CollaboraOnline group restricted access let public access possible

ghost commented 5 years ago

Steps to reproduce

Configure and activate CollaboraOnline app and restrict access to a group of users in the CollaboraOnline administration panel
Create a public share with a CollaboraOnline document
Access this public share
Click a CollaboraOnline document to download it

Expected behaviour

Clicking the document should download it

Actual behaviour

Clicking the document is trying to open it in CollaboraOnline

Server configuration

Operating system: Debian 8.11

Web server: Apache 2.4.10-10+deb8u13

Database: MariaDB 10.0.38-0+deb8u1

PHP version: 7.0.33-1~dotdeb+8.1

Nextcloud version: (see Nextcloud admin page) 15.0.5

Updated from an older Nextcloud/ownCloud or fresh install: Updated

Where did you install Nextcloud from:

Signing status:

List of activated apps:

accessibility: 1.1.0
activity: 2.8.2
admin_audit: 1.5.0
calendar: 1.6.4
cloud_federation_api: 0.1.0
comments: 1.5.0
contacts: 3.1.0
dav: 1.8.1
external: 3.2.0
federatedfilesharing: 1.5.0
federation: 1.5.0
files: 1.10.0
files_accesscontrol: 1.5.0
files_pdfviewer: 1.4.0
files_rightclick: 0.13.0
files_sharing: 1.7.0
files_texteditor: 2.7.0
files_trashbin: 1.5.0
files_versions: 1.8.0
files_videoplayer: 1.4.0
gallery: 18.2.0
groupfolders: 2.0.4
logreader: 2.0.0
lookup_server_connector: 1.3.0
notifications: 2.3.0
oauth2: 1.3.0
password_policy: 1.5.0
provisioning_api: 1.5.0
rainloop: 6.0.2
richdocuments: 3.2.4
serverinfo: 1.5.0
sharebymail: 1.5.0
spreed: 5.0.2
survey_client: 1.3.0
systemtags: 1.5.0
theming: 1.6.0
twofactor_backupcodes: 1.4.1
updatenotification: 1.5.0
user_ldap: 1.5.0
workflowengine: 1.5.0

Are you using an external user-backend, if yes which one: LDAP/ActiveDirectory/Webdav/... LDAP

kesselb commented 5 years ago

Would you mind to report this issue to https://github.com/nextcloud/richdocuments?

cc @juliushaertl

ghost commented 5 years ago

Hi,

I don't know if this issue concern the server part or the app part.

Clément

juliushaertl commented 5 years ago

This is an issue of the richdocuments app, I guess we should add some check on public pages if the share owner is part of the allowed groups and otherwise block the editing with collabora.

ghost commented 5 years ago

Ok then, is-it possible to move this issue ?

Thanks

juliushaertl commented 5 years ago

Maybe @rullzer can move it over? :wink:

ghost commented 5 years ago

Hello,

No news from this thread ?

Clément

borisa31 commented 5 years ago

Hello,

i have the same problem : on my server, CollaboraOnline app is limited to certain users because it sometimes breaks files if you also edit the document with Word or Openoffice. Public link access is really problematic...

Boris

stale[bot] commented 5 years ago

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

ghost commented 5 years ago

Hello,

No news from this thread ?

Clément

stale[bot] commented 5 years ago

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

EnderArchery commented 3 years ago

Have the same problem. (Tried to use it as a workaround for collabora online opening png files when shared by a public link)

quentinDupont commented 2 years ago

Same issue here :/

nextcloud / richdocuments