[ocis][Secure View] Open files in Collabora which have no download permission

[micbar]

Description

Open files in Collabora which have no download permission

User Stories

• As a user, i want to share highly confidential data which can only be viewed on the server to keep the information undisclosed.

Value

Make ocis usable for highly confidential data

Acceptance Criteria

• [ ] Collabora can download a file via WOPI which has no InitiateFileDownload permission granted to the requesting user.

Research outcome

• The gateway should provide a second reva token to a trusted App provider that can only download the single file.

See #8855

Definition of ready

• [ ] Everybody needs to understand the value written in the user story
• [ ] Acceptance criteria have to be defined
• [ ] All dependencies of the user story need to be identified
• [ ] Feature should be seen from an end user perspective
• [ ] Story has to be estimated
• [ ] Story points need to be less than 20

Definition of done

• Functional requirements
  • [ ] Functionality described in the user story works
  • [ ] Acceptance criteria are fulfilled
• Quality
  • [ ] Code review happened
  • [ ] CI is green (that includes new and existing automated tests)
  • [ ] Critical code received unit tests by the developer
• Non-functional requirements
  • [ ] No sonar cloud issues
• Configuration changes
  • [ ] The next branch of the ocis charts is compatible

[2403905]

@micbar Are we going to add a Secure View mode for the public links?

[micbar]

The feature will not be available on public links. Anonymous access is completely contradicting the purpose of secure view.

[butonic]

prerequisites:

• [x] https://github.com/cs3org/reva/pull/4685
• [x] https://github.com/cs3org/reva/pull/4686

pr to use the view only token in our collaboration service

• [x] https://github.com/owncloud/ocis/pull/9192

[butonic]

• [x] needs reva bump to 8fb71adbe50042ed2e252518ff7c15381ee37e6e https://github.com/owncloud/ocis/pull/9188

[butonic]

@ScharfViktor How do we best test this? AFAICT it needs an end 2 end test

[ScharfViktor]

@ScharfViktor How do we best test this? AFAICT it needs an end 2 end test

I'll take a look. thanks that moved it to Need Tests

[ScharfViktor]

close as completed