Public share with read-only permissions allows creating folders in Team Folders

[chatgptleti-sketch]

Environment

• Nextcloud: 34.0.0.12
• Team Folders (Groupfolders): 22.0.6

Issue

When creating a public link for a Team Folder subfolder with custom permissions:

• Read: enabled
• Create: disabled
• Edit: disabled
• Delete: disabled

the public share is created correctly.

The oc_share table shows:

permissions = 17

(Read + Share)

However, when opening the public link as an anonymous user, the interface shows the "+ New" button and it is possible to create new folders inside the shared folder.

Expected behavior

The public share should be read-only and should not allow creating folders or uploading files.

Additional information

• Advanced Permissions are disabled.
• The share is stored in oc_share with permissions = 17.
• The issue only occurs inside Team Folders (Groupfolders).

[nikolaym30]

I have the same issue