Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Guests can see each other #737

Closed
Hensch-S opened this issue Sep 9, 2021 · 8 comments · Fixed by #1144
Closed

Guests can see each other #737

Hensch-S opened this issue Sep 9, 2021 · 8 comments · Fixed by #1144
Labels
good first issue Good for newcomers pending documentation Pending a documentation update/fix

Comments

@Hensch-S
Copy link

Hensch-S commented Sep 9, 2021

I have more than one guest in my nextcloud (currently 21). If one guest clicks the contact search icon in the upper right he sees all other guests and can see their mail address.

I think it's because all guests are in the hidden guests group. Disabling auto completion in the share options solves this but regular accounts should have auto completion so i cannot disable this option.

Is it possible to prevent guests from seeing any other accounts?

@thomasjanzenddp
Copy link

Hi,

we have the same problem. Can a developer please fix this as soon as possible? You can't really allow such a data protection issue in a business environment.

With kind regards
Thomas Janzen

@PVince81
Copy link
Member

what exact versions of Nextcloud and guests app are you running ?
as far as I remember this was fixed in Guests 2.0.1 already

@thomasjanzenddp
Copy link

Nextcloud 22.2.0
Guests 2.1.0

The error still exists.
image

image

@LadySolveig
Copy link

Same here, fix please.

@Rene33
Copy link

Rene33 commented Feb 7, 2022

Apparently, the problem is still there. But I think I found a clue. In my case (Guest 2.1.0, Nextcloud 21.07) the problem appears if we add guests to a group we have created and called "guests". The guests we don't add to this group don't appear in the list.
However, the problem is that if we remove these accounts from the "guests" group, they remain in the list of contacts.
How can we remove them from this list, which appears for all guests?
Thanks

@hartsberger
Copy link

The official workaround I got from Nextcloud support is to disable the sharing feature for the guests group.

The option is "exclude groups from sharing" and can be found in the docs:
https://docs.nextcloud.com/server/21/admin_manual/configuration_files/file_sharing_configuration.html

Just add the guest group and then guests are no longer able to see other guests in the contact search.

@joshtrichards joshtrichards added pending documentation Pending a documentation update/fix good first issue Good for newcomers labels Mar 14, 2024
@joshtrichards
Copy link
Member

^Perhaps a small doc addition added here:

https://github.com/nextcloud/guests?tab=readme-ov-file#hide-other-users

@artonge
Copy link
Contributor

artonge commented Mar 28, 2024

PR adding this to the documentation: #1144

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
good first issue Good for newcomers pending documentation Pending a documentation update/fix
Projects
None yet
Development

Successfully merging a pull request may close this issue.

8 participants