OwnCloud Read-Only Users

tiste · 28. Januar 2015

Hello guys,

I just can't understand what I have done wrong with the permissions...
Here is the deal :

I have 2 users in my OMV, in 1 group called LectureSeule (Read-Only) :

http://imageshack.com/a/img912/6192/dvl9lH.png

All of my shared folders have the same Read-Only configuration :

http://imageshack.com/a/img901/2875/1FvkFG.png

All of my ACL for the shared folders are the same and I'm not sure if recursive mode really works... :

http://imageshack.com/a/img540/1047/QVQdJ9.png

My OwnCloud Plugin is configured like that for the shared folders (there is no permissions here) :

http://imageshack.com/a/img673/6505/6vCDga.png

Now in OwnCloud, my user list is imported from OMV :

http://imageshack.com/a/img661/5783/1hsXAA.png

I have to enable External Storage Support for viewing my shared folders in OwnCloud and here are the groups capable of seeing them :

http://imageshack.com/a/img911/3983/Amww00.png

For example, my users are not read only users as they can delete things (the red cross on the right) :

http://imageshack.com/a/img661/9510/7oej8B.png

I really don't know what is going as they are in read only mode EVERYWHERE !!!!!!

DO I really have to perform a "chmod -R 750" on all my shared folders ???

Thanks for the help guys.

EDIT : sorry for the images, i edited the links because they won't load...

subzero79 · 29. Januar 2015

I am not a big fan of owncloud and I don't use it. I might be wrong with the following but I'll explain it as i understand it:

- The owncloud controls read/Write files in his own web application with share.

- The webUI of OMV provides more like a read or hide folder setup.
- The same files used by owncloud and exposed through samba or ftp might be writable, by a user that was readonly in OC
- ACL won't help you control read/write in owncloud webUI

If you want to deny write/delete, i would hide the folder, and with the admin account put it to share without the checkbox of "can edit"

tiste · 29. Januar 2015

That's a little bit tricky isn't it?
I'll try it when I'm home, thanks for the reply @subzero79

subzero79 · 29. Januar 2015

Zitat von tiste

That's a little bit tricky isn't it?

I was using the application for 5 minutes that's what i understood. Maybe another OC user in the forum can explain it better or correct me if I am wrong

Happens the same to me, i put read only in the webui owncloud normal user can delete the file.

tiste · 29. Januar 2015

That's the answer I got from "tflidd" from the OwnCloud forum (could be helpful for everybody) :

Zitat

I see, the linux-users have nothing to do with the owncloud-users in terms of permissions. Files from external storage are always accessed from your webserver user. You have to ways to solve this:
- Access your external storage through some authenticated service (FTP/Samba/SFTP/...) and the permissions of the FTP/Samba/SFTP-User will apply
- Control access within owncloud. Mount the shares only for your admin (folders: Films, Series, ...) and then share these folder within owncloud with your read-only-group (with open read-only-access).

The second solution is like what you said @subzero79.

I'll come back to edit my post with the results...

happyreacer · 29. Januar 2015

I had it too. My foulder /XYZ/share/media
I test man things and final i linkt all files on XYZ/ too. Then i go over the XYZ foulder in media, i can read / write ... all okay. I cancel the XYZ link and the XYZ/share/media works right. I dont understand these but all okay

tiste · 30. Januar 2015

That's it @subzero79 you were right...

I have to share a folder and then uncheck the boxes "can edit" and "share".

Thank you very much

tekkb · 31. Januar 2015

If you use one of your normal shared folders from OMV via External Storage Support in ownCloud it will be read only.
It is chown root(or maybe owner is a user):users and usually chmod 775, unless you choose something besides the default drop down on folder creation. The working directory of OC is chown www-data:www-data.

OC has it's own system for controlling shares. If you want to share stuff normally in owncloud or have the share writable you should create a folder for that purpose in OC. The External Storage Support is good for just bringing in any existing data (pictures, music, documents, etc..) you might have to make available for sharing with users in OC.

Jetzt mitmachen!