[GH-ISSUE #534] ACL problem #310

New Issue

zhus · 2026-04-08T16:51:54+03:00

zhus commented

2026-04-08 16:51:54 +03:00

Originally created by @ogarcia on GitHub (Jan 27, 2025).
Original GitHub issue: https://github.com/sigoden/dufs/issues/534

Problem

The changes introduced in #521 solve part of the problem but introduce a new one.

If I launch dufs with the command -a @/:rw,/dir1:ro I am explicitly stating that I want the anonymous user to have read and write access to everything EXCEPT dir1 where I want him/her to have read access only. But now has read and write access to everything.

Configuration

cargo run -- share -A -a @/:rw,/dir1:ro

Log

% cargo run -- cosa -A -a @/:rw,/dir1:ro
    Finished `dev` profile [unoptimized + debuginfo] target(s) in 0.05s
     Running `target/debug/dufs cosa -A -a '@/:rw,/dir1:ro'`
Listening on:
  http://127.0.0.1:5000/
  http://192.168.1.66:5000/
  http://192.168.122.1:5000/
  http://[::1]:5000/
  http://[fd48:e1a9:db6f::66]:5000/
  http://[fd48:e1a9:db6f:0:f058:97ec:3d65:e7da]:5000/

2025-01-27T09:56:15+01:00 INFO - 127.0.0.1 "GET /" 200
2025-01-27T09:56:16+01:00 INFO - 127.0.0.1 "GET /dir1/" 200
2025-01-27T09:56:22+01:00 INFO - 127.0.0.1 "MKCOL /dir1/test" 201 # A directory can be created!
2025-01-27T09:56:22+01:00 INFO - 127.0.0.1 "GET /dir1/test" 200

Environment Information

Dufs version: git version
Browser/Webdav info: Firefox
OS info: Arch Linux

Originally created by @ogarcia on GitHub (Jan 27, 2025). Original GitHub issue: https://github.com/sigoden/dufs/issues/534 **Problem** The changes introduced in #521 solve part of the problem but introduce a new one. If I launch dufs with the command `-a @/:rw,/dir1:ro` I am explicitly stating that I want the anonymous user to have read and write access to everything EXCEPT `dir1` where I want him/her to have read access only. But now has read and write access to everything. **Configuration** ``` cargo run -- share -A -a @/:rw,/dir1:ro ``` **Log** ``` % cargo run -- cosa -A -a @/:rw,/dir1:ro Finished `dev` profile [unoptimized + debuginfo] target(s) in 0.05s Running `target/debug/dufs cosa -A -a '@/:rw,/dir1:ro'` Listening on: http://127.0.0.1:5000/ http://192.168.1.66:5000/ http://192.168.122.1:5000/ http://[::1]:5000/ http://[fd48:e1a9:db6f::66]:5000/ http://[fd48:e1a9:db6f:0:f058:97ec:3d65:e7da]:5000/ 2025-01-27T09:56:15+01:00 INFO - 127.0.0.1 "GET /" 200 2025-01-27T09:56:16+01:00 INFO - 127.0.0.1 "GET /dir1/" 200 2025-01-27T09:56:22+01:00 INFO - 127.0.0.1 "MKCOL /dir1/test" 201 # A directory can be created! 2025-01-27T09:56:22+01:00 INFO - 127.0.0.1 "GET /dir1/test" 200 ``` **Environment Information** - Dufs version: git version - Browser/Webdav info: Firefox - OS info: Arch Linux

zhus closed this issue

2026-04-08 16:51:54 +03:00

zhus commented

2026-04-08 16:51:55 +03:00

@sigoden commented on GitHub (Jan 27, 2025):

https://github.com/sigoden/dufs/issues/519#issuecomment-2567204564 provides a detailed explanation.

@sigoden commented on GitHub (Jan 27, 2025): https://github.com/sigoden/dufs/issues/519#issuecomment-2567204564 provides a detailed explanation.

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: sigoden/dufs#310