nextcloud/lib/private
nfebe 4fce681f8a fix(sharing): Allow public share access for everyone
When a logged-in user accesses a public share link in the same browser,
the system was incorrectly checking if that user's groups were excluded
from creating link shares. This caused share not found errors for users
in excluded groups, even though public shares should be accessible to anyone
with the link.

The group exclusion setting (`shareapi_allow_links_exclude_groups`) is
intended to restrict share creation, not share access. Public shares
are meant to be anonymous and accessible regardless of the viewer identity
or group membership.

We now check the exclusion for the share creator and not the viewer.

Signed-off-by: nfebe <fenn25.fn@gmail.com>
2026-06-22 15:48:34 +01:00
..
Accounts fix: Use strict array comparisons in lib/ 2026-01-13 17:08:00 +01:00
Activity fix(RichObjectStrings): Make exception messages for invalid parameters more useful for debugging 2025-03-17 06:46:12 +01:00
App Merge pull request #55436 from nextcloud/backport/55422/stable31 2025-09-30 23:50:03 +02:00
AppFramework fix: Do not set last-password-confirm for apptoken sessions 2026-06-16 14:34:14 +00:00
Archive chore(deps): Update nextcloud/coding-standard to v1.3.1 2024-09-19 14:21:20 +02:00
Authentication fix: Use token expiration for ephemeral sessions 2026-06-16 09:58:24 +02:00
Avatar chore(deps): Update nextcloud/coding-standard to v1.3.1 2024-09-19 14:21:20 +02:00
BackgroundJob fix(cron): Fix infinite loop on ParallelAware blocked jobs 2025-07-28 06:23:11 +00:00
Blurhash/Listener fix(blurhash): Skip generation the if previews are disabled. 2025-05-27 12:56:31 +00:00
Broadcast/Events chore: Add SPDX header 2024-05-24 13:11:22 +02:00
Cache refactor(filecache): Move to more strict typing 2024-11-25 10:29:51 +01:00
Calendar fix: iMip reply from outlook.com does not contain organizer property 2025-10-23 12:14:00 -04:00
Collaboration feat(UserPlugin): Also full match on additional email addresses 2026-01-21 16:07:10 +01:00
Command fix(jobs): Limit command jobs to known cases 2025-11-05 13:51:42 +01:00
Comments Merge pull request #47329 from nextcloud/feat/add-datetime-qbmapper-support 2024-10-18 19:05:08 +02:00
Config fix(userconfig): duplicate core lexicon 2026-01-22 18:28:31 +01:00
Console fix(command): Make method compatible with upstream class (requires 3rdparty bump) 2024-10-07 12:11:25 +02:00
Contacts/ContactsMenu fix: Unify handling of exclude groups in contacts menu and sharing 2026-01-07 18:34:58 +01:00
Dashboard fix(dashboard): Document expected icon behaviour 2024-07-11 13:14:03 +00:00
DB feat(db): add truncateTable method 2026-01-19 08:28:14 +01:00
Diagnostics feat(log): Allow to combine log.conditions to only log (app&user) 2024-07-30 13:18:09 +02:00
DirectEditing chore(db): Apply query prepared statements 2024-10-17 20:30:47 +02:00
Encryption fix(encryption): init filesystem before unshare hook 2026-01-26 16:36:27 +07:00
EventDispatcher chore: Add SPDX header 2024-05-24 13:11:22 +02:00
Federation fix(federation): Allow outgoing federation with oCIS federated cloud ids 2025-10-24 09:56:08 +00:00
Files Merge pull request #59052 from nextcloud/backport/58724/stable31 2026-06-18 18:15:27 +02:00
FilesMetadata test: add some minimal testing for metadata storage 2024-11-07 16:27:16 +01:00
FullTextSearch chore: Use more gender neutral language 2024-10-14 13:59:24 +02:00
GlobalScale chore: Add SPDX header 2024-05-24 13:11:22 +02:00
Group fix: join accounts_data instead of preferences when searching users 2025-10-23 16:22:43 +02:00
Hooks chore: Add SPDX header 2024-05-24 13:11:22 +02:00
Http feat(CertificateManager): Add option to specify the default certificates bundle path 2025-12-01 11:57:26 +01:00
IntegrityCheck fix: Report duplicated extra files in integrity check 2025-02-26 13:26:38 +00:00
KnownUser chore: Use more gender neutral language 2024-10-14 13:59:24 +02:00
L10N fix(L10N): stop stripping _ from language codes 2026-02-25 15:54:51 +00:00
LDAP style: update codestyle for coding-standard 1.2.3 2024-08-25 19:34:58 +02:00
