fix(files_sharing): stop ignoring shares without a usergroup entry when filtering by path#57930
Conversation
come-nc
left a comment
There was a problem hiding this comment.
Won’t that cause an issue with non-accepted group shares?
Or if the user left the share?
This comment was marked as outdated.
This comment was marked as outdated.
This comment was marked as outdated.
This comment was marked as outdated.
Moving the path filtering to the resolve step would remove the filtering on the "parent" share, having the result of returning all shares received by a user where the only resolved ones are the ones where the path condition matches. This is not what we want.
f4a8d15 to
073d980
Compare
|
Edited the PR to avoid filtering by path only during the resolution step, as that would cause only the shares with a specific path to be resolved + would return shares unrelated to the path, since the first step would not filter by path any longer. The new changes:
This fixes the case where a share's permission get reduced because some usergroup rows may be missing for a specific share/user and others may be present resulting in incorrect permissions. |
Try the same on stable33, there seem to be some things working on master that aren't working on stable33 for some reason. |
Do you have more context? I can reproduce this issue also on stable33 |
|
/backport to stable33 |
come-nc
left a comment
There was a problem hiding this comment.
I cannot see any problem anymore, does not mean there are none 🙈
|
I will open a separate PR to apply the same changes to the deck provider, which also seems to have a wrong join condition |
|
Notes on the additional changes: we agreed with Louis and Kate to replace the |
artonge
left a comment
There was a problem hiding this comment.
@salmart-dev I can't approve, feel free to do so for me 👍
5e67c2f to
07b25ab
Compare
Previously, this was preventing users without a specific USERGROUP entry to see GROUP shares. Signed-off-by: Louis Chmn <louis@chmn.me> Signed-off-by: Salvatore Martire <4652631+salmart-dev@users.noreply.github.com>
07b25ab to
79c07d3
Compare
Previously, this was preventing users without a specific USERGROUP entry to see GROUP shares.
The path filtering is now done at resolution time. This is less efficient, but keeps the old behavior.(crossed out from Salvatore)I think we should probably update the other share providers to follow the same logic.