khanh.pndc/nextcloud-docs
1
0
Fork 0
mirror of https://github.com/nextcloud/documentation.git synced 2026-01-03 02:09:45 +07:00
Code Issues Packages Projects Releases Wiki Activity

Extend warning about activities in groupfolders

Browse Source 
This extends the warning about activities in groufolders to mention the potential of
leaking sensitive data if "Advanced Permissions" are used.
See https://github.com/nextcloud/groupfolders/issues/1057 for more information.

Signed-off-by: Frieder Schrempf <frieder@fris.de>
This commit is contained in:
Frieder Schrempf
2022-02-18 11:52:54 +01:00
committed by Frieder Schrempf
parent 67ffcce5b5
commit 2727ba2f70
1 changed files with 3 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
admin_manual/configuration_server/activity_configuration.rst
View File

@@ -46,8 +46,9 @@ like in normal shares when set to ``true``.
This config option comes with the following limitations:
1. Users that had access to a groupfolder, share or external storage can see activities in their stream and emails that happen after they are removed until they login again
2. Users that are newly added to a groupfolder, share or external storage can not see activities in their stream nor emails that happen after they are added until they login again
1. If "Advanced Permissions" (ACLs) are enabled in a groupfolder, the activities don't respect the permissions and therefore all users see all activities, even for files and directories they don't have access to. **This potentially leaks sensitive information!** See `this issue <https://github.com/nextcloud/groupfolders/issues/1057>`_ for more information.
2. Users that had access to a groupfolder, share or external storage can see activities in their stream and emails that happen after they are removed until they login again
3. Users that are newly added to a groupfolder, share or external storage can not see activities in their stream nor emails that happen after they are added until they login again
Better scheduling of activity emails
------------------------------------