nextcloud / nextcloud/server

"Restrict users to only share with users in their groups" is too restrictive

Open
#15,086 1 comment 2 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

1. to develop enhancement feature: sharing feature: users and groups
Dominant language
PHP
Stars
36.9k
Forks
5.2k
Avg merge
2d 3h
Merged PRs (30d)
713

Description

Is your feature request related to a problem? Please describe.
Nextcloud 15 has the setting
"Admin -> Settings -> Sharing -> [x] Restrict users to only share with users in their groups"

This setting makes sense because it "isolates" different user groups in some ways, and doesn't allow users of group1 to accidentally find users of group2, that's perfect.

For me as admin or for other users that are admin of groups they are not member of, it makes it impossible to share - but I would need such feature

Describe the solution you'd like
If the described restriction is in place, I would like to see sharing being restricted to "users in their groups and groups they are admin for"

Describe alternatives you've considered
Make myself a user of the groups I want to share with - but that doesn't make sense.
E.g. I organize an event and have group "organizers" and group "participants".
I'm an organizer, I'm in group "organizers" (with shared write access) and want to share some content with the participants group (read access) that I'm group admin of. Technically I'm organizer, not participant, so I don't want to join the participants group.

Other example: I have some bot accounts that I want to share content with. I am not a bot (but admin of the bot groups), so I don't want to join the bot groups.

Additional context
-/-

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

No file, test, or entry point is named. Start by locating the setting that restricts sharing to users in the sharer's groups, then trace how group-admin status is checked. Done means group administrators can share with users in groups they administer without joining those groups, while the existing restriction remains for other users.

Written by the indexing model from the issue text.

Assessment

Tech stack
php
Domain
authorization, backend
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.