Sharing without change permission should not show a rename button

[jnweiger]

Testing web UI of 10.2.1RC3

User admin shares folder AdminPhotos with user jwtest with share, create, delete permissions, but without change permission:

User jwtest does not see a rename button on files within AdminPhotos (no change permisision, ok). But user jwtest has a rename button on subfolders within AdminPhotos.

Actually trying a rename results in an error then. This is inconsistent. Either always have the rename button and show errors, or never have the rename button.

[phil-davis]

I guess jwtest also has read permission. Actually read+create+delete=>change in a logical sense. If I have read+create+delete and I want to:

• change the name of a file, then download the file, delete the file on the server, rename the file locally, upload (create) the file on the server
• change the content of an existing file, then delete the file on the server and upload a local file with different content

So IMO even being able to specify just read+create+delete without change is "odd"

[jnweiger]

Yes, there seems to be an implicit read permission. The UI does not expose that to me, that is why I did not mention that.

I agree that (read+)delete+create should imply change for consistency with available workarounds. Although the workaround of delete+recreate has sideeffects, that an inplace change would not have: UUID changes, shares get dropped, ...

[phil-davis]

Yes, the webUI always gives read priv. It has no UI for removing that.

[stale[bot]]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed in 10 days if no further activity occurs. Thank you for your contributions.