outline/outline

Documents on thrash are visible by everyone

WilliamSoler opened this issue · 2 comments

A clear and concise description of what the bug is.

To Reproduce
Steps to reproduce the behavior:

  1. Delete a file from a collection whose permissions only allow accessibility by a user or group.
  2. A user who could access the mentioned file before, can now see it in the thrash files

Expected behavior
A clear and concise description of what you expected to happen.

Outline (please complete the following information):

  • Install: self-hosted
  • Version: v0.75.2

I have tested it on the latest community edition and there is no problem.
Subdocuments that are deleted from a collection with no access will not be seen in the recycle bin by users without permission.
Unless you re-grant collection access to another person or group, excluding Viewer, after deleting the subdocument.
😉