Find users with email for sharing files

[ocmdi]

I just reported a similar problem (possibly the same?) Sorry. I should have searched the forum a bit better.

Privacy Issues: OwnCloud user email addresses should not be suggested when sharing with link

Hello, I noticed that when sharing with a link, owncloud will suggest email address for all owncloud users that match a begins-with (or substring? - doesn’t matter) of what is being typed. This is a privacy issue. I don’t think this should happen at all, but at a very minimum, it should only happen if “Restrict users to only share with users in their groups” is unchecked. In my case the “Restrict users to only share with users in their groups” is checked". This is to prevent ownCloud from aut…

In my case however, it seem to only be share with link that’s a problem. When you do “normal” sharing, as long as you’ve grouped users together that should be able to “see” each other, usernames are not suggested if the user is not in your group.

NOTE: The admin setting “Restrict users to only share with users in their groups” must be enabled/checked for this to work.

However, this good privacy feature is completely defeated when sharing with link. i.e. Any/All owncloud users will be auto-completed when sharing with link, exposing all the users (usernames and email addresses) on the system.

What should be done:

1). Completely disable auto-completion for share with link

OR

2). Add a new admin option “Disable email auto-completion for share via link”

OR

3). If admin option “Restrict users to only share with users in their groups” is checked/enabled, also restrict email auto-completion to users in your groups.