Ralf Haferkamp

docs: Outdated docs (mentioning glauth, accounts and other outdated things)

5

## Describe the bug The follwoing files in our dev docs this mention the accounts and/or glauth services and also look outdated in some other ways - [ ] ocis/deployment/bridge.md...

Lost permission when received multiple shares on the same resource

7

## Describe the bug - userA creates a folder with a txt file in it - userA shares that folder with userB with "Can edit" permissions - userA shares that...

Different remaining space base shown in space list and sidebar

4

There is also a bit of discrepancy in the UI regarding the remaining space. In the space list (when using the table view instead of the grid view) we see...

watchfs: possible metadata coruption after upload

2

## Describe the bug With `STORAGE_USERS_POSIX_WATCH_FS=true`, when a user changes a file on-disk while a file with the same name is upload via WebDAV and still being stuck in post-processing...

This contains a compose example to get a multi-tenant opencloud with the external provsioning service up. Also contains a fix to keep the graph service runnable without nats. Related ticket...

multi-tenancy: Space admin can still list spaces from all tenants

1

## Describe the bug In a multi-tenant setup, any user with the role SpaceAdmin can list all space from all tenants ## Steps to reproduce 1. deploy a multi-tenant enabled...

Deprecate and remove `/cloud/user/signing-key` endpoint

5

With https://github.com/opencloud-eu/opencloud/pull/1191 we're getting one step closer to being able to remove the need to client side created signed urls. ## Problem * The `signing-key` endpoint is the last remaining...

User cache in graph service is not multi-tenant safe

1

## Describe the bug The graph service maintains a simple in-memory cache for looking up users by userid (https://github.com/opencloud-eu/opencloud/blob/main/services/graph/pkg/identity/cache.go#L87), that cache does currently not take the tenant-ids of the requesting...

Find a way to set quota on personal space

3

As the "cs3" backend in graph doesn't support the OData filters yet, it is currently not possible to set quota on personal spaces. Possible solutions: - Add `$filter` support to...

Make Autoprovisioning work in multi-tenancy setups

1

* the Tenant-id comes in as a claim via OIDC, a user needs to be autoprovisioned for the correct tenant. * a unique identifier from the original identity management system...