-
Notifications
You must be signed in to change notification settings - Fork 20
Open
Labels
Description
Steps
- Create an external storage "/local" of type Local applicable to the "admin" group only
- Create a user "alice" in group "users"
- Create an invisible tag "deny-this"
- Apply the invisible to "/local"
- Share "/local" with "alice" in the files app (using sharing tab)
- Create a rule with the clauses "tag is 'deny-this'" and "user in group 'users'"
- Login as "alice"
- Try accessing "/local"
Expected result
"/local" appears greyed out and its "data-permissions" attribute must not have the readable flag
entering the folder shows a "forbidden" error
Actual result
"/local" is not greyed out and its data-permissions has the readable flag set (31)
entering the folder shows a "forbidden" error, so it's mostly a visual issue
Versions
Nextcloud 22.3.0
files_accesscontrol v1.12.1 and stable22