feat(share): add public share-review API under OCP\Share\ShareReview by AndyScherzinger · Pull Request #61543 · nextcloud/server

AndyScherzinger · 2026-06-23T14:45:14Z

Summary

Introduces OCP\Share\Events\ShareReviewAccessCheckEvent as the canonical authorization gate event for ShareReview sources. The event carries the source name and share ID for listener context, implements deny-wins semantics, and stops propagation immediately on denial.
This is a discussed and agreed on measure to safeguard auditing-triggered share deletions throughout various apps using a "check back event mechanism", so apps can implement their support for this (any app that has shares basically, of any kind)

Docs at nextcloud/documentation#15223

Assisted-by: Claude Code:claude-sonnet-4-6
and
Assisted-by: Claude Code:claude-fable-5

TODO

testing in combination with deck and tables PRs for https://github.com/nextcloud/sharereview

Checklist

Code is properly formatted
Sign-off message is added to all commits
Tests (unit, integration, api and/or acceptance) are included
Screenshots before/after for front-end changes
Documentation (manuals or wiki) has been updated or is not required
Backports requested where applicable (ex: critical bugfixes)
Labels added where applicable (ex: bug/enhancement, 3. to review, feature component)
Milestone added for target branch/version (ex: 32.x for stable32)

AI (if applicable)

The content of this PR was partly or fully generated using AI

AndyScherzinger · 2026-06-23T14:49:16Z

/backport to stable34

CarlSchwan

Need to run build/autoloaderchecker.sh

AndyScherzinger · 2026-07-02T21:49:22Z

@provokateurin @CarlSchwan worked on addressing your review comments.

provokateurin

Thanks for adding the explanation to the event docs.

provokateurin · 2026-07-06T18:33:14Z

+	 * @return array<int, array{
+	 *     id: string|int,
+	 *     object: string,
+	 *     initiator: string,
+	 *     type: int,
+	 *     recipient: string,
+	 *     permissions: int,
+	 *     time: string,
+	 *     action: string,
+	 *     timestamp?: int,
+	 *     password?: bool,
+	 *     expiration?: string,
+	 *     parent?: string|int
+	 * }> Each share contains:


This is not the same array shape that is used everywhere else. Either use exactly the same one or create a proper class to hold all these fields.

Addressed via df285d5

provokateurin · 2026-07-06T18:33:49Z

+	 *     id: The unique app-specific identifier for the share, passed to deleteShare().
+	 *     object: The name or title of the object, such as a file path or report name.
+	 *     initiator: The user ID of the initiator.
+	 *     type: The OCP\Share\IShare type of the share.
+	 *     recipient: The user ID of the owner or the token of a link.
+	 *     permissions: The permissions level. Use 1 as the default if not set.
+	 *     time: The creation time. Use '1970-01-01 01:00:00' as the default if null.
+	 *     action: Optional deletion identifier override. Use an empty string to use id.
+	 *     password: Whether the share is password protected. Do not return the password itself.
+	 *     expiration: Optional expiration date displayed for the share.


These descriptions can be inlined into the array type with // comment on a separate line before the line the comment is about.

Addressed via df285d5

provokateurin · 2026-07-06T18:35:43Z

+	/** @return class-string<IShareReviewSource> */
+	private function makeSourceClass(string $name): string {
+		$source = new class($name) implements IShareReviewSource {
+			public function __construct(
+				private readonly string $name = '',
+			) {
+			}
+
+			public function getName(): string {
+				return $this->name;
+			}
+
+			public function getShares(): array {
+				return [];
+			}
+
+			public function deleteShare(string $shareId): bool {
+				return false;
+			}
+		};
+		return $source::class;
+	}


Please use mocks instead.

Addressed via fa57f02

Introduces OCP\Share\Events\ShareReviewAccessCheckEvent as the canonical authorization gate event for ShareReview sources. The event carries the source name and share ID for listener context, implements deny-wins semantics, and stops propagation immediately on denial. Assisted-by: ClaudeCode:claude-sonnet-4-6 Signed-off-by: Andy Scherzinger <info@andy-scherzinger.de>

…re\ShareReview Assisted-by: Claude Code:claude-fable-5 Signed-off-by: Andy Scherzinger <info@andy-scherzinger.de>

…ssCheckEvent Assisted-by: Claude Code:claude-fable-5 Signed-off-by: Andy Scherzinger <info@andy-scherzinger.de>

Assisted-by: ClaudeCode:claude-fable-5 Signed-off-by: Andy Scherzinger <info@andy-scherzinger.de>

AndyScherzinger added this to the Nextcloud 35 milestone Jun 23, 2026

AndyScherzinger requested a review from a team as a code owner June 23, 2026 14:45

AndyScherzinger added the enhancement label Jun 23, 2026

AndyScherzinger requested review from Altahrim and ArtificialOwl and removed request for a team June 23, 2026 14:45

AndyScherzinger added the 2. developing Work in progress label Jun 23, 2026

AndyScherzinger requested review from leftybournes and salmart-dev June 23, 2026 14:45

