nextcloud / server

☁️ Nextcloud server, a safe home for all your data
https://nextcloud.com
GNU Affero General Public License v3.0
27.17k stars 4.04k forks source link

Share access combination: read-only and upload of new files in same (internal)share or link #30102

Open cguentherTUChemnitz opened 2 years ago

cguentherTUChemnitz commented 2 years ago

Motivation: Is your feature request related to a problem? Please describe. nextcloud as family event image sharing platform

event-content-sharing: Nextcloud is used as a private instance to share family and party photos internally for the family. Every household has it's own account, like grandparents, parents and children. (Some households have their own nextcloud instance connected via federated share, but this should not impact the described use-case here.) Every household has a sync-client on the desktop syncing the "shared-with-me" folder. When family event like a birthday takes place, a lot of different people take photos there. So afterwards a central family member creates a share for the event and shares it with every party attended household. The sync-client creates automatically the folder for everyone receiving this share and everyone who did take a pictures is able to place its own photos there, as well as looking for the images of the others.

The problem there is, that we need access right combination in a single share of:

So this comes down to access rights of read-only with upload capability.

For now this can be achieved by providing two different shares to the same folder, one as upload-only and one as read-only. But this is too complex to explain and maintain, especially for not technical advanced people like grandparents. So this is a crucial feature here for this use-case to keep it simple for the share-receiving party, providing data safety against erroneous file- overwrites, deletes, moves etc.

Describe the solution you'd like The solution in my eyes would be to make it possible to combine the read-only and upload share option in the same share, providing read-only access to existing files and possibility to upload new ones, but protect against erroneous file- overwrites, deletes, moves. It is also in my eyes fine, that the uploader has after the upload only read-only access to its own uploaded files. The management access should lie in the ownership of the share, like the user who created the share, or the group-members of the groupfolder where it resides in.

Describe alternatives you've considered In my eyes also business use-cases can benefit from this option, like the possibility to check days after an upload-only share upload, if the correct files were uploaded. It happens in my eyes also there quite often that a business needs a file-drop from a partner. When later questions arrive and a phone-call is initialized, where both sides need to sync their understanding, if they are talking about the "same" uploaded content. In this case it would be beneficial if also the uploader would be able to look into his own already uploaded file in read-only mode using the same share / link where the upload was done.

joshtrichards commented 1 year ago

Hi @cguentherTUChemnitz - Have you attempted any of this through the optional groupfolders app and Advanced Permissions? You may have, and I apologize if so, but that's unclear from the above.

https://github.com/nextcloud/groupfolders/#setting-advanced-permissions

There may also be some new paths by way of Shared Albums in the >=2.x NC Photos app. Or even the Memories app: https://apps.nextcloud.com/apps/memories