Vault-Web/cloud-page

[Feature]: Implement secure file and folder sharing between users

已關閉

#27 建立於 2025年11月21日

 (0 則留言) (0 個反應) (0 位負責人)Java (21 個分叉)auto 404
enhancementhelp wanted

倉庫指標

星標
 (7 顆星)
PR 合併指標
 (PR 指標待抓取)

描述

Problem

Cloud Page users cannot securely share selected files or folders with other registered users yet.

Example: Alice wants to share a PDF or project folder with Bob without giving Bob access to the rest of her cloud storage.

Proposed solution

Implement backend support for sharing files and folders between registered Cloud Page users.

The first version should focus on the secure API and data model. Vault Web can add a Shared with me UI after the backend contract exists.

Scope:

  • add a normalized share model/table for files and folders
  • support permissions such as view, download, and optionally edit
  • add endpoints to create, list, and revoke shares
  • add an endpoint for items shared with the current user
  • enforce ownership and permission checks on every shared operation

Acceptance criteria

  • Users can only share items they own.
  • Recipients can only access explicitly shared items.
  • Folder sharing handles nested files safely without path traversal leaks.
  • Revoked shares stop access immediately.
  • Tests cover owner access, recipient access, denied access, and revoked access.
  • API docs or README describe the sharing endpoints.

貢獻者指南