nextcloud / groupfolders

πŸ“πŸ‘©β€πŸ‘©β€πŸ‘§β€πŸ‘¦ Admin-configured folders shared by everyone in a group. https://github.com/nextcloud-releases/groupfolders
https://apps.nextcloud.com/apps/groupfolders
285 stars 87 forks source link

Allow sharing and permissions for circles #2388

Open punkyard opened 1 year ago

punkyard commented 1 year ago

in a context of multiple organisations, sharing with groups is not possible on our NC server. Organisations can nevertheless create 'circles' but group folders can't set permissions for circles (only groups and users). Could this be included in a following version?

Logianer commented 1 year ago

see also #34 and/or #813

maximelehericy commented 1 year ago

Hi @punkyard Allowing Circles to access groupfolder is now possible in 27. Is that that version you're referering to ? However, it seems there is limitations:

  1. grant a Circle the right to manage advanced permissions is not possible
  2. set advanced permission to a Circle or a user from a Circle is not possible.

@icewind1991 @ArtificialOwl is that a bug or is it planned to come in the future ?

punkyard commented 1 year ago

thanks @maximelehericy for this lovely answer! We're using NC AIO, NC version is 25.0.6 at the moment.. I guess we'll have to wait to see the evolution of Group folders. But it's excellent news! Looking forward to test it :) And, yes, it would be usefull to us to be able to add circles as advanced permissions accounts in Group folder admin page ✌️

Have a nice end of the week

punkyard commented 1 year ago

@maximelehericy, just to be sure, do you mean I need to update to NC 27rc2 to be able to share Group Folders to circles?

punkyard commented 1 year ago

hi AiO has now been updated to 27.0.2 so far I haven't found out how to add circles @maximelehericy could you precise how-to please?

I have several users in a user-group but users can't share with user-groups users use circles for sharing groupfolder is shared with a user-group groupfolder gave advanced permissions to a couple of users when in files of these advanced users, advanced permissions are displayed but don't show circles in the add list Capture d’écran 2023-08-21 aΜ€ 11 55 07

thanks a lot if you can make us move on to the next level of using Groupfolders ✌️

maximelehericy commented 1 year ago

@punkyard you need to add the circles from the admin menu first (admin > groupfolders)

punkyard commented 1 year ago

thanks @maximelehericy but what's the point then? wouldn't it ba exactly the same as sharing with a user-group? .. If you don't mind me saying

sharing with circles was requested by us so users in user-groups with no admin permissions could work with teams in circles, and add circles autonomously - without admin intervention (we have 12 user-groups, with moving teams, up to 15 circles in a user-group: the admin can't be there for them all the time) - though the users with permissions on the groupfolder are able to add permissions to people through the share menu (on the left) - in our situation these users with permissions need to be able to add circles of people which are in their user-group anyway - or let's say that if a groupfolder is shared to a circle by a user with permissions in the left menu, user that are in this circle -but whom are not in the user group- shouldn't be able to access the content .. if this makes any sens to you ..

if this function is added but users need admin permissions to add circles to groupfolders .. aint gonna do much betta, ain'it ^^

please, think about it, and show me where I go wrong ✌️

maximelehericy commented 1 year ago

I think I get what you mean. To me, the main limitation with groupfolders at the moment, is that as a user either you get access to full groupfolder scope (with groupfolder admin delegation), either you get access to nothing. In the first case, there is information disclosure risks, in the latter it puts barriers to self config of collaboration and any change must go through an admin. I'd love to see something in between, where you can grant a user access to a certain scope of groupfolders:

Admin access would be identical to what it is today, simply the list of groupfolders would be restricted to the scope you have rights on.

punkyard commented 8 months ago

thanks @maximelehericy for sharing. I came with the correct question in my situation: when we needed to share Groupfolders with circles, did it mean share with Circles in Groupfolder admin panel or sharing permissions in the right panel of the Files app page?

I think what we needed was the second option..