Security View with disabled Download permission Support

[ShGKme]

In shares, there is a Security view that allows a user to see a file but forbids to download the file and hides the "Download" button from the UI.

It works for internal user share and internal group share. But it doesn't work for a circle.

Steps to reproduce:

1. Create a circle
2. Share a file with a circle
3. Check "Read" permission
4. Uncheck all other permissions, including "Download"

Expected behavior:

A user cannot download the file

Actual behavior:

A user can download the file

Versions

Nextcloud 27.1.0 + Circles 27.0.1 with AIO

[ShGKme]

Also tested with the current master server and circles (28.0.0). Same problem.

And a strange behavior:

1. Create a share with disabled "Allow download"
2. Save
3. Reload the page
4. "Allow download" is enabled.
5. After disabling it again, it saves. But a circle user still can download the file

[malehovich]

Same problem. It is not possible to disable permission to download files when sharing within a domain.