run with full-ci

.github/settings.yml

@@ -1 +1,2 @@
 _extends: gh-labels
+

.woodpecker.star

@@ -44,7 +44,6 @@ PLUGINS_S3_CACHE = "plugins/s3-cache:1"
 PLUGINS_SLACK = "plugins/slack:1"
 REDIS = "redis:6-alpine"
 SONARSOURCE_SONAR_SCANNER_CLI = "sonarsource/sonar-scanner-cli:11.0"
-READY_RELEASE_GO = "woodpeckerci/plugin-ready-release-go:latest"
 
 DEFAULT_PHP_VERSION = "8.2"
 DEFAULT_NODEJS_VERSION = "20"
@@ -81,10 +80,10 @@ OC_FED_DOMAIN = "%s:10200" % FED_OC_SERVER_NAME
 # configuration
 config = {
     "cs3ApiTests": {
-        "skip": False,
+        "skip": True,
     },
     "wopiValidatorTests": {
-        "skip": False,
+        "skip": True,
     },
     "k6LoadTests": {
         "skip": True,
@@ -101,13 +100,13 @@ config = {
                 "apiLocks",
                 "apiActivities",
             ],
-            "skip": False,
+            "skip": True,
         },
         "settings": {
             "suites": [
                 "apiSettings",
             ],
-            "skip": False,
+            "skip": True,
             "withRemotePhp": [True],
             "emailNeeded": True,
             "extraEnvironment": {
@@ -128,45 +127,45 @@ config = {
                 "apiGraph",
                 "apiServiceAvailability",
             ],
-            "skip": False,
+            "skip": True,
             "withRemotePhp": [True],
         },
         "graphUserGroup": {
             "suites": [
                 "apiGraphUserGroup",
             ],
-            "skip": False,
+            "skip": True,
             "withRemotePhp": [True],
         },
         "spaces": {
             "suites": [
                 "apiSpaces",
             ],
-            "skip": False,
+            "skip": True,
         },
         "spacesShares": {
             "suites": [
                 "apiSpacesShares",
             ],
-            "skip": False,
+            "skip": True,
         },
         "spacesDavOperation": {
             "suites": [
                 "apiSpacesDavOperation",
             ],
-            "skip": False,
+            "skip": True,
         },
         "search1": {
             "suites": [
                 "apiSearch1",
             ],
-            "skip": False,
+            "skip": True,
         },
         "search2": {
             "suites": [
                 "apiSearch2",
             ],
-            "skip": False,
+            "skip": True,
         },
         "sharingNg": {
             "suites": [
@@ -174,23 +173,23 @@ config = {
                 "apiSharingNg1",
                 "apiSharingNg2",
             ],
-            "skip": False,
+            "skip": True,
         },
         "sharingNgShareInvitation": {
             "suites": [
                 "apiSharingNgShareInvitation",
             ],
-            "skip": False,
+            "skip": True,
         },
         "sharingNgLinkShare": {
             "suites": [
                 "apiSharingNgLinkSharePermission",
                 "apiSharingNgLinkShareRoot",
             ],
-            "skip": False,
+            "skip": True,
         },
         "accountsHashDifficulty": {
-            "skip": False,
+            "skip": True,
             "suites": [
                 "apiAccountsHashDifficulty",
             ],
@@ -200,7 +199,7 @@ config = {
             "suites": [
                 "apiNotification",
             ],
-            "skip": False,
+            "skip": True,
             "withRemotePhp": [True],
             "emailNeeded": True,
             "extraEnvironment": {
@@ -220,7 +219,7 @@ config = {
             "suites": [
                 "apiAntivirus",
             ],
-            "skip": False,
+            "skip": True,
             "antivirusNeeded": True,
             "extraServerEnvironment": {
                 "ANTIVIRUS_SCANNER_TYPE": "clamav",
@@ -235,14 +234,14 @@ config = {
             "suites": [
                 "apiSearchContent",
             ],
-            "skip": False,
+            "skip": True,
             "tikaNeeded": True,
         },
         "ocm": {
             "suites": [
                 "apiOcm",
             ],
-            "skip": False,
+            "skip": True,
             "withRemotePhp": [True],
             "federationServer": True,
             "emailNeeded": True,
@@ -304,19 +303,19 @@ config = {
     },
     "e2eTests": {
         "part": {
-            "skip": False,
+            "skip": True,
             "totalParts": 4,  # divide and run all suites in parts (divide pipelines)
             "xsuites": ["search", "app-provider", "app-provider-onlyOffice", "app-store", "keycloak", "oidc", "ocm"],  # suites to skip
         },
         "search": {
-            "skip": False,
+            "skip": True,
             "suites": ["search"],  # suites to run
             "tikaNeeded": True,
         },
     },
     "e2eMultiService": {
         "testSuites": {
-            "skip": False,
+            "skip": True,
             "suites": [
                 "smoke",
                 "shares",
@@ -419,7 +418,7 @@ def main(ctx):
     pipelines = []
 
     build_release_helpers = \
-        readyReleaseGo() + \
+        changelog() + \
         docs()
 
     build_release_helpers.append(
@@ -1695,6 +1694,19 @@ def binaryRelease(ctx, arch, depends_on = []):
                     },
                 ],
             },
+            {
+                "name": "changelog",
+                "image": OC_CI_GOLANG,
+                "environment": CI_HTTP_PROXY_ENV,
+                "commands": [
+                    "make changelog CHANGELOG_VERSION=%s" % ctx.build.ref.replace("refs/tags/v", ""),
+                ],
+                "when": [
+                    {
+                        "event": "tag",
+                    },
+                ],
+            },
             {
                 "name": "release",
                 "image": PLUGINS_GITHUB_RELEASE,
@@ -1706,6 +1718,7 @@ def binaryRelease(ctx, arch, depends_on = []):
                         "opencloud/dist/release/*",
                     ],
                     "title": ctx.build.ref.replace("refs/tags/v", ""),
+                    "note": "opencloud/dist/CHANGELOG.md",
                     "overwrite": True,
                     "prerelease": len(ctx.build.ref.split("-")) > 1,
                 },
@@ -1775,6 +1788,19 @@ def licenseCheck(ctx):
                     "cd third-party-licenses && tar -czf ../third-party-licenses.tar.gz *",
                 ],
             },
+            {
+                "name": "changelog",
+                "image": OC_CI_GOLANG,
+                "environment": CI_HTTP_PROXY_ENV,
+                "commands": [
+                    "make changelog CHANGELOG_VERSION=%s" % ctx.build.ref.replace("refs/tags/v", "").split("-")[0],
+                ],
+                "when": [
+                    {
+                        "event": "tag",
+                    },
+                ],
+            },
             {
                 "name": "release",
                 "image": PLUGINS_GITHUB_RELEASE,
@@ -1786,6 +1812,7 @@ def licenseCheck(ctx):
                         "third-party-licenses.tar.gz",
                     ],
                     "title": ctx.build.ref.replace("refs/tags/v", ""),
+                    "note": "opencloud/dist/CHANGELOG.md",
                     "overwrite": True,
                     "prerelease": len(ctx.build.ref.split("-")) > 1,
                 },
@@ -1811,20 +1838,53 @@ def licenseCheck(ctx):
         "workspace": workspace,
     }
 
-def readyReleaseGo():
+def changelog():
     return [{
-        "name": "ready-release-go",
+        "name": "changelog",
         "steps": [
             {
-                "name": "release-helper",
-                "image": READY_RELEASE_GO,
+                "name": "generate",
+                "image": OC_CI_GOLANG,
+                "environment": CI_HTTP_PROXY_ENV,
+                "commands": [
+                    "make -C opencloud changelog",
+                ],
+            },
+            {
+                "name": "diff",
+                "image": OC_CI_ALPINE,
+                "commands": [
+                    "git diff",
+                ],
+            },
+            {
+                "name": "output",
+                "image": OC_CI_ALPINE,
+                "commands": [
+                    "cat CHANGELOG.md",
+                ],
+            },
+            {
+                "name": "publish",
+                "image": PLUGINS_GIT_PUSH,
                 "settings": {
-                    "git_email": "devops@opencloud.eu",
-                    "forge_type": "github",
-                    "forge_token": {
-                        "from_secret": "github_token",
+                    "branch": "main",
+                    "remote": "ssh://git@github.com/%s.git" % repo_slug,
+                    "commit": True,
+                    "ssh_key": {
+                        "from_secret": "ssh_key",
                     },
+                    "commit_message": "Automated changelog update [skip ci]",
+                    "author_email": "devops@opencloud.eu",
+                    "author_name": "openclouders",
+                    "rebase": True,
                 },
+                "when": [
+                    {
+                        "event": ["push", "manual"],
+                        "branch": "main",
+                    },
+                ],
             },
         ],
         "when": [
@@ -1832,6 +1892,9 @@ def readyReleaseGo():
                 "event": ["push", "manual"],
                 "branch": "main",
             },
+            {
+                "event": "pull_request",
+            },
         ],
     }]
 
@@ -2190,6 +2253,7 @@ def skipIfUnchanged(ctx, type):
     base = [
         ".github/**",
         ".vscode/**",
+        "changelog/**",
         "docs/**",
         "deployments/**",
         "CHANGELOG.md",
@@ -3006,6 +3070,7 @@ def onlyofficeService():
                 "mkdir -p /var/www/onlyoffice/Data/certs",
                 "cp onlyoffice.key /var/www/onlyoffice/Data/certs/",
                 "cp onlyoffice.crt /var/www/onlyoffice/Data/certs/",
+                "ls -al /var/www/onlyoffice/Data/certs/",
                 "chmod 400 /var/www/onlyoffice/Data/certs/onlyoffice.key",
                 "/app/ds/run-document-server.sh",
             ],

deployments/examples/opencloud_full/.env

@@ -92,11 +92,12 @@ DECOMPOSEDS3_BUCKET=
 # Minio domain. Defaults to "minio.opencloud.test".
 MINIO_DOMAIN=
 
-# OpenCloud uses POSIX storage as the default primary storage.
-# By default, Decomposed storage is disabled, and the POSIX storage driver is used.
-# To enable Decomposed storage, uncomment the following line.
+# POSIX Storage configuration - optional
+# OpenCloud supports posix storage as primary storage.
+# Per default, S3 storage is disabled and the decomposed storage driver is used.
+# To enable POSIX storage, uncomment the following line.
 # Note: the leading colon is required to enable the service.
-#DECOMPOSED=:decomposed.yml
+#POSIX=:posix.yml
 
 # Define SMPT settings if you would like to send OpenCloud email notifications.
 # 
@@ -241,4 +242,4 @@ COMPOSE_PATH_SEPARATOR=:
 # This MUST be the last line as it assembles the supplemental compose files to be used.
 # ALL supplemental configs must be added here, whether commented or not.
 # Each var must either be empty or contain :path/file.yml
-COMPOSE_FILE=docker-compose.yml${OPENCLOUD:-}${TIKA:-}${DECOMPOSEDS3:-}${DECOMPOSEDS3_MINIO:-}${DECOMPOSED:-}${COLLABORA:-}${MONITORING:-}${IMPORTER:-}${CLAMAV:-}${ONLYOFFICE:-}${INBUCKET:-}${EXTENSIONS:-}${UNZIP:-}${DRAWIO:-}${JSONVIEWER:-}${PROGRESSBARS:-}${EXTERNALSITES:-}
+COMPOSE_FILE=docker-compose.yml${OPENCLOUD:-}${TIKA:-}${DECOMPOSEDS3:-}${DECOMPOSEDS3_MINIO:-}${POSIX:-}${COLLABORA:-}${MONITORING:-}${IMPORTER:-}${CLAMAV:-}${ONLYOFFICE:-}${INBUCKET:-}${EXTENSIONS:-}${UNZIP:-}${DRAWIO:-}${JSONVIEWER:-}${PROGRESSBARS:-}${EXTERNALSITES:-}

deployments/examples/opencloud_full/decomposed.yml

@@ -1,6 +0,0 @@
----
-services:
-  opencloud:
-    environment:
-      STORAGE_USERS_DRIVER: decomposed
-      

deployments/examples/opencloud_full/posix.yml

@@ -0,0 +1,10 @@
+---
+services:
+  opencloud:
+    environment:
+      # activate posix storage driver for users
+      STORAGE_USERS_DRIVER: posix
+      # keep system data on decomposed storage since this are only small files atm
+      STORAGE_SYSTEM_DRIVER: decomposed
+      # posix requires a shared cache store
+      STORAGE_USERS_ID_CACHE_STORE: "nats-js-kv"

opencloud/docker/Dockerfile.linux.amd64

@@ -22,8 +22,6 @@ RUN addgroup -g 1000 -S opencloud-group && \
   adduser -S --ingroup opencloud-group --uid 1000 opencloud-user --home /var/lib/opencloud
 
 RUN mkdir -p /var/lib/opencloud && \
-# Pre-create the web directory to avoid permission issues
- mkdir -p /var/lib/opencloud/web/assets/apps && \
  chown -R opencloud-user:opencloud-group /var/lib/opencloud && \
  chmod -R 751 /var/lib/opencloud && \
  mkdir -p /etc/opencloud && \

opencloud/docker/Dockerfile.linux.arm64

@@ -22,8 +22,6 @@ RUN addgroup -g 1000 -S opencloud-group && \
   adduser -S --ingroup opencloud-group --uid 1000 opencloud-user --home /var/lib/opencloud
 
 RUN mkdir -p /var/lib/opencloud && \
-# Pre-create the web directory to avoid permission issues
- mkdir -p /var/lib/opencloud/web/assets/apps && \
  chown -R opencloud-user:opencloud-group /var/lib/opencloud && \
  chmod -R 751 /var/lib/opencloud && \
  mkdir -p /etc/opencloud && \

opencloud/docker/Dockerfile.linux.debug.amd64

@@ -22,8 +22,6 @@ RUN addgroup -g 1000 -S opencloud-group && \
   adduser -S --ingroup opencloud-group --uid 1000 opencloud-user --home /var/lib/opencloud
 
 RUN mkdir -p /var/lib/opencloud && \
-# Pre-create the web directory to avoid permission issues
- mkdir -p /var/lib/opencloud/web/assets/apps && \
  chown -R opencloud-user:opencloud-group /var/lib/opencloud && \
  chmod -R 751 /var/lib/opencloud && \
  mkdir -p /etc/opencloud && \

opencloud/docker/Dockerfile.linux.debug.arm64

@@ -22,8 +22,6 @@ RUN addgroup -g 1000 -S opencloud-group && \
   adduser -S --ingroup opencloud-group --uid 1000 opencloud-user --home /var/lib/opencloud
 
 RUN mkdir -p /var/lib/opencloud && \
-# Pre-create the web directory to avoid permission issues
- mkdir -p /var/lib/opencloud/web/assets/apps && \
  chown -R opencloud-user:opencloud-group /var/lib/opencloud && \
  chmod -R 751 /var/lib/opencloud && \
  mkdir -p /etc/opencloud && \

opencloud/docker/Dockerfile.multiarch

@@ -37,8 +37,6 @@ RUN addgroup -g 1000 -S opencloud-group && \
   adduser -S --ingroup opencloud-group --uid 1000 opencloud-user --home /var/lib/opencloud
 
 RUN mkdir -p /var/lib/opencloud && \
-# Pre-create the web directory to avoid permission issues
- mkdir -p /var/lib/opencloud/web/assets/apps && \
  chown -R opencloud-user:opencloud-group /var/lib/opencloud && \
  chmod -R 751 /var/lib/opencloud && \
  mkdir -p /etc/opencloud && \

release-config.ts

@@ -1,49 +0,0 @@
-export default {
-    changeTypes: [
-        {
-            title: '💥 Breaking changes',
-            labels: ['breaking', 'Type:Breaking-Change'],
-            bump: 'major',
-            weight: 3
-        },
-        {
-            title: '🔒 Security',
-            labels: ['security', 'Type:Security'],
-            bump: 'patch',
-            weight: 2
-        },
-        {
-            title: '✨ Features',
-            labels: ['feature', 'Type:Feature'],
-            bump: 'minor',
-            weight: 1
-        },
-        {
-            title: '📈 Enhancement',
-            labels: ['enhancement', 'refactor', 'Type:Enhancement'],
-            bump: 'minor'
-        },
-        {
-            title: '🐛 Bug Fixes',
-            labels: ['bug', 'Type:Bug'],
-            bump: 'patch'
-        },
-        {
-            title: '📚 Documentation',
-            labels: ['docs', 'documentation', 'Type:Documentation'],
-            bump: 'patch'
-        },
-        {
-            title: '✅ Tests',
-            labels: ['test', 'tests', 'Type:Test'],
-            bump: 'patch'
-        },
-        {
-            title: '📦️ Dependencies',
-            labels: ['dependency', 'dependencies', 'Type:Dependencies'],
-            bump: 'patch',
-            weight: -1
-        }
-    ],
-    useVersionPrefixV: true,
-}

