owncloud / owncloud/ocis

[OCM] federated user trying to download file shared with permissions role Secure Viewer returns 500 status code

Open
#10,822 0 comments 0 reactions 0 assignees View on GitHub
Type:Bug
Dominant language
Go
Stars
2.1k
Forks
274
Avg merge
2d 1h
Merged PRs (30d)
103

Description

## Describe the bug
When a federated user tries to download shared resource shared with permissions role `Secure Viewer`, the server returns `500` status code.

For default permissions role, the federated user can successfully download the resource.

## Steps to reproduce
1. Local user `Alice` creates a file `textfile.txt`
2. `Alilce` shares the file with permissions role `Secure Viewer` to federated user `Brian`
3. `Brian` tries to download the file `textfile.txt`

```bash
curl -kv -XGET -ubrian:1234 https://localhost:10200/remote.php/dav/spaces/{remote-item-id}
```

## Expected behavior
The response should return `403` status code.

## Actual behavior
The response returns `500` status code.

```console
< HTTP/1.1 500 Internal Server Error
```

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.