Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

OCM. Prevent federated users from being added as members of the space #10051

Closed
Tracked by #9735
ScharfViktor opened this issue Sep 13, 2024 · 2 comments · Fixed by #10060 or #10287
Closed
Tracked by #9735

OCM. Prevent federated users from being added as members of the space #10051

ScharfViktor opened this issue Sep 13, 2024 · 2 comments · Fixed by #10060 or #10287
Assignees
Labels

Comments

@ScharfViktor
Copy link
Contributor

Version 6.3.0
web 10.2.0

ocm setup, see here https://owncloud.dev/ocis/development/testing/#running-test-suite-with-federated-sharing-ocm

Steps:

  • user creates space and tries to add external user as member

Expected: 403 Forbidden
Actual:
curl -k -X POST 'https://ocis-server:9200/graph/v1beta1/drives/space_uuid/root/invite' -u admin:admin -d '{"roles":["a8d5fe5e-96e3-418d-825b-534dbdf22b99"],"recipients":[{"objectId":"external_user_uuid: ","@libre.graph.recipient.type":"user"}]}' -v

gets 200 OK - but user hasn't access to space

@2403905
Copy link
Contributor

2403905 commented Sep 17, 2024

Related issue owncloud/web#11579

@ScharfViktor
Copy link
Contributor Author

ScharfViktor commented Oct 7, 2024

need also prevent adding members to space using "https://ocis-server:9200/graph/v1beta1/drives/spaceUUID/items/spaceUUID/invite" endpoint
added test apiOcm/share.feature:231 and linked issue

#10166

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
Status: Done
2 participants