AndyScherzinger added the feature: sharing label Jun 23, 2026

github-actions Bot added the AI assisted label Jun 23, 2026

AndyScherzinger marked this pull request as draft June 23, 2026 14:48

backportbot Bot added the backport-request label Jun 23, 2026

CarlSchwan reviewed Jun 23, 2026

View reviewed changes

Comment thread lib/public/Share/ShareReview/Events/ShareReviewAccessCheckEvent.php

AndyScherzinger force-pushed the feat/noid/shareReviewDeleteEvent branch 6 times, most recently from c4ea0a9 to af59b39 Compare June 23, 2026 17:03

AndyScherzinger marked this pull request as ready for review June 23, 2026 17:44

AndyScherzinger added 3. to review Waiting for reviews and removed 2. developing Work in progress labels Jun 25, 2026

This was referenced Jun 25, 2026

docs(events): Add ShareReviewAccessCheckEvent nextcloud/documentation#15223

Open

🕵️ Add sharereview support nextcloud/tables#2711

Draft

provokateurin reviewed Jun 30, 2026

View reviewed changes

Comment thread lib/public/Share/ShareReview/Events/ShareReviewAccessCheckEvent.php Outdated

AndyScherzinger force-pushed the feat/noid/shareReviewDeleteEvent branch 2 times, most recently from f306220 to d45d8e1 Compare July 2, 2026 21:42

AndyScherzinger changed the title ~~feat(share): add ShareReviewAccessCheckEvent to OCP public API~~ feat(share): add public share-review API under OCP\Share\ShareReview Jul 2, 2026

AndyScherzinger force-pushed the feat/noid/shareReviewDeleteEvent branch from d45d8e1 to e46b015 Compare July 3, 2026 16:59

AndyScherzinger requested a review from susnux July 6, 2026 18:17

provokateurin requested changes Jul 6, 2026

View reviewed changes

AndyScherzinger added 5 commits July 7, 2026 14:34

feat(share): move share-review source interface and events to OCP\Sha…

492ecc3

…re\ShareReview Assisted-by: Claude Code:claude-fable-5 Signed-off-by: Andy Scherzinger <info@andy-scherzinger.de>

docs(share): explain dispatcher and listener roles of ShareReviewAcce…

021a3d8

…ssCheckEvent Assisted-by: Claude Code:claude-fable-5 Signed-off-by: Andy Scherzinger <info@andy-scherzinger.de>

feat(share): replace getShares() array shape with ShareReviewEntry class

df285d5

Assisted-by: ClaudeCode:claude-fable-5 Signed-off-by: Andy Scherzinger <info@andy-scherzinger.de>

test(share): use mocks instead of an anonymous class for source stubs

fa57f02

Assisted-by: ClaudeCode:claude-fable-5 Signed-off-by: Andy Scherzinger <info@andy-scherzinger.de>

AndyScherzinger force-pushed the feat/noid/shareReviewDeleteEvent branch from e46b015 to fa57f02 Compare July 7, 2026 12:51

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Uh oh!

feat(share): add public share-review API under OCP\Share\ShareReview#61543

feat(share): add public share-review API under OCP\Share\ShareReview#61543
AndyScherzinger wants to merge 5 commits into
masterfrom
feat/noid/shareReviewDeleteEvent

AndyScherzinger commented Jun 23, 2026 •

edited

Loading

Uh oh!

AndyScherzinger commented Jun 23, 2026

Uh oh!

CarlSchwan left a comment

Uh oh!

Uh oh!

Uh oh!

AndyScherzinger commented Jul 2, 2026

Uh oh!

provokateurin left a comment

Uh oh!

provokateurin Jul 6, 2026

Uh oh!

AndyScherzinger Jul 7, 2026

Uh oh!

provokateurin Jul 6, 2026

Uh oh!

AndyScherzinger Jul 7, 2026

Uh oh!

provokateurin Jul 6, 2026

Uh oh!

AndyScherzinger Jul 7, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Uh oh!

Uh oh!

Conversation

AndyScherzinger commented Jun 23, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary

TODO

Checklist

AI (if applicable)

Uh oh!

AndyScherzinger commented Jun 23, 2026

Uh oh!

CarlSchwan left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

AndyScherzinger commented Jul 2, 2026

Uh oh!

provokateurin left a comment

Choose a reason for hiding this comment

Uh oh!

provokateurin Jul 6, 2026

Choose a reason for hiding this comment

Uh oh!

AndyScherzinger Jul 7, 2026

Choose a reason for hiding this comment

Uh oh!

provokateurin Jul 6, 2026

Choose a reason for hiding this comment

Uh oh!

AndyScherzinger Jul 7, 2026

Choose a reason for hiding this comment

Uh oh!

provokateurin Jul 6, 2026

Choose a reason for hiding this comment

Uh oh!

AndyScherzinger Jul 7, 2026

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

AndyScherzinger commented Jun 23, 2026 •

edited

Loading