Skip to content

[stable32] fix(sharing): Allow public share access for everyone - #56798

Merged
juliusknorr merged 1 commit into
stable32from
backport/55811/stable32
Dec 3, 2025
Merged

[stable32] fix(sharing): Allow public share access for everyone#56798
juliusknorr merged 1 commit into
stable32from
backport/55811/stable32

Conversation

@backportbot

Copy link
Copy Markdown

Backport of PR #55811

@backportbot
backportbotBot requested a review from a team as a code ownerDecember 2, 2025 14:42
@backportbot
backportbotBot requested review from Altahrim, ArtificialOwl, CarlSchwan, icewind1991, juliusknorr, nfebe and provokateurin and removed request for a teamDecember 2, 2025 14:42
@backportbotbackportbotBot added this to the Nextcloud 32.0.3 milestone Dec 2, 2025
@nfebe
nfebe enabled auto-merge December 2, 2025 16:43
Comment threadlib/public/Share/IManager.php Outdated
@nfebe
nfebeforce-pushed the backport/55811/stable32 branch from 4e61fe2 to a72573cCompareDecember 2, 2025 17:00
@nextcloud-botnextcloud-bot mentioned this pull request Dec 3, 2025
1 task
When a logged-in user accesses a public share link in the same browser,
the system was incorrectly checking if that user's groups were excluded
from creating link shares. This caused share not found errors for users
in excluded groups, even though public shares should be accessible to anyone
with the link.
The group exclusion setting (`shareapi_allow_links_exclude_groups`) is
intended to restrict share creation, not share access. Public shares
are meant to be anonymous and accessible regardless of the viewer identity
or group membership.
We now check the exclusion for the share creator and not the viewer.
Signed-off-by: nfebe <fenn25.fn@gmail.com>

@AndyScherzingerAndyScherzinger left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🐘

@juliusknorr
juliusknorr merged commit 96b5037 into stable32Dec 3, 2025
197 of 199 checks passed
@juliusknorr
juliusknorr deleted the backport/55811/stable32 branch December 3, 2025 21:09
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants

@AndyScherzinger@nfebe@juliusknorr