[Pkg-owncloud-maintainers] Bug#784965: owncloud: File sharing by link only works when done by the file owner

[David Prévot]

Control: tags -1 confirmed upstream fixed-upstream
Control: found -1 7.0.4+dfsg-4 7.0.5+dfsg-1
Control: tags -1 pending

Hi Roland,

On Mon, May 11, 2015 at 11:45:45AM +0200, Roland Mas wrote:
> Package: owncloud
> Version: 7.0.4+dfsg-4~deb8u1

> if I share a file that's shared with me,
> even though I have permission to re-share, the link I get only leads to a
> page saying that says that the link "doesn't seem to work anymore" (in
> French).

I wasn’t initially able to reproduce the issue.

For further reference, according to apps/files_sharing/l10n/fr.php, the
error message was "Sorry, this link doesn’t seem to work anymore." =>
"Désolé, mais le lien semble ne plus fonctionner."

> In concrete terms: assume I have users A1 and A2, and group G.  A2 belongs
> to G.  A1 shares /dir with group G, with permission to re-share.
> If A1 shares /dir/file "via link", then the link works and the recipient
> of the link can download the file.
> If A2 shares /dir/file "via link", then the link leads to an error page.

I tried to share a file with another user, share a directory with
another user, and share a directory with a group I and another user
belong to. Each time, the other user was able to share via a public link
the file or any file within the shared directory.

Rereading your report again, I finally managed to reproduce the issue:
A1 shares a directory with group G, but *doesn’t* belong to G, A2 who
belongs to G can see the files, but indeed cannot share thew anymore via
a public link.

I was able to reproduce the issue with version 7.0.5 as available from
experimental, but not with version 8.1.0~beta1 as ready in the VCS and
from p.d.o (see #785052#10), so it will be fixed “soon” in Debian too.

Regards

David
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 473 bytes
Desc: Digital signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-owncloud-maintainers/attachments/20150511/92c6dc0e/attachment.sig>