Repository navigation
Write Nextcloud groups as CATEGORIES of system address book contacts #38432
Description
How to use GitHub
- Please use the 👍 reaction to show that you are interested into the same feature.
- Please don't comment if you have no relevant information to add. It's just extra noise for everyone subscribed to this issue.
- Subscribe to receive notifications on status change and new comments.
Is your feature request related to a problem? Please describe.
Nextcloud 27 exposes the system address book with read-only contacts for all system users. It's common to have Nextcloud groups for departments, teams and projects.
Describe the solution you'd like
Add a CATEGORIES property to the system contacts based on the display names of a user's Nextcloud groups.
This requires users to be allowed to see other user's groups.
Describe alternatives you've considered
N/a
Additional context
Reacted by John Molakvoæ, technout, Daniel, Julian Winkel, Josef Fröhle and derStephan
Activity
ChristophWurst commentedon May 24, 2023
Users do see their own groups at the personal settings / profile settings page (bottom left). If other users should see this information is to be researched or defined.
Right now you can find out the members of a group by adding them to a share or a Talk room. But you can't do the inverse of getting the groups of a user.
feat(dav): expose Nextcloud groups to Contact's system addressbook co…
feat(dav): expose Nextcloud groups to Contact's system addressbook co…
feat(dav): expose Nextcloud groups to Contact's system addressbook co…
feat(dav): expose Nextcloud groups to Contact's system addressbook co…
feat(dav): expose Nextcloud groups to Contact's system addressbook co…
feat(dav): expose Nextcloud groups to Contact's system addressbook co…
ChristophWurst commentedon Oct 20, 2023
@AndyScherzinger @DaphneMuller @jancborchardt @juliushaertl @nickvergessen @sorbaugh @tobiasKaminsky please excuse the ping-all but this change is worked on in #40997 and I believe we should have platform-wide consent about the exposure of group membership of other users.
Right now you can only see your own groups in the personal settings. You do not see who's member of the admins or any other Nextcloud groups.
If groups are stored with system address book contacts, this information will be visible to all other users for the first time.
Do we want that?
nickvergessen commentedon Oct 20, 2023
Admins is like the only exception because it's exposed by various apps, including the default shipped data_request
https://github.com/nextcloud/privacy/blob/master/src/components/Admins.vue#L25
But yeah, not sure we should leak all groups.
tobiasKaminsky commentedon Oct 26, 2023
I am sure that we should not do this, as this is sensitive data.
I remember stories about competing departements in one giant company, where they are not allowed to talk to each other. So imagine one can now see at which projects/groups the others work.
feat(dav): expose Nextcloud groups to Contact's system addressbook co…
feat(dav): expose Nextcloud groups to Contact's system addressbook co…
tcitworld commentedon Oct 27, 2023
I've disabled the feature by default through an appconfig, and there's also other appconfig options to include or exclude groups that will be exposed. What do you think?
ChristophWurst commentedon Oct 27, 2023
I think that is a good compromise. Groups aren't exposed by default and if admins are okay with exposure they can configure it explicitly.
In the long run groups could have a visibility setting similar to user profile properties. Admins could use them to set the visibility scope of a group:
nickvergessen commentedon Oct 27, 2023
I would even like a "hidden" visibility scope where only admins see the group but not "normal members"