-
Notifications
You must be signed in to change notification settings - Fork 88
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
fix(ACL): Add check to prevent users from revoking their own access #2960
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@icewind1991 since you said
Would it maybe make more sense to just fully prevent users from revoking their own access?
I would say the modal is better, because maybe you do want to get out of the group folder?
Access removal
Proceeding will remove your own access to this group folder.
[ Cancel ] [ Remove own access ]
Fixes #2822 |
I don't think this makes sense, since in fact you do not remove yourself from the Team folder this way. |
f38c222
to
f575b16
Compare
Signed-off-by: Robin Appelman <[email protected]> Signed-off-by: provokateurin <[email protected]>
f575b16
to
dc3d8c0
Compare
/backport to stable31 |
Hi, awesome improvement ! Can't it be backported to some previous major releases @icewind1991 @jancborchardt ? |
Let's try! |
/backport to stable30 |
/backport to stable29 |
@Jerome-Herbinet stable30 was relatively easy to do, but stable29 unfortunately would need a larger amount of work, so not backporting it there. |
Thanks for your answer @provokateurin. Can you tell me when the next version of Team Folders for Nextcloud 30 (> 18.1.0) will be released (the version that will include this new backported feature)? and what precise version number ? I assume : 18.1.1 ? |
I can do it next Monday, should be 18.1.1 indeed. |
It would be great @provokateurin ! I'm currently making (and scheduling) a communication talking about this for next Tuesday (on Arawa's Mastodon, BlueSky and LinkedIn pages). |
When changing ACL rules, check if the new rule set would lead the current user without read permissions
(maybe) add an option to force revoking the access anyway