Skip to content

Conversation

@backportbot
Copy link

@backportbot backportbot bot commented Dec 2, 2025

Backport of PR #55811

@backportbot backportbot bot requested a review from a team as a code owner December 2, 2025 14:42
@backportbot backportbot bot requested review from Altahrim, ArtificialOwl, CarlSchwan, icewind1991, juliusknorr, nfebe and provokateurin and removed request for a team December 2, 2025 14:42
@backportbot backportbot bot added this to the Nextcloud 32.0.3 milestone Dec 2, 2025
@nfebe nfebe enabled auto-merge December 2, 2025 16:43
@nfebe nfebe force-pushed the backport/55811/stable32 branch from 4e61fe2 to a72573c Compare December 2, 2025 17:00
@nextcloud-bot nextcloud-bot mentioned this pull request Dec 3, 2025
1 task
When a logged-in user accesses a public share link in the same browser,
the system was incorrectly checking if that user's groups were excluded
from creating link shares. This caused share not found errors for users
in excluded groups, even though public shares should be accessible to anyone
with the link.

The group exclusion setting (`shareapi_allow_links_exclude_groups`) is
intended to restrict share creation, not share access. Public shares
are meant to be anonymous and accessible regardless of the viewer identity
or group membership.

We now check the exclusion for the share creator and not the viewer.

Signed-off-by: nfebe <[email protected]>
@AndyScherzinger AndyScherzinger force-pushed the backport/55811/stable32 branch from a72573c to 58991b1 Compare December 3, 2025 18:53
Copy link
Member

@AndyScherzinger AndyScherzinger left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🐘

@juliusknorr juliusknorr disabled auto-merge December 3, 2025 21:09
@juliusknorr juliusknorr merged commit 96b5037 into stable32 Dec 3, 2025
197 of 199 checks passed
@juliusknorr juliusknorr deleted the backport/55811/stable32 branch December 3, 2025 21:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants