owncloud / owncloud/ocis

Folder shared with Secure view can be downloaded.

Open
#9,369 9 comments 0 reactions 0 assignees View on GitHub
Type:Bug
Dominant language
Go
Stars
2.1k
Forks
274
Avg merge
2d 1h
Merged PRs (30d)
103

Description

## Describe the bug
When a folder is shared with secure view role, it could be downloaded. However if the folder is empty, the file inside get downloaded but the content won't be available for preview.

## Steps to reproduce
1.Make a new user `Einstein`
2. Create a new folder `test`
3. Admin shares `test` with `Einstein` with `Secure view` role.
4. Einstein download the folder.
```
curl -k --location 'https://host.docker.internal:9200/archiver?id={folder-id}' -ueinstein:relativity --output -
```

## Expected behavior
The folder download should not be possible.

## Actual behavior
The folder could be downloaded.
Suppose there are files and folders inside the folder. They could be downloaded but the content couldn't be opened.

## Setup
Please describe how you started the server and provide a list of relevant environment variables or configuration files.

```console
OCIS_XXX= Infinite Scale 5.1.0-prealpha+1ef7292e21 Community
```

## Additional context
Add any other context about the problem here.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.