Upload-only public link does not refer to files-drop page, nor are the permissions enforced

[individual-it]

1. in the webUI create a public link with "Uploader" role
2. copy the URL
3. paste the URL into the browser address

Result: content of the folder is listed and the user has full access

The only way to get to the drop files is to replace public-files in the final URL with files-drop

In the case of a password protected link even that does not work. After entering the password the user is always referred to the normal public-files page

[dpakach]

Might be related to https://github.com/owncloud/ocis-reva/issues/292

[refs]

Can this be retested since cs3org/reva#1368 got merged?

[individual-it]

• ToDo QA-team: retest, check if there are automated tests, if not add UI tests