owncloud / ocis

:atom_symbol: ownCloud Infinite Scale Stack
https://doc.owncloud.com/ocis/next/
Apache License 2.0
1.38k stars 181 forks source link

Able to share a personal space / Access personal space of other user #6238

Closed hurradieweltgehtunter closed 1 year ago

hurradieweltgehtunter commented 1 year ago

Describe the bug

Happened with an outdated iOS sharing dialog. But nevertheless, shouldn't be possible in backend.

Steps to reproduce

Steps to reproduce the behavior:

  1. Alice wants to share space "Space A" with einstein. Sharing dialogue looks: IMG_8225

  2. Einstein receives this notification grafik

  3. Clicking on it, einstein has access to the personal space of alice: grafik

@micbar , as discussed

felix-schwarz commented 1 year ago

Fixed iOS-side via new sharing UI (latest in https://github.com/owncloud/ios-app/pull/1207).

micbar commented 1 year ago

Backend fix in https://github.com/cs3org/reva/pull/3849

micbar commented 1 year ago

Fixed by #6340