diff --git a/changelog/unreleased/fix-searching-shares.md b/changelog/unreleased/fix-searching-shares.md new file mode 100644 index 0000000000..19587c7418 --- /dev/null +++ b/changelog/unreleased/fix-searching-shares.md @@ -0,0 +1,5 @@ +Bugfix: Fix search shares + +We fixed a problem where searching shares did not yield results when the resource was not shared from the space root. + +https://github.com/owncloud/ocis/pull/6741 diff --git a/services/search/pkg/search/service.go b/services/search/pkg/search/service.go index fd39dea05f..f7ae9ca5dc 100644 --- a/services/search/pkg/search/service.go +++ b/services/search/pkg/search/service.go @@ -246,7 +246,21 @@ func (s *Service) searchIndex(ctx context.Context, req *searchsvc.SearchRequest, return nil, err } - gpRes, err := gatewayClient.GetPath(ctx, &provider.GetPathRequest{ + var ownerCtx context.Context + if space.Owner.Id.Type == user.UserType_USER_TYPE_SPACE_OWNER { + // We can't impersonate SPACE_OWNER users and have to fall back to using the user auth instead, + // which will not resolve the absolute path of the share in the space but only the part the user + // is allowed to see. + // In the future this problem can be solved using service accounts. + ownerCtx = ctx + } else { + ownerCtx, err = getAuthContext(&user.User{Id: space.Owner.Id}, s.gatewaySelector, s.secret, s.logger) + if err != nil { + return nil, err + } + } + + gpRes, err := gatewayClient.GetPath(ownerCtx, &provider.GetPathRequest{ ResourceId: space.Root, }) if err != nil {