Skip to content

fix: allow space managers to remove shares created by other users - #687

Merged
mzner merged 1 commit into
mainfrom
fix/OCISDEV-748/space-manager-cannot-remove-shares-created-by-other-users
Aug 3, 2026
Merged

fix: allow space managers to remove shares created by other users#687
mzner merged 1 commit into
mainfrom
fix/OCISDEV-748/space-manager-cannot-remove-shares-created-by-other-users

Conversation

@mzner

@mzner mzner commented Aug 3, 2026

Copy link
Copy Markdown

Space managers with the RemoveGrant permission on a resource were unable to remove user shares created by other users. Unshare in the jsoncs3 share manager only permitted the share creator to remove a share, so removal attempts by other managers failed with a NotFound error, surfaced to callers as a generic HTTP 500.

Unshare now also allows users who have the RemoveGrant permission on the shared resource to remove the share, matching the checks already performed in the RemoveShare gRPC handler and GetShare.

fixes: https://kiteworks.atlassian.net/browse/OCISDEV-748

@mzner
mzner requested a review from a team as a code owner August 3, 2026 06:07
@kw-security

kw-security commented Aug 3, 2026

Copy link
Copy Markdown

Snyk checks have passed. No issues have been found so far.

Status Scan Engine Critical High Medium Low Total (0)
Open Source Security 0 0 0 0 0 issues
Licenses 0 0 0 0 0 issues
Code Security 0 0 0 0 0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

Space managers with the RemoveGrant permission on a resource were unable
to remove user shares created by other users. Unshare in the jsoncs3
share manager only permitted the share creator to remove a share, so
removal attempts by other managers failed with a NotFound error,
surfaced to callers as a generic HTTP 500.

Unshare now also allows users who have the RemoveGrant permission on the
shared resource to remove the share, matching the checks already
performed in the RemoveShare gRPC handler and GetShare.
@mzner
mzner force-pushed the fix/OCISDEV-748/space-manager-cannot-remove-shares-created-by-other-users branch from 517142d to 40af7fa Compare August 3, 2026 06:08
@mzner
mzner merged commit 58f9bec into main Aug 3, 2026
23 of 25 checks passed
@mzner
mzner deleted the fix/OCISDEV-748/space-manager-cannot-remove-shares-created-by-other-users branch August 3, 2026 07:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants