"File access control" blocks me on Android and with documents on desktop #199
Labels
Comments
|
@juliushaertl when collabora is fetching those files, it does not do in a logged-in state, is it? |
|
Yes, collabora uses unauthenticated requests but we get the user from the wopi token and set the user in the session https://github.com/nextcloud/richdocuments/blob/master/lib/Service/UserScopeService.php#L53 I also tried to reproduce but it worked fine for me:
|
|
Nonetheless I keep encountering this issue. Maybe I forgot to add useful informations such as a log in
Or what the log of Nextcloud says when I attempt to access a .docx file behind a block through the browser of my pc. I already reported it (it is the
|
|
Wopi got some special handling in the meantime in terms of service and other places: Maybe you can retry if that is still a problem and if so post new stacktraces as well as your current rule set? |
|
In the meantime I stopped using File Access Control so I didn't encountered the problem again. I also reinstalled Nextcloud in another instance with the AIO image, so who knows? |
Server configurationOperating system: Linux 5.15.0-60-generic x86_64 Nextcloud version: Nextcloud Hub 3 (25.0.6) Client configurationBrowser: Firefox 113.0 (64bit) LogsNextcloudNextcloud AIONextcloud containerApache containerCollabora containerSteps to reproduce
It says that if the file is tagged "Samuele" and the user does not belong to group "Samuele", the file cannot be accessed. Actual behaviour
Reloaded the page, trying to create the same test.md file answers like the file already exists (?): Still cannot create a file:
|
|
Looks similar (or even a duplicate?) like this issue here: nextcloud/richdocuments#1168 |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
I already opened an issue in the forum, but I report here as it seems something specifically related to this Git.
Steps to reproduce
Set a filter with File access control like this. I'm sorry it is in Italian, it says that when the file is tagged with "Samuele" and the user is not in the group "Samuele", the file should not be accessed. I can confirm that non-"Samuele" users can't see such files when I share a folder with them.
Add your user to the right group so that you can go through the previous filter. Here you can see I'm in "Samuele".
Filter the folder with the right tag, so that the filter takes action. I tagged the folder inside which I encounter the issue.
Try to access an .md of .odt or .docx (for these I use Collabora) thats behind a File access control filter.
You can try moving such files in a folder that has no filter and you'll see that now it works.
Expected behaviour
.md and .docx files should open normally both in Android and on Web interface, if I comply with the rules I set in the File access control flow.
Actual behaviour
Instead I try to access an .md or .docx and I receive "Loading takes a long time" and nothing more. On Web interface, Collabora shows a message saying that maybe the file format is not supported.
Server configuration
Operating system: Ubuntu 18.04.1 LTS (GNU/Linux 4.15.0-136-generic x86_64)
Web server: Apache/2.4.29 (Ubuntu)
Database: mysql Ver 8.0.25 for Linux on x86_64 (MySQL Community Server - GPL)
PHP version: PHP 8.0.5
Nextcloud version: 21.0.2
Where did you install Nextcloud from: If I remember well I downloaded it with
wgetand installed it on the VPS.Signing status:
List of activated apps:
Nextcloud configuration:
Are you using external storage, if yes which one: NO
Are you using encryption: NO
Are you using an external user-backend, if yes which one: NO
Client configuration
Browser: Opera 76.0.4017.123
Operating system: KDE Neon 5.21
Logs
Nextcloud log (data/owncloud.log)
I suppose you mean the logging section in the Settings of Nextcloud.
Browser log
Javascript console when trying to open a .docx that is behind a filter of File access control:The text was updated successfully, but these errors were encountered: