Disable deletion of group folders but allow deletion of all subfolders

[alecmalloc]

Hey all,

we are a company using groupfolders (which are great btw) and have a pretty simple issue that needs fixing.

I've been looking for a solution to this issue for a bit but can't find any good information.

We are hosting our files on a nextcloud server and have it set up like this:

Group Folder A > Folder1, Folder2, Files...

Group Folder B > Folder1, Folder2, Files...

Group Folder C > Folder1, Folder2, Files...

The issue is, people need to be able to delete files and such in the child folders. However we ran into the issue yesterday that on windows someone deleted an entire group folder. Or even moved a group folder into another folder.

It would be great to get a simple check box for allowing delete permissions within all child elements, but restricting it on on the parent group folders.

It seems so simple but I haven't been able to find a way. I'm sure so many other people need this as well.

Keep in mind that we have TONS of folders and files in each group folder so it would be tedious to assign advanced permissions for each child folder manually. Also that wouldn't help in the case that new child folders are created.

Thanks!

[provokateurin]

You can use the ACL to change permissions for folders inside a groupfolder.

[alecmalloc]

hey @provokateurin thanks for the quick response.

yes, as far as I understand this works in theory. However we have TONS of top level subfolders within our Group folders. It would be a pain to manually change ACL for each folder. You meant using advanced permissions correct? Also, this would mean we would have to set permissions manually for each new folder created.

Am I misunderstanding something here? Please feel free to let me know if I am just using nextcloud wrong.

[provokateurin]

No you are right, we currently have no way to set default values for advanced permissions. You could script it via WebDAV where you can change these settings.

Two alternative feature proposals that are not implemented yet could also solve this use-case:

• Create a new groupfolder from an existing one and copy ACL rules #750
• Implement getting/setting of "Advanced Permissions" (ACL) via OCS API #1256

[XueSheng-GIT]

However we ran into the issue yesterday that on windows someone deleted an entire group folder. Or even moved a group folder into another folder.

This sounds like a bug, doesn't it?
A similar issue has been posted a couple of days ago: https://help.nextcloud.com/t/gruppenordner-umbenennen/215378

@provokateurin Isn't this type of modification restricted to admin settings? At least in the webif I'm not able to move, rename or delete a group folder within files app. Is it possible that nextcloud desktop can circumvent this?