owncloud / owncloud/ocis

Project Space has `owner`

Open
#4,419 8 comments 0 reactions 0 assignees View on GitHub
Interaction:Question Type:Bug Type:Discussion
Dominant language
Go
Stars
2.1k
Forks
274
Avg merge
2d 1h
Merged PRs (30d)
103

Description

1. As user admin make user `Einstein` a space admin
2. As user `Einstein` create a project space `New Space`
3. Now as user `Einstein` lists the drives using the graph API
```console
curl -u einstein:relativity -k -X GET https://host.docker.internal:9200/graph/v1.0/me/drives -v | jq
```
```console
{
"value": [
{
"driveAlias": "personal/einstein",
"driveType": "personal",
"id": "1284d238-aa92-42ce-bdc4-0b0000009157$4c510ada-c86b-4815-8820-42cdf82c3d51",
"lastModifiedDateTime": "2022-08-19T06:29:21.502281385Z",
"name": "Albert Einstein",
"owner": {
"user": {
"id": "4c510ada-c86b-4815-8820-42cdf82c3d51"
}
},
"quota": {
"remaining": 73360531456,
"state": "normal",
"total": 0,
"used": 0
},
"root": {
"eTag": "\"5d1f40840f2c33c7b674310bb93e52a7\"",
"id": "1284d238-aa92-42ce-bdc4-0b0000009157$4c510ada-c86b-4815-8820-42cdf82c3d51",
"webDavUrl": "https://host.docker.internal:9200/dav/spaces/1284d238-aa92-42ce-bdc4-0b0000009157$4c510ada-c86b-4815-8820-42cdf82c3d51"
}
},
{
"driveAlias": "project/new-space",
"driveType": "project",
"id": "1284d238-aa92-42ce-bdc4-0b0000009157$e51b1c29-81e2-4431-9b75-39e2e85e5422",
"lastModifiedDateTime": "2022-08-19T06:31:48.866847353Z",
"name": "New space",
"owner": {
"user": {
"id": "e51b1c29-81e2-4431-9b75-39e2e85e5422"
}
},
"quota": {
"remaining": 999999837,
"state": "normal",
"total": 1000000000,
"used": 163
},
"root": {
"eTag": "\"d54fbfe013c5805f5154c0ada4667df3\"",
"id": "1284d238-aa92-42ce-bdc4-0b0000009157$e51b1c29-81e2-4431-9b75-39e2e85e5422",
"permissions": [
{
"grantedTo": [
{
"user": {
"id": "4c510ada-c86b-4815-8820-42cdf82c3d51"
}
}
],
"roles": [
"manager"
]
}
],
"webDavUrl": "https://host.docker.internal:9200/dav/spaces/1284d238-aa92-42ce-bdc4-0b0000009157$e51b1c29-81e2-4431-9b75-39e2e85e5422"
},
"special": [
{
"eTag": "\"2840cf0cebfc1527b75037a840933bde\"",
"file": {
"mimeType": "text/markdown"
},
"id": "1284d238-aa92-42ce-bdc4-0b0000009157$e51b1c29-81e2-4431-9b75-39e2e85e5422!c27ef0cc-c68b-43bd-8630-70fa19a457fe",
"lastModifiedDateTime": "2022-08-19T06:31:48.86231683Z",
"name": "readme.md",
"size": 163,
"specialFolder": {
"name": "readme"
},
"webDavUrl": "https://host.docker.internal:9200/dav/spaces/1284d238-aa92-42ce-bdc4-0b0000009157$e51b1c29-81e2-4431-9b75-39e2e85e5422%21e51b1c29-81e2-4431-9b75-39e2e85e5422/.space/readme.md"
}
]
}
]
}
```
As per https://github.com/owncloud/ocis/issues/4419#issuecomment-1221987135 and https://github.com/owncloud/ocis/issues/4419#issuecomment-1222011670 the project spaces `owner` should not be exposed but in the current implementation, we can see the `owner` of a project space.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.