registration
- serverinfo
- support
- timemanager
- user_ldap
- wopi
Configuration (config/config.php)
{
"instanceid": "***REMOVED SENSITIVE VALUE***",
"passwordsalt": "***REMOVED SENSITIVE VALUE***",
"datadirectory": "***REMOVED SENSITIVE VALUE***",
"overwritewebroot": "\/cbox",
"dbtype": "mysql",
"version": "19.0.3.1",
"dbname": "***REMOVED SENSITIVE VALUE***",
"dbhost": "***REMOVED SENSITIVE VALUE***",
"dbtableprefix": "oc_",
"dbuser": "***REMOVED SENSITIVE VALUE***",
"dbpassword": "***REMOVED SENSITIVE VALUE***",
"installed": true,
"default_language": "hu",
"theme": "",
"maintenance": false,
"filelocking.enabled": true,
"memcache.locking": "\\OC\\Memcache\\Redis",
"memcache.local": "\\OC\\Memcache\\APCu",
"memcache.distributed": "\\OC\\Memcache\\Redis",
"redis": {
"host": "***REMOVED SENSITIVE VALUE***",
"port": 0,
"timeout": 0
},
"trusted_domains": [
"cbox.palyazatnelkul.hu"
],
"mail_smtpmode": "smtp",
"mail_from_address": "***REMOVED SENSITIVE VALUE***",
"mail_domain": "***REMOVED SENSITIVE VALUE***",
"mail_smtphost": "***REMOVED SENSITIVE VALUE***",
"mail_smtpport": "25",
"loglevel": 2,
"overwrite.cli.url": "\/cbox",
"custom_csp_policy": "default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; frame-src *; img-src *; font-src 'self' data:; media-src *",
"appstoreenabled": true,
"apps_paths": [
{
"path": "\/var\/www\/cbox.palyazatnelkul.hu\/web\/cbox\/apps",
"url": "\/apps",
"writable": true
}
],
"secret": "***REMOVED SENSITIVE VALUE***",
"ldapIgnoreNamingRules": false,
"trashbin_retention_obligation": "auto",
"versions_retention_obligation": "30, auto",
"singleuser": false,
"preview_libreoffice_path": "\/usr\/bin\/libreoffice",
"preview_office_cl_parameters": " --headless --nologo --nofirststartwizard --invisible --norestore -convert-to pdf -outdir ",
"appstore.experimental.enabled": true,
"updater.release.channel": "stable",
"mysql.utf8mb4": true,
"app_install_overwrite": [
"spreed"
],
"mail_sendmailmode": "smtp"
}
Are you using external storage, if yes which one: local
Are you using encryption:
Are you using an external user-backend, if yes which one:
Client configuration
Browser:
Operating system:
Logs
Web server error log
Nextcloud log
Browser log
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reproducing the guest-sharing flow with a file created in a Group folder, comparing it with the standard-folder flow described in the issue. Trace the guest notification and file entry handling; done means the shared XLSX is identified as a file and opens for the guest instead of appearing as an empty folder.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- javascript, php
- Domain
- backend, full-stack
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100