Prevent editing disabled space via a public link

[ScharfViktor]

ownCloud Web UI 5.5.0-rc.5
ocis local: v2.0.0-alpha2

Steps:

• admin creates project space
• upload file inside to the space
• share via public link with edit permissions
• disable space
• public opens space and can edit

Expected: All members (excluding users with manager role) should not be able to see space

Actual: users who have public link can still see and edit space

[kobergj]

Update: It looks like disabled spaces are only blocked by the UI. It is possible to upload to a disabled space using the API directly.

[kobergj]

Update II: Decided to change the functionality a bit:

Disabled spaces cannot be accessed by anyone. They need to be reenabled before there can be an upload or download again.

Managers will only be able to list, reenable or delete a space when it is disabled. For all other actions he needs to reenable the space again

cc @micbar

[kobergj]

@ScharfViktor not a web issue. Primarily are server bug. ocis was the correct place for the ticket.

[micbar]

@kobergj Should i transfer it back?

[kobergj]

Yes makes no sense to have this ticket here. If there is web work to do I will open a new ticket. Thx!

[ScharfViktor]

I transfered issue back to ocis.

[kobergj]

Fix landed in ocis. Closing this...