Open
Description
Steps to reproduce
- have the guests app enabled and the config set like:
$ php occ config:list guests
{
"apps": {
"guests": {
"enabled": "yes",
"group": "guest_app",
"installed_version": "0.10.0",
"signed": "true",
"types": "authentication",
"usewhitelist": "true",
"whitelist": "settings"
}
}
}
The whitelist is set to just "settings" so that guest users should just be able to see
2. Create a guest user, login as the guest user
Expected behaviour
When opening the details for a file, there should not be any Sharing, Tags or Versions panels.
There should not be any option to "create a new textfile", because files_texteditor is not whitelisted.
Actual behaviour
- there is no Versions panel - good
- the Sharing panel exists, but is a "spinner". No data is shown. Half-way good ;)
- the Tags panel exists - bad (systemtags is not whitelisted, so the guest should not be able to use it)
- the guest user can attempt to create a new text file. The text editor opens, but just has a spinner. The user is stuck. The option for the text editor should not be shown at all.
It seems that some apps themselves respect the guest whitelist, but some core UI elements still appear. And other apps, like systemtags do not respect the whitelist at all.
Server configuration
Current core master and latest master of guests, files_texteditor etc.
Metadata
Metadata
Assignees
Labels
No labels