Skip to content

Conversation

@provokateurin
Copy link
Member

Copying a file from a groupfolder with ACL will result in a filecache entry with the ACL permissions still applied.
https://github.com/nextcloud/groupfolders/blob/3dfba93b129d5d0f329378c08bdb8c7b7b98d6d5/lib/ACL/ACLCacheWrapper.php#L47-L48 sets scan_permissions first and then applies the ACL permissions to the permissions. After that the CachePermissionMasks overwrites the scan_permissions with the permissions that already include the ACL permissions. tl;dr: Never overwrite the scan_permissions if they are already set, as they must be the original permissions.

@provokateurin provokateurin added this to the Nextcloud 33 milestone Sep 28, 2025
@provokateurin provokateurin requested a review from a team as a code owner September 28, 2025 12:09
@provokateurin provokateurin added bug 3. to review Waiting for reviews labels Sep 28, 2025
@provokateurin provokateurin requested review from a team, CarlSchwan, come-nc and icewind1991 and removed request for a team September 28, 2025 12:09
@provokateurin
Copy link
Member Author

/backport to stable32

@provokateurin
Copy link
Member Author

/backport to stable31

Signed-off-by: provokateurin <kate@provokateurin.de>
@provokateurin provokateurin force-pushed the fix/files/overwrite-scan-permissions branch from 8b1b267 to ef279f6 Compare September 28, 2025 12:12
@provokateurin
Copy link
Member Author

/backport to stable31

@provokateurin provokateurin merged commit 464d12e into master Sep 29, 2025
198 checks passed
@provokateurin provokateurin deleted the fix/files/overwrite-scan-permissions branch September 29, 2025 16:12
@camilasan
Copy link
Member

/backport to stable30

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

3. to review Waiting for reviews bug

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants