Not owner of shared folder can delete the entire folder for all users including owner

Installation Issues
1

Checklist
I have read intro post: About the Installation Issues category
I have read the tutorials, help and searched for similar issues
I provide relevant information about my server (component names and versions, etc.)
I provide a copy of my logs and healthcheck
I describe the steps I have taken to trouble shoot the problem
I describe the steps on how to reproduce the issue

Lets imagin two users, UserA and UserB.
UserA creates a folder called sharedfolder and shares this with UserB with Update Permisions.

Now UserB can delete the entire folder from the system affecting him and the owner of that folder UserA.

This is right??
Should be that UserB only “unshare” the folder, but not delete from all users??

Thanks!

Docker Passbolt 4.4.2

2

hey @rodrigoEscrol welcome to the forum!

We do have a dedicated help page that discusses each type of permission

To answer about the user with update permissions being able to delete the entry, even if we didn’t provide an explicit delete button a user who can update a resource can effectively delete it by updating the name to something irrelevant or changing the password to a single blank space.