Folder shared with Secure view can be downloaded.
- Dominant language
- Go
- Stars
- 2.1k
- Forks
- 274
- Avg merge
- 2d 1h
- Merged PRs (30d)
- 103
Description
## Describe the bug
When a folder is shared with secure view role, it could be downloaded. However if the folder is empty, the file inside get downloaded but the content won't be available for preview.
## Steps to reproduce
1.Make a new user `Einstein`
2. Create a new folder `test`
3. Admin shares `test` with `Einstein` with `Secure view` role.
4. Einstein download the folder.
```
curl -k --location 'https://host.docker.internal:9200/archiver?id={folder-id}' -ueinstein:relativity --output -
```
## Expected behavior
The folder download should not be possible.
## Actual behavior
The folder could be downloaded.
Suppose there are files and folders inside the folder. They could be downloaded but the content couldn't be opened.
## Setup
Please describe how you started the server and provide a list of relevant environment variables or configuration files.
```console
OCIS_XXX= Infinite Scale 5.1.0-prealpha+1ef7292e21 Community
```
## Additional context
Add any other context about the problem here.
Contributor guide
Assessment
This issue has not been assessed yet.