[Bug]: Share without "download" permission blocks readme.md

schiessle commented 11 months ago

⚠️ This issue respects the following points: ⚠️

[X] This is a bug, not a question or a configuration/webserver/proxy issue.
[X] This issue is not already reported on Github OR Nextcloud Community Forum (I've searched it).
[X] Nextcloud Server is up to date. See Maintenance and Release Schedule for supported versions.
[X] I agree to follow Nextcloud's Code of Conduct.

Bug description

If I share a folder without the "can download" permission the readme is not rendered

Steps to reproduce

Share a folder which contain a readme.md with a user and remove the download permission
Go to the recipient and open the folder

This is how the file listing looks like:

If I try to open the readme.md:

I also can't view the images.

Expected behavior

I can view the content in the browser and only the download should be forbidden.

If it is the intended behaviour we should have at least a nice file listing and a nice error message in all situations

Installation method

None

Nextcloud Server version

28

Operating system

None

PHP engine version

None

Web server

None

Database engine version

None

Is this bug present after an update or on a fresh install?

None

Are you using the Nextcloud Server Encryption module?

None

What user-backends are you using?

[ ] Default user-backend (database)
[ ] LDAP/ Active Directory
[ ] SSO - SAML
[ ] Other

Configuration report

No response

List of activated Apps

No response

Nextcloud Signing status

No response

Nextcloud Logs

No response

Additional info

No response

susnux commented 9 months ago

It is expected as the viewer uses webdav to download the files. If that is not allowed we can not show them

moritzthecat commented 4 months ago

It is expected as the viewer uses webdav to download the files. If that is not allowed we can not show them

@susnux the WEBDAV dependecy is now better understood.

replicating the test today came with same result above that also photos could not be shown if download disabled. Looks this is a NC architecture isseu then.

nextcloud / server