pondersource / nextcloud-mfa-awareness

Make Nextcloud aware of whether the current user is logged in with Multi-Factor Authentication
MIT License
0 stars 2 forks source link

Try out what happens if a folder is not owned by any user (e.g. shared S3 bucket / group drive) #32

Closed michielbdejong closed 1 year ago

shokri-navid commented 1 year ago

Is there any feature for sharing files on NextCloud to share a file without any owner?

michielbdejong commented 1 year ago

I think the way to set up such a folder (not owned by any user) is with https://apps.nextcloud.com/apps/groupfolders See also https://www.youtube.com/watch?v=LaTd-TTj41Q and https://help.nextcloud.com/t/how-to-create-a-group-folder/43740/2

mrvahedi68 commented 1 year ago

I saw video and read the documents. I don't understand why this section is important. As you know only Admin and Owner can set or unset MFA verified check, so if this type of files has no owner then only Admin can change the MFA verified check. Admin creates this type of files and folders and The only verified user to change in the check is Admin.

mrvahedi68 commented 1 year ago

Tested Scenario: Installed Group folder app on nextcloud and created some group. Created new folder for this group. Users inside that group had access to that folder completely, then by admin added our restricted tag to the folder. after that only users with Mfa verified check had access to the folder. Another test scenario: Created one folder with Admin1 and added tag with Admin2 and the result was same as first scenario.

michielbdejong commented 1 year ago

LGTM, great work!

michielbdejong commented 1 year ago

For completeness, this is another way to add a mounted storage for all users. I would expect the tag would apply in the same way for this configuration:

https://docs.nextcloud.com/server/latest/admin_manual/configuration_files/external_storage_configuration_gui.html#storage-configuration

mrvahedi68 commented 1 year ago

I do that. Here is the result: It was as expected. Test result here is from user2 that has not MFA verified.

11 22