"Allow Download" permission for shared folders removed but download or save as via Onlyoffice still possible

[timm2k]

Hello Onlyoffice team,

If I remove Nextcloud's share permission Allow download form a folder containing documents ONLYOFFICE still let me download or use save as for the protected content.

Nextcloud PR#32482: Add share attributes + prevent download permission

This permission is not respected by the secure view function yet.

For the collabora plugin this was fixed several days ago.
Are you able to put the deselected Allow download under secure view too?

PR for fix in richdocuments plugin

Kind regards
Timm

[timm2k]

Hi @Antipkin-A,

I've applied your patch 2fac82e to my test system. I'm still able to use file menu -> download as or save copy as in ONLYOFFICE webinterface for shared files without Allow Download permission.

I think this is not the expected behavior of the patch?
Should the patch deny access to a document completely?

My intention was to have a view only and remove the export functions from ONLYOFFICE UI is Allow Download is set to false (like described on https://nextcloud.com/de/blog/secure-view-prevent-your-shared-files-from-getting-downloaded/).

Kind Regards
Timm