legacy fix(installer): ensure valid tempFile & extractDir 2025-08-19 22:37:22 +02:00
Lock fix(locking): Accept mixed as value on setTTL 2024-10-14 12:17:27 +02:00
Lockdown refactor(Storage): Align all Storage constructors 2024-10-23 13:24:18 +02:00
Log feat(log): Add script name and occ command to log details 2025-12-15 16:58:53 +01:00
Mail fix(Mailer): Log errors 2025-10-30 11:02:59 +00:00
Memcache Merge pull request #46151 from nextcloud/enh/do-not-enforce-cache-for-cli 2024-10-29 15:28:47 +01:00
Migration chore(deps): Update nextcloud/coding-standard to v1.3.1 2024-09-19 14:21:20 +02:00
Net fix: handle NAT64 addresses in isLocalAddress 2026-05-19 15:38:08 +00:00
Notification fix(notifications): Fix check for hasNotifiers when all apps use RegistrationContext 2025-06-12 22:00:46 +02:00
OCM fix(ocm): ignore cache if not setup 2025-10-13 11:24:57 -01:00
OCS chore(deps): Update nextcloud/coding-standard to v1.3.1 2024-09-19 14:21:20 +02:00
Preview fix: unbloc ffmpeg on some broken videos 2025-06-12 11:58:47 +02:00
Profile feat(profile): Add an API to get the profile field data 2025-04-24 00:50:11 +02:00
Profiler feat(profiler): Use gzdecode/gzencode to parse profiles 2025-11-30 19:23:16 +01:00
Remote chore: fix some comments 2024-07-29 14:43:27 +08:00
Repair fix: use mb_substr 2025-09-12 10:50:37 +00:00
RichObjectStrings Revert "refactor(RichObjectStrings): Only log error if key or value is not string in validator" 2025-04-09 08:29:43 +02:00
Route fix(route): Change "core.ProfilePage.index" to lowercase 2025-08-24 18:42:11 +02:00
Search feat(unified-search): Use existing min search length config 2025-09-29 10:55:48 +02:00
Security feat(CertificateManager): Add option to specify the default certificates bundle path 2025-12-01 11:57:26 +01:00
Session fix(setup): ignore long session login during installation 2024-08-27 12:29:42 -01:00
Settings Merge pull request #48721 from nextcloud/feat/allow-getter-setter-decl-fors 2024-11-06 08:54:40 +01:00
Setup chore(db): Apply query prepared statements 2024-10-17 20:30:47 +02:00
SetupCheck chore(deps): Update nextcloud/coding-standard to v1.3.1 2024-09-19 14:21:20 +02:00
Share feat(share): make sharelink token length configurable 2024-09-28 08:06:24 +02:00
Share20 fix(sharing): Allow public share access for everyone 2026-06-22 15:48:34 +01:00
SpeechToText fix(SpeechToTextManager): Throw TaskProcessing Task failed 2024-08-30 10:07:01 +02:00
Support fix: Fix warning when crash reporter fails to get loaded 2025-05-20 20:30:15 +00:00
SystemTag fix(systemtags): case-insensitive search & prevent duplicates 2025-07-10 08:50:23 +02:00
Tagging feat(db): switch from settype to casts 2024-09-15 19:26:58 +02:00
Talk style: update codestyle for coding-standard 1.2.3 2024-08-25 19:34:58 +02:00
TaskProcessing fix(TaskProcessing): Refactor TextToImage fallback 2026-02-26 10:51:41 +01:00
Teams fix(team-manager): ensure team resources are only retrived for members 2026-06-16 15:44:43 -03:00
Template fix: Do not show password dialog when user can not validate password 2025-07-29 15:55:09 +00:00
TextProcessing fix(textprocessing): accept scheduling a task if there are equivalent taskprocessing providers only 2024-11-13 16:59:46 +01:00
TextToImage fix: Prevent breaking change in IQueryBuilder 2024-10-17 18:31:44 +02:00
Translation chore: Add SPDX header 2024-05-24 13:11:22 +02:00
Updater fix(OpenAPI): Adjust array syntax to avoid ambiguities 2024-11-05 09:58:11 +01:00
User fix: Do not set last-password-confirm for apptoken sessions 2026-06-16 14:34:14 +00:00
UserStatus chore: Add SPDX header 2024-05-24 13:11:22 +02:00
AllConfig.php fix(userconfig): Don't fail the precondition if the value is not set at all 2024-11-19 18:02:22 +01:00
AppConfig.php fix(AppConfig#setTypedValue): Catch AppConfigUnknownKeyException 2025-08-27 21:31:35 +00:00
AppScriptDependency.php chore: Add SPDX header 2024-05-24 13:11:22 +02:00
AppScriptSort.php chore: Add SPDX header 2024-05-24 13:11:22 +02:00
BinaryFinder.php chore(deps): Bump nextcloud/coding-standard in /vendor-bin/cs-fixer 2024-10-19 07:57:35 +02:00
