ZIP issues

[Stoufs]

Is it possible to get someone to zip the content of folders where the files is and not the entire archive? Can't seem to find an option as allowing zip allows you to select every single folder in the home directory and zip them all up

[rejetto]

i don't understand what you mean, "the content of folders where the files is" ? what files?
by default the home has permissions to zip, but you can restrict it to only some things

[Stoufs]

i disabled home directory being archived but the user can just go in and select all the sub folders in the home directory and zip them. there's no option to zip files in the sub folders only of the home directory itself.

[rejetto]

you can do it by setting the permission on the folder content, like this

[Stoufs]

Ya but if i set the home directory to say /home and there are sub folders in there, the person goes into the /home directory and selects all the sub folders in there. Thats what i dont want.

[rejetto]

you set the permissions for each subfolder, so they won't be able to select all the subfolders

[Stoufs]

I have over 1,000 sub folders in there

[Stoufs]

If we can get a permission for like > home (No zip; you have that option), > sub folder (no zip) > files (can zip all)

[rejetto]

you can do the same that i told you, but for the 1000 subfolders, by using masks.
you can set in the home a mask like

"**/*":
  can_archive: true

this means that in any subfolder (**) you wan the content (/*) to be archivable.
the "zip" you see in the browser is called "archive" internally.

[rejetto]

https://github.com/rejetto/hfs/wiki/Masks-field

[Stoufs]

You can still archive sub folders in the home directory unfortunately even with this.

[Stoufs]

Ok update! I was able to get it working, but it seems even though the zip option is greyed out in the main directory, the person can still exploit this by selecting the folders they want, hovering over the zip option and copy / paste the link of the zip option in the browser directly and it works fine still so there's a way around this.

[rejetto]

ok, i had the time to look into the zip behavior.
The exploit you are talking about, the server is actually incoherent with the interface, searching for anything that you can zip. The good is that you get only things that you can get, that have zip permission, it's not a security problem, but still can be not what the admin wants. The interface came later, and sadly incoherent. Something must be done.

When I made the server behavior like it is now, it looked good, so that "i give no permission for the folder, but for some files, then you can still ask to zip those, and you can do it with a simple button, why not".
While this scenario still look interesting, your scenario is too, so the best would be to fit both.

I guess that I can really prevent the zip of the folder if it has no permission, like you want. People willing to have the other scenario can set permissions in the opposite way: give permission to the folder, then denying for all the content excluding the things to be allowed. This logic can be done starting with this

Allowing specific things can be done in multple ways, but most of times will be using masks, but if the things are directly accessible in the VFS you can click on every element and set permissions.
You could even do everything just using masks, if you like it.

I think this will be for the best.
I'm working on it.

[rejetto]

ok, i made a few adjustments. Will you let me know if looks ok to you?

hfs-mac-arm.zip
hfs-mac.zip
hfs-linux.zip
hfs-windows.zip

[Stoufs]

Thats amazing! This works AMAZINGLY now!

[rejetto]

Neat!