Grant wider permissions to subfolders for specific users

[floatingpurr]

Short story: I have the following directories:

    foo
    |__bar
    |__other_stuff

As recommended here nextcloud/server#23380 (comment), I'm trying to harness groupfolders to share the folder foo with groupA (read only) and the folder bar with userA with write permission. I want userA to be able to modify only bar and not other_stuff. NB: userA belongs to groupA.

I created the groupfolder foo granting read permission for groupA. However, I cannot grant write permission on bar for userA (since userA belongs to groupA, I guess).

Is there a way to do that?

[pierreozoux]

Did you try with acl? You should be able to do that.

[floatingpurr]

Do you mean the standard sharing system of nextcloud? I was trying groupfolder to get rid of this problem of the standard sharing mechanism (nextcloud/server#23380 (comment))

[fschrempf]

Is there a way to do that?

Yes, there is. Please see:

• https://github.com/nextcloud/groupfolders#advanced-permissions
• Simplify Advanced Permissions. #655 (comment)

Please let me know if this is what you need, so I can close this issue. Thanks!

[fschrempf]

By the way, this behavior is also documented in the README:

Denied permissions configured for the group folder itself cannot be overwritten to "allow" permissions by the advanced permission rules.

I'm assuming this is resolved by referencing the necessary information. Please feel free to comment, reopen or create a new issue if you think otherwise. Thanks!