nextcloud / nextcloud/server

Allow administrators to disable editable public links while keeping read-only public links enabled

Open
#62,031 1 comment 1 reaction 0 assignees View on GitHub

Nobody has claimed this yet.

0. Needs triage enhancement
Dominant language
PHP
Stars
36.9k
Forks
5.2k
Avg merge
2d 3h
Merged PRs (30d)
713

Description

As a server administrator, I want users to be able to create public links only for viewing and downloading files.
Currently, users can also grant the "Edit" permission to public link shares. There is no administrative setting to disable editable public links while still allowing normal read-only public links.
The existing "Allow public uploads" option only controls File Drop and does not affect editable public links.

Please add a server-wide option to disable the "Edit" permission for public link shares.
When enabled:

  • users can still create public links;
  • public links are always read-only;
  • the "Edit" permission is hidden or disabled in the sharing dialog;
  • attempts to grant edit permission through the API are rejected.
    This option should be independent from the existing "Allow public uploads" setting.

The only current alternatives are disabling public links entirely or modifying the Nextcloud source code after every update. Neither is suitable.
This feature would allow administrators to enforce a read-only public sharing policy without disabling public links completely.

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by locating the existing public-link permission handling, the "Allow public uploads" setting, and the sharing-dialog and API paths that grant edit access. Done means a separate server-wide option keeps public links available while hiding or disabling Edit and rejecting API attempts, without changing public uploads.

Written by the indexing model from the issue text.

Assessment

Tech stack
php
Domain
api, authorization, backend, frontend
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Quiet
Clarity
Mostly clear
Newbie friendliness
55/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.