Allow administrators to disable editable public links while keeping read-only public links enabled
Nobody has claimed this yet.
- Dominant language
- PHP
- Stars
- 36.9k
- Forks
- 5.2k
- Avg merge
- 2d 3h
- Merged PRs (30d)
- 713
Description
As a server administrator, I want users to be able to create public links only for viewing and downloading files.
Currently, users can also grant the "Edit" permission to public link shares. There is no administrative setting to disable editable public links while still allowing normal read-only public links.
The existing "Allow public uploads" option only controls File Drop and does not affect editable public links.
Please add a server-wide option to disable the "Edit" permission for public link shares.
When enabled:
- users can still create public links;
- public links are always read-only;
- the "Edit" permission is hidden or disabled in the sharing dialog;
- attempts to grant edit permission through the API are rejected.
This option should be independent from the existing "Allow public uploads" setting.
The only current alternatives are disabling public links entirely or modifying the Nextcloud source code after every update. Neither is suitable.
This feature would allow administrators to enforce a read-only public sharing policy without disabling public links completely.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by locating the existing public-link permission handling, the "Allow public uploads" setting, and the sharing-dialog and API paths that grant edit access. Done means a separate server-wide option keeps public links available while hiding or disabling Edit and rejecting API attempts, without changing public uploads.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- php
- Domain
- api, authorization, backend, frontend
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Quiet
- Clarity
- Mostly clear
- Newbie friendliness
- 55/100