Skip to content

tests: check access of guests and sharees outside of the shared resource - #3771

Open
v-scharf wants to merge 1 commit into
mainfrom
test/guest-links-security-more
Open

v-scharf wants to merge 1 commit into
mainfrom
test/guest-links-security-more

Conversation

@v-scharf

Copy link
Copy Markdown
Contributor

More acceptance tests for guest links and sharees:

  • guest: Viewer role, share root delete/rename, archiver (also shares of different users), copy/move between shares
  • sharee: no access to the owner's space using the drive id from sharedWithMe

Bugs found (expected failures):

@codacy-production

Copy link
Copy Markdown

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

NEW Get contextual insights on your PRs based on Codacy's metrics, along with PR and Jira context, without leaving GitHub. Enable AI reviewer
TIP This summary will be updated as you push new changes.

@v-scharf
v-scharf force-pushed the test/guest-links-security-more branch from e1ca121 to d5ca07e Compare October 20, 2026 14:59
@v-scharf
v-scharf requested a review from saw-jan October 22, 2026 13:53
| shareType | user |
| permissionsRole | Editor |
And user "Brian" has a share "folderToShare" synced
When user "Brian" tries to delete the shared folder "folderToShare" using the WebDAV API

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
When user "Brian" tries to delete the shared folder "folderToShare" using the WebDAV API
When user "Brian" tries to delete the shared folder "folderToShare" with file-id using the WebDAV API

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

hmm, I believe all the steps here is done using the file-id

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants