Files
opencloud/tests/acceptance/expected-failures-API-on-OWNCLOUD-storage.md
T
2021-06-14 14:01:21 +05:45

336 KiB

Scenarios from ownCloud10 core API tests that are expected to fail with owncloud storage

File

Basic file management like up and download, move, copy, properties, trash, versions and chunking.

href in trashbin PROPFIND response is wrong

QA trashcan cannot delete a deep tree

A deleted folder with & in it does not appear in the trashbin

Review and fix the tests that have sharing step to work with ocis

The following scenarios fail on OWNCLOUD storage but not on OCIS storage:

invalid webdav responses for unauthorized requests.

PROPFIND on trashbin with Depth: infinity only shows the first level

href in trashbin PROPFIND response is wrong

href in trashbin PROPFIND response is wrong

trash-bin restore move does not send back Etag and other headers

cannot restore to a different file-name

href in trashbin PROPFIND response is wrong

trash-bin restore move does not send back Etag and other headers

href in trashbin PROPFIND response is wrong

cannot restore to a different file-name

uploading with old-chunking does not work

remote.php/dav/uploads endpoint does not exist

The following scenarios fail on OWNCLOUD storage but not on OCIS storage:

Version count is 1 more than on oC10

Version cannot be restored when file has been renamed

PUT request with missing parent must return status code 409

uploading with old-chunking does not work

invalid file-names should not be created using the TUS protocol

500 Internal Server Error on Post request for TUS upload

The following scenarios fail on OWNCLOUD storage but not on OCIS storage:

upload a file using TUS resource URL as an other user should not work

TUS OPTIONS requests do not reply with TUS headers when invalid password

renaming to banned name works

Getting information about a folder overwritten by a file gives 500 error instead of 404

creating a folder that already exists returns an empty body

Scenario Outline: try to create a folder that already exists

Some failing tests with Webdav custom properties

ocdav: double check the webdav property parsing when custom namespaces are used

Cannot set custom webDav properties

Sync

Synchronization features like etag propagation, setting mtime and locking files

Checksum feature

ocdav: return checksum in upload response for chunked upload

Webdav LOCK operations

Share

File and sync features in a shared scenario

etags don't change for a share receiver

The following scenarios fail on OWNCLOUD storage but not on OCIS storage:

Checksum feature

The following scenarios fail on OWNCLOUD storage but not on OCIS storage:

Searching sharee with displayname

User cannot create a folder named Share

Response is empty when accepting a share

file_target of a auto-renamed file is not correct directly after sharing

file_target has unexpected value

no displayname_owner shown when creating a share

Sharing seems to work but does not work

Listing shares via ocs API does not show path for parent folders

Shares are not deleted when user is deleted

sharing with group not available

deleting share response does not contain data field

sharing via API and changing the cases in the username does not work correctly

File deletion using dav gives unique string in filename in the trashbin

cannot share a folder with create permission

Listing shares via ocs API does not show path for parent folders

Shares are not deleted when user is deleted

Delete shares from user when user is deleted

no displayname_owner shown when creating a share

when sharