Explicit permissions for file access
Open
@susnux is already working on this.
Since Sep 8, 2026.
1. to develop
- Dominant language
- PHP
- Stars
- 36.9k
- Forks
- 5.2k
- Avg merge
- 2d 3h
- Merged PRs (30d)
- 713
Description
As an example the IRootFolder has the method getByIdInPath,
this tries to infer the user from the path and fallsback to the current user or otherwise the owner of the file to estimate the view onto the file.
Ideally our APIs would be explicit:
- Do not infer user from session
- Explicitly pass the user as a parameter
- if you want to use the session the explicitly fetch the user from session as pass it
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.