Server: Putting a file into a shared folder

Created on 20 Aug 2019  路  6Comments  路  Source: nextcloud/server

Steps to reproduce

  1. Put a file/folder into a shared folder

The problem

I am convinced there should be a warning displayed whenever user puts a file or a folder inside a shared folder because it will be immediately shared with others (public). There could be user error where file is incorrectly moved for whatever reason into the shared folder and all sensitive files are exposed.

Screenshot_1
Picture: Moving a whole folder of sensitive files inside a shared folder, shares the folder recursively to the public.

The solution

is very simple, simply print a warning dialog whenever (picture) that occurs.

Nextcloud version: (see Nextcloud admin page)
15

0. Needs triage enhancement

Most helpful comment

could you share screenshots of the process of how Google Drive handles this?

Here's how Drive handles it when you try to drop any file/folder inside a shared folder:
(this is a dialog)
Screenshot_2

How would we know which files are sensitive?

Perhaps I haven't explained well enough- all files/folders are treated as "sensitive" when it comes to putting them in a folder which would expose it to the public - for that reason, confirmation is required to proceed with sharing

All 6 comments

cc @nextcloud/designers @nextcloud/sharing

I think this is not a bug but an enhancement.

The correct way to do this is not show a warning, but for every move there should be a confirmation saying:

Moved Sensitive files into Shared documents [ Undo ]

I disagree, but it's still better than nothing. (See Google Drive for reference)

(See Google Drive for reference)

@pilsnerbeer could you share screenshots of the process of how Google Drive handles this? That would be very helpful. :) Maybe also Dropbox, if you have it at hand.

How would we know which files are sensitive?

could you share screenshots of the process of how Google Drive handles this?

Here's how Drive handles it when you try to drop any file/folder inside a shared folder:
(this is a dialog)
Screenshot_2

How would we know which files are sensitive?

Perhaps I haven't explained well enough- all files/folders are treated as "sensitive" when it comes to putting them in a folder which would expose it to the public - for that reason, confirmation is required to proceed with sharing

Was this page helpful?
0 / 5 - 0 ratings