CapabilitiesManager.php feat(api): File conversion API 2025-01-15 16:38:18 -05:00
Color.php chore: Add SPDX header 2024-05-24 13:11:22 +02:00
Config.php feat(Config.php): change array_merge to array_replace_recursive when merging configs 2026-01-07 11:05:13 +00:00
ContactsManager.php fix(cardav): only show useres from enabled addressBooks in contacts menu 2025-03-19 23:46:57 +01:00
DatabaseException.php chore: Add SPDX header 2024-05-24 13:11:22 +02:00
DatabaseSetupException.php chore: Add SPDX header 2024-05-24 13:11:22 +02:00
DateTimeFormatter.php style: update codestyle for coding-standard 1.2.3 2024-08-25 19:34:58 +02:00
DateTimeZone.php chore: Use more gender neutral language 2024-10-14 13:59:24 +02:00
EmojiHelper.php chore: Add SPDX header 2024-05-24 13:11:22 +02:00
EventSource.php chore(deps): Update nextcloud/coding-standard to v1.3.1 2024-09-19 14:21:20 +02:00
EventSourceFactory.php chore: Add SPDX header 2024-05-24 13:11:22 +02:00
ForbiddenException.php chore: Add SPDX header 2024-05-24 13:11:22 +02:00
HintException.php chore: Add SPDX header 2024-05-24 13:11:22 +02:00
Image.php fix(OCP): Fix Image interface 2024-09-02 14:57:17 +02:00
InitialStateService.php chore(deps): Update nextcloud/coding-standard to v1.3.1 2024-09-19 14:21:20 +02:00
Installer.php fix(installer): ensure valid tempFile & extractDir 2025-08-19 22:37:22 +02:00
LargeFileHelper.php style: update codestyle for coding-standard 1.2.3 2024-08-25 19:34:58 +02:00
Log.php fix(log): Fix log level handling 2025-01-27 10:23:28 +00:00
MemoryInfo.php chore(deps): Update nextcloud/coding-standard to v1.3.1 2024-09-19 14:21:20 +02:00
NaturalSort.php chore(deps): Update nextcloud/coding-standard to v1.3.1 2024-09-19 14:21:20 +02:00
NaturalSort_DefaultCollator.php chore: Add SPDX header 2024-05-24 13:11:22 +02:00
NavigationManager.php fix(NavigationManager): Remove break to return all defaultEntryIds 2026-01-18 18:58:33 +01:00
NeedsUpdateException.php chore: Add SPDX header 2024-05-24 13:11:22 +02:00
NotSquareException.php chore: Add SPDX header 2024-05-24 13:11:22 +02:00
PhoneNumberUtil.php chore: Add SPDX header 2024-05-24 13:11:22 +02:00
PreviewManager.php fix: disable mp3 preview provider 2025-10-13 17:55:25 +02:00
PreviewNotAvailableException.php chore: Add SPDX header 2024-05-24 13:11:22 +02:00
RedisFactory.php fix(cache): Set default Redis port to 0 for UNIX sockets 2025-09-14 21:31:23 +02:00
Repair.php fix(dav): Mark removal of dav object properties as expensive 2025-09-02 19:36:26 +00:00
RepairException.php chore: Add SPDX header 2024-05-24 13:11:22 +02:00
Server.php feat(files): Add appconfig value to disable fixed userfolder permissions optimization 2026-01-14 19:21:06 +01:00
ServerContainer.php chore: Add SPDX header 2024-05-24 13:11:22 +02:00
ServerNotAvailableException.php chore: Add SPDX header 2024-05-24 13:11:22 +02:00
ServiceUnavailableException.php chore: Add SPDX header 2024-05-24 13:11:22 +02:00
Setup.php feat(install): dispatch InstallationCompletedEvent in Setup 2026-02-03 13:25:53 +01:00
Streamer.php refactor(Streamer): inject IDateTimeZone as constructor arg 2025-10-14 15:27:25 +02:00
StreamImage.php fix(OCP): Fix Image interface 2024-09-02 14:57:17 +02:00
SubAdmin.php fix: prevent editing delegated admins 2026-06-17 09:28:58 +00:00
SystemConfig.php feat: allow admins to configure additional sensitive config values 2025-08-07 13:09:23 +00:00
TagManager.php fix: Dispatch favorite event with an actual path 2025-09-15 16:52:28 +02:00
Tags.php fix: Use strict array comparisons in lib/ 2026-01-13 17:08:00 +01:00
TemplateLayout.php feat(unified-search): Use existing min search length config 2025-09-29 10:55:48 +02:00
TempManager.php refactor(TempManager): Simplify and unify implementations and remove legacy behavior 2025-03-03 15:25:00 +00:00
Updater.php fix(update): Correctly trigger update for auto-disabled local apps 2025-07-21 12:09:42 +00:00
URLGenerator.php fix(navigation): Fix absolute URLs from default apps 2025-04-28 14:54:35 +00:00