Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Prevent creating public share for the home root folder #1265

Closed
PVince81 opened this issue Jun 18, 2020 · 14 comments
Closed

Prevent creating public share for the home root folder #1265

PVince81 opened this issue Jun 18, 2020 · 14 comments
Labels
Category:Technical Technical ehancements Interaction:Discussion Interaction:Needs-help Asking some hints to engineering when the issue can't be reproduced Status:Stale

Comments

@PVince81
Copy link
Contributor

in apiSharePublicLink1/createPublicLinkShare.feature scenario "Do not allow public sharing of root"

It returns 200 instead of 403

@pmaier1
Copy link
Contributor

pmaier1 commented Sep 24, 2020

Product decision: Going forward we want to allow this via API. Please adjust the tests accordingly.

@phil-davis
Copy link
Contributor

phil-davis commented Sep 24, 2020

@pmaier1 Are we going to allow public share of the user's root folder in oC10 also?

Or do we make the tests know that the expected behaviour is different on oC10 and OCIS?

@phil-davis
Copy link
Contributor

Added QA-team label so that we notice this to adjust the tests.

@pmaier1
Copy link
Contributor

pmaier1 commented Sep 24, 2020

@pmaier1 Are we going to allow public share of the user's root folder in oC10 also?

No, this is only for OCIS.

@individual-it
Copy link
Member

Do we also need UI tests for that? @pmaier1 should it also be possible via UI aka. phoenix?

@phil-davis
Copy link
Contributor

API test scenario is added in owncloud/core#37943
When that read-only scenario works in OCIS, then some permissions combinations should be added - to also check that files can be uploaded, deleted... I did not write them now, but I suppose I could - the desired behaviour with different/greater permissions should not be difficult to write down.

@phil-davis phil-davis self-assigned this Sep 25, 2020
@pmaier1
Copy link
Contributor

pmaier1 commented Sep 25, 2020

Do we also need UI tests for that? @pmaier1 should it also be possible via UI aka. phoenix?

Currently that functionality is only for API. This ticket originally was about preventing this in OCIS because we have an oc10 test that tells so. After discussion we rather consider this as a limitation in oc10 which is why we decided to adjust the tests instead of changing the behavior.

@phil-davis phil-davis removed their assignment Oct 30, 2020
@phil-davis
Copy link
Contributor

Removed my assignment - owncloud/core#37943 sorted out the 2 scenarios for the different behaviour.

@phil-davis
Copy link
Contributor

The core scenario is currently still failing on OCIS due to an unexpected OCS status code. When that is sorted out, maybe the rest of the checks will pass.

@butonic butonic transferred this issue from owncloud/ocis-reva Jan 18, 2021
@refs
Copy link
Member

refs commented Jan 18, 2021

The core scenario is currently still failing on OCIS due to an unexpected OCS status code. When that is sorted out, maybe the rest of the checks will pass.

This seems like a quick win, cc @micbar

@refs refs added Interaction:Discussion Interaction:Needs-help Asking some hints to engineering when the issue can't be reproduced Category:Technical Technical ehancements labels Jan 18, 2021
@settings settings bot removed the p3-medium label Apr 7, 2021
@stale
Copy link

stale bot commented Jun 6, 2021

This issue has been automatically marked as stale because it has not had recent activity. It will be closed in 10 days if no further activity occurs. Thank you for your contributions.

@stale stale bot added the Status:Stale label Jun 6, 2021
@micbar
Copy link
Contributor

micbar commented Jun 7, 2021

@butonic @individual-it fixing the status code looks like a quick win

@stale stale bot removed the Status:Stale label Jun 7, 2021
@stale
Copy link

stale bot commented Aug 6, 2021

This issue has been automatically marked as stale because it has not had recent activity. It will be closed in 10 days if no further activity occurs. Thank you for your contributions.

@stale stale bot added the Status:Stale label Aug 6, 2021
@phil-davis
Copy link
Contributor

owncloud/core#37943 implemented separate test scenarios for this on oC10 and oCIS.

On oCIS, creating a public link share of the root is allowed. The behavior on oC10 and oCIS is accepted to be different.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Category:Technical Technical ehancements Interaction:Discussion Interaction:Needs-help Asking some hints to engineering when the issue can't be reproduced Status:Stale
Projects
None yet
Development

No branches or pull requests

6 participants