nextcloud / nextcloud/server

[Bug]: Can not move shared file without download permission

Open
#50,435 1 comment 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

1. to develop 31-feedback bug feature: sharing
Dominant language
PHP
Stars
36.9k
Forks
5.2k
Avg merge
2d 3h
Merged PRs (30d)
713

Description

⚠️ This issue respects the following points: ⚠️
Bug description

When a user receives a file share without download-sync permission they cannot move that file.
Trying to do so results in:

Access to this shared resource has been denied because its download permission is disabled.

Still the action is shown to the user in the files list.

Steps to reproduce
  1. user1 create a file
  2. user1 shares the file to user2 with "view only" and remove download-sync permission
  3. user2 tries to move the file to a directory
Expected behavior
  1. Either do not offer the move action.
  2. Or moving should be allowed as it does not increase any permissions
Nextcloud Server version

master (32)

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Reproduce the shared-file scenario with download-sync permission disabled, then inspect the files-list move action and the permission check that rejects the move. Confirm the behavior against both expected options: hide the move action or allow the move without granting additional access.

Written by the indexing model from the issue text.

Assessment

Tech stack
php
Domain
authorization, cloud
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.