CollaboraOnline group restricted access let public access possible

[ghost]

Steps to reproduce

1. Configure and activate CollaboraOnline app and restrict access to a group of users in the CollaboraOnline administration panel
2. Create a public share with a CollaboraOnline document
3. Access this public share
4. Click a CollaboraOnline document to download it

Expected behaviour

Clicking the document should download it

Actual behaviour

Clicking the document is trying to open it in CollaboraOnline

Server configuration

Operating system: Debian 8.11

Web server: Apache 2.4.10-10+deb8u13

Database: MariaDB 10.0.38-0+deb8u1

PHP version: 7.0.33-1~dotdeb+8.1

Nextcloud version: (see Nextcloud admin page) 15.0.5

Updated from an older Nextcloud/ownCloud or fresh install: Updated

Where did you install Nextcloud from:

Signing status:

List of activated apps:

• accessibility: 1.1.0
• activity: 2.8.2
• admin_audit: 1.5.0
• calendar: 1.6.4
• cloud_federation_api: 0.1.0
• comments: 1.5.0
• contacts: 3.1.0
• dav: 1.8.1
• external: 3.2.0
• federatedfilesharing: 1.5.0
• federation: 1.5.0
• files: 1.10.0
• files_accesscontrol: 1.5.0
• files_pdfviewer: 1.4.0
• files_rightclick: 0.13.0
• files_sharing: 1.7.0
• files_texteditor: 2.7.0
• files_trashbin: 1.5.0
• files_versions: 1.8.0
• files_videoplayer: 1.4.0
• gallery: 18.2.0
• groupfolders: 2.0.4
• logreader: 2.0.0
• lookup_server_connector: 1.3.0
• notifications: 2.3.0
• oauth2: 1.3.0
• password_policy: 1.5.0
• provisioning_api: 1.5.0
• rainloop: 6.0.2
• richdocuments: 3.2.4
• serverinfo: 1.5.0
• sharebymail: 1.5.0
• spreed: 5.0.2
• survey_client: 1.3.0
• systemtags: 1.5.0
• theming: 1.6.0
• twofactor_backupcodes: 1.4.1
• updatenotification: 1.5.0
• user_ldap: 1.5.0
• workflowengine: 1.5.0

Are you using an external user-backend, if yes which one: LDAP/ActiveDirectory/Webdav/... LDAP

[kesselb]

Would you mind to report this issue to https://github.com/nextcloud/richdocuments?

cc @juliushaertl

[ghost]

Hi,

I don't know if this issue concern the server part or the app part.

Clément

[juliushaertl]

This is an issue of the richdocuments app, I guess we should add some check on public pages if the share owner is part of the allowed groups and otherwise block the editing with collabora.

[ghost]

Ok then, is-it possible to move this issue ?

Thanks

[juliushaertl]

Maybe @rullzer can move it over? :wink:

[ghost]

Hello,

No news from this thread ?

Clément

[borisa31]

Hello,

i have the same problem : on my server, CollaboraOnline app is limited to certain users because it sometimes breaks files if you also edit the document with Word or Openoffice. Public link access is really problematic...

Boris

[stale[bot]]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

[ghost]

Hello,

No news from this thread ?

Clément

[stale[bot]]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

[EnderArchery]

Have the same problem. (Tried to use it as a workaround for collabora online opening png files when shared by a public link)

[quentinDupont]

Same issue here :/