Permissions - rejetto/hfs GitHub Wiki

File permissions are set in Admin-panel > Shared files, by using the "Who can..." fields.

Permissions you set for a folder (also home folder) are inherited by files and folders in it. If you don't want this, click the "Set different permission for folder content".

Permissions system is quite powerful and not always intuitive. If you can't get what you want by configuring permissions, you can ask for help. Some complex use cases may be achieved only by using "Masks" field.

Difference between SEE and ACCESS LIST permissions

When you enter a folder, you are first checked if you can LIST at all. If you don't, operation is aborted; if you do, we start listing, and include in the list only what you have permission to SEE.

Example 1: if you enter a folder and you don't have ACCESS LIST permission, you will be said so. You are not receiving an empty list, but an error message.

Example 2: if you enter a folder and you don't have SEE permission, you will see an empty list and have the illusion there's nothing there.

NB: In both examples above, if you have a direct link to files in the folder, you can still use the link to download them.

Examples

Make folders not accessible by default

If you want your folders to not be accessible unless you give access to a specific account

  • click on Virtual File System > home
    • permissions are inherited, so setting something on the home can affect all the rest
  • set "Who can download" to "none"
    • prevent access
  • set "Who can access list" to "any account"
    • otherwise you cannot even enter the home page
    • because of any-account, you will automatically get the login dialog. If you don't want that, you can set "anyone" instead.

Make folder where anyone can upload but not see uploaded files

  • set "see" permission to "anyone" (or "inherited")
    • under it, click "Set different permission for folder content", and set the new field to "no one"
  • set "download" permission to "no one"
  • set "upload" permission to "anyone"