[Bug]: "Enforce password protection" can be enabled without "Always ask for a password"
Open
@kristian-zendato is already working on this.
Since Sep 10, 2026.
0. Needs triage
31-feedback
bug
feature: settings
- Dominant language
- PHP
- Stars
- 36.9k
- Forks
- 5.2k
- Avg merge
- 2d 3h
- Merged PRs (30d)
- 713
Description
⚠️ This issue respects the following points: ⚠️
- This is a bug, not a question or a configuration/webserver/proxy issue.
- This issue is not already reported on Github OR Nextcloud Community Forum (I've searched it).
- Nextcloud Server is up to date. See Maintenance and Release Schedule for supported versions.
- I agree to follow Nextcloud's Code of Conduct.
Bug description
The option "Enforce password protection" depends on the option "Always ask for a password", but the UI still respects the setting of "Enforce password protection", even though "Always ask for password" is disabled.
Steps to reproduce
- Go to Admin settings -> Sharing
- Enable both "Always ask for a password" and "Enforce password protection"
- Disable "Always ask for a password"
Expected behavior
It depends, either
- the UI when creating a share link should not enforce a password (as the option is checked in the settings, but disabled, because of "Always ask for password" being unchecked)
- the admin UI should not depend the option "Enforce password protection" on "Always ask for a password"
Nextcloud Server version
master
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.