occ instance:import:user creates empty files when encryption is enabled

[jnweiger]

Seen with data_exporter-0.2.2-rc.1, encryption-1.6.1-rc.1 and owncloud core-10.12.2

• log in admin user at webUI
• create a small text file with texteditor, upload a png image file.
• occ instance:export:user admin /tmp/aa1 -> both files are there, and correct. OK
• occ instance:import:user --as=admin2 /tmp/aa1/admin -> a new account admin2 is created, all files show up in the web UI. OK
• Try to download the text file, or the png file. Both have 0 size. BAD.
• In the filesystem both appear with ca 8kb size, due to encryption overhead.
• occ encryption:decrypt-all succeeds without errors. OK.
• Now both files also have 0 size in the filesystem.

This can lead to a potential dataloss, when an admin deletes the export after importing seems successful.

Expected behaviour:

• create correct files, even when encryption is enabled, or at least
• give an error message, that encryption must be disabled first.

[jnweiger]

Everything works fine, when the encryption app is loaded, but encryption is disabled, as per occ encryption:disable

configreport.zip

[jnweiger]

See also #234

[phil-davis]

I suppose that this has always been a problem.

The data_exporter (and importer) app is for "one off" moves of data. Maybe it is OK to document that import is not supported into an instance with encryption enabled. That will be OK for cases where someone is moving data from an old to a new instance - the new instance can be set up without encryption, import all the needed users/data, then enable encryption...

But maybe there are use cases where a user's data needs to be moved from instance A to instance B, and instance B already has many production users and encryption. For that, it needs to be possible to import a single user successfully into an existing encrypted instance.

[dpapac]

More research should be done on what exactly the import command is doing.. Should the import only work when encryption is disabled?

[IljaN]

In theory it should also work with Master-Key encryption