Config best practice for "file portal" setup

Hi

I am settings up a new instance of Nextcloud to share files within the family. Each user (about a dozen) would need to have R/O access to their “own” folder (an only there) while a “super user” would be allowed R/W everywhere.

What would be the best practice to achieve this ? Nextcloud Server version 30.4

I’m not sure if I’ve understood you correctly, but I would recommend that you take a look at Groupfolders. Groupfolders can be set to read only.

Nextcloud App:

Infographics:

Thanks - not sure this is what I am looking for.

I’d like to have (if possible auto provisioned, something like the default home folder) a personal R/O share for each user. And I want that accessible to single super admin.

I feel there should be an easy way to achieve this but can’t figure it out for the moment (very new to the product, though).

For disclamer i’m not a nextcloud dev but i think what you want is the default behavior of nextcloud, each user have their personal folder in which only them can read and write.

And if you create a shared/grouped folder then other users that you choose can read/write in them.

But the admin can’t access their personal folder. maybe you can directly access the data folder of nextcloud with a privileged user (the one running the web server, www-data i think)

i hope this helps.

in theory that is correct,

although it is possible with the “impersonate app”;
grafik

which is very helpful for admins needing to support users.

unless “user encryption” is enabled the cloud admin can theoretically access users data.

1 Like

Getting there :slight_smile:

My last two issues would be to make the personal share R/O (would there be any unwanted consequence in so doing ?) and having a “super user” that can access said personal shares.

This topic was automatically closed 90 days after the last reply. New replies are no longer allowed.