Skip to content

Conversation

@nfebe
Copy link
Contributor

@nfebe nfebe commented Oct 17, 2025

Following #55811 split shareApiAllowLinks() into two dedicated methods to improve clarity
and separation of concerns:

  • isLinkSharingEnabled(): Checks if link sharing is globally enabled
  • canUserCreateLinkShares(): Checks if a user can create link shares
    (considers both global settings and group restrictions)

The original shareApiAllowLinks() is now deprecated and acts as a
wrapper to maintain backward compatibility.

nfebe added 2 commits October 16, 2025 15:53
When a logged-in user accesses a public share link in the same browser,
the system was incorrectly checking if that user's groups were excluded
from creating link shares. This caused share not found errors for users
in excluded groups, even though public shares should be accessible to anyone
with the link.

The group exclusion setting (`shareapi_allow_links_exclude_groups`) is
intended to restrict share creation, not share access. Public shares
are meant to be anonymous and accessible regardless of the viewer identity
or group membership.

Signed-off-by: nfebe <[email protected]>
Following #55811 split `shareApiAllowLinks()` into two dedicated methods to improve clarity
and separation of concerns:

- `isLinkSharingEnabled()`: Checks if link sharing is globally enabled
- `canUserCreateLinkShares()`: Checks if a user can create link shares
  (considers both global settings and group restrictions)

The original shareApiAllowLinks() is now deprecated and acts as a
wrapper to maintain backward compatibility.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants