Internal and external sharing, permissions

[oliver124810]

Hello,

I have some questions about sharing and the related permissions. OpenCloud supports internal and external sharing, but the documentation does not state who is allowed to do so (https://docs.opencloud.eu/docs/user/sharing/internal and https://docs.opencloud.eu/docs/user/sharing/external).

This is what I found out with by experimenting:

Personal data:

• Internal sharing: No restriction
• External sharing (public links): No restriction

Space data:

• Internal sharing: Only Space Manager can edit members
• External sharing (public links): Only Space Manager can create public links

Is that correct?

I understand the value of public links for collaboration. However, they create also potential compliance and auditing issues. Is it possible, or planned, to disable public linking entirely or for specific spaces?

[micbar]

Your observation is correct.

Public links have always been controversial. We are enforcing passwords with a strict policy to secure them.
Completely disabling is currently not possible, but can be achieved when users are not allowed to have a personal space.

[oliver124810]

Thank you @micbar . As a workaround, I forbid access to URL like /s/* in the reverse proxy. I did not check yet, but maybe a cronjob could also remove the public links automatically, either in the database or through some kind of API?