services/collaboration/pkg/connector/fileconnector.go

@@ -1272,10 +1272,6 @@ func (f *FileConnector) CheckFileInfo(ctx context.Context) (*ConnectorResponse,
 
 		fileinfo.KeyPostMessageOrigin:            f.cfg.Commons.OpenCloudURL,
 		fileinfo.KeyLicenseCheckForEditIsEnabled: f.cfg.App.LicenseCheckEnable,
-
-		// set to true for Collabora until we have a web embed mode for "Save As" and "Export As"
-		// see the FIXME in ./fileinfo/collabora.go and https://github.com/opencloud-eu/web/issues/422
-		fileinfo.KeyUserCanNotWriteRelative: false,
 	}
 
 	switch wopiContext.ViewMode {

services/collaboration/pkg/connector/fileconnector_test.go

@@ -1780,7 +1780,7 @@ var _ = Describe("FileConnector", func() {
 				OwnerID:                 "61616262636340637573746f6d496470", // hex of aabbcc@customIdp
 				Size:                    int64(998877),
 				BaseFileName:            "test.txt",
-				UserCanNotWriteRelative: true,
+				UserCanNotWriteRelative: false,
 				DisableExport:           true,
 				DisableCopy:             true,
 				DisablePrint:            true,
@@ -1962,7 +1962,7 @@ var _ = Describe("FileConnector", func() {
 				OwnerID:                 "61616262636340637573746f6d496470", // hex of aabbcc@customIdp
 				Size:                    int64(998877),
 				BaseFileName:            "test.txt",
-				UserCanNotWriteRelative: true,
+				UserCanNotWriteRelative: false,
 				DisableExport:           true,
 				DisableCopy:             true,
 				DisablePrint:            true,

services/collaboration/pkg/connector/fileinfo/collabora.go

@@ -99,7 +99,7 @@ func (cinfo *Collabora) SetProperties(props map[string]interface{}) {
 		case KeyUserCanWrite:
 			cinfo.UserCanWrite = value.(bool)
 		case KeyUserCanNotWriteRelative:
-			cinfo.UserCanNotWriteRelative = true // FIXME: set to `value.(bool)` again for https://github.com/opencloud-eu/web/issues/422
+			cinfo.UserCanNotWriteRelative = value.(bool)
 		case KeyUserID:
 			cinfo.UserID = value.(string)
 		case KeyUserFriendlyName:

services/idp/README.md

@@ -7,76 +7,3 @@ It is mainly targeted at smaller installations. For larger setups it is recommen
 By default, it is configured to use the OpenCloud IDM service as its LDAP backend for looking up and authenticating users. Other backends like an external LDAP server can be configured via a set of [enviroment variables](https://docs.opencloud.eu/services/idp/configuration/#environment-variables).
 
 Note that translations provided by the IDP service are not maintained via OpenCloud but part of the embedded  [LibreGraph Connect Identifier](https://github.com/libregraph/lico/tree/master/identifier) package.
-
-## Configuration
-
-### Custom Clients
-
-By default the `idp` service generates a OIDC client configuration suitable for
-using OpenCloud with the standard client applications (Web, Desktop, iOS and
-Android). If you need to configure additional client it is possible to inject a
-custom configuration via `yaml`. This can be done by adding a section `clients`
-to the `idp` section of the main configuration file (`opencloud.yaml`). This section
-needs to contain configuration for all clients (including the standard clients).
-
-For example if you want to add a (public) client for use with the oidc-agent you would
-need to add this snippet to the `idp` section in `opencloud.yaml`.
-
-```yaml
-clients:
-- id: web
-  name: OpenCloud Web App
-  trusted: true
-  secret: ""
-  redirect_uris:
-  - https://opencloud.k8s:9200/
-  - https://opencloud.k8s:9200/oidc-callback.html
-  - https://opencloud.k8s:9200/oidc-silent-redirect.html
-  post_logout_redirect_uris: []
-  origins:
-  - https://opencloud.k8s:9200
-  application_type: ""
-- id: OpenCloudDesktop
-  name: OpenCloud Desktop Client
-  trusted: false
-  secret: ""
-  redirect_uris:
-  - http://127.0.0.1
-  - http://localhost
-  post_logout_redirect_uris: []
-  origins: []
-  application_type: native
-- id: OpenCloudAndroid
-  name: OpenCloud Android App
-  trusted: false
-  secret: ""
-  redirect_uris:
-  - oc://android.opencloud.eu
-  post_logout_redirect_uris:
-  - oc://android.opencloud.eu
-  origins: []
-  application_type: native
-- id: OpenCloudIOS
-  name: OpenCloud iOS App
-  trusted: false
-  secret: ""
-  redirect_uris:
-  - oc://ios.opencloud.eu
-  post_logout_redirect_uris:
-  - oc://ios.opencloud.eu
-  origins: []
-  application_type: native
-- id: oidc-agent
-  name: OIDC Agent
-  trusted: false
-  secret: ""
-  redirect_uris:
-  - http://127.0.0.1
-  - http://localhost
-  post_logout_redirect_uris: []
-  origins: []
-  application_type: native
-```
-
-
-

tests/acceptance/expected-failures-without-remotephp.md

@@ -337,7 +337,6 @@
 - [coreApiWebdavUploadTUS/uploadFileMtime.feature:39](https://github.com/opencloud-eu/opencloud/blob/main/tests/acceptance/features/coreApiWebdavUploadTUS/uploadFileMtime.feature#L39)
 - [coreApiWebdavUploadTUS/uploadFileMtime.feature:51](https://github.com/opencloud-eu/opencloud/blob/main/tests/acceptance/features/coreApiWebdavUploadTUS/uploadFileMtime.feature#L51)
 - [coreApiWebdavUploadTUS/uploadFileMtime.feature:65](https://github.com/opencloud-eu/opencloud/blob/main/tests/acceptance/features/coreApiWebdavUploadTUS/uploadFileMtime.feature#L65)
-- [coreApiWebdavUploadTUS/uploadFileMtime.feature:79](https://github.com/opencloud-eu/opencloud/blob/main/tests/acceptance/features/coreApiWebdavUploadTUS/uploadFileMtime.feature#L79)
 - [coreApiWebdavUploadTUS/uploadFileMtimeShares.feature:29](https://github.com/opencloud-eu/opencloud/blob/main/tests/acceptance/features/coreApiWebdavUploadTUS/uploadFileMtimeShares.feature#L29)
 - [coreApiWebdavUploadTUS/uploadFileMtimeShares.feature:48](https://github.com/opencloud-eu/opencloud/blob/main/tests/acceptance/features/coreApiWebdavUploadTUS/uploadFileMtimeShares.feature#L48)
 - [coreApiWebdavUploadTUS/uploadFileMtimeShares.feature:69](https://github.com/opencloud-eu/opencloud/blob/main/tests/acceptance/features/coreApiWebdavUploadTUS/uploadFileMtimeShares.feature#L69)

tests/acceptance/features/apiCollaboration/checkFileInfo.feature

@@ -183,7 +183,7 @@ Feature: check file info with different wopi apps
             "const": true
           },
           "UserCanNotWriteRelative": {
-            "const": true
+            "const": false
           },
           "EnableOwnerTermination": {
             "const": true
@@ -581,7 +581,7 @@ Feature: check file info with different wopi apps
             "const": <user-can-write>
           },
           "UserCanNotWriteRelative": {
-            "const": true
+            "const": false
           },
           "EnableOwnerTermination": {
             "const": true
@@ -691,7 +691,7 @@ Feature: check file info with different wopi apps
             "const": true
           },
           "UserCanNotWriteRelative": {
-            "const": true
+            "const": false
           },
           "EnableOwnerTermination": {
             "const": true
@@ -1077,7 +1077,7 @@ Feature: check file info with different wopi apps
             "const": true
           },
           "UserCanNotWriteRelative": {
-            "const": true
+            "const": false
           },
           "EnableOwnerTermination": {
             "const": true
@@ -1424,7 +1424,7 @@ Feature: check file info with different wopi apps
             "const": true
           },
           "UserCanNotWriteRelative": {
-            "const": true
+            "const": false
           },
           "EnableOwnerTermination": {
             "const": true
@@ -1810,7 +1810,7 @@ Feature: check file info with different wopi apps
             "const": <user-can-write>
           },
           "UserCanNotWriteRelative": {
-            "const": true
+            "const": false
           },
           "EnableOwnerTermination": {
             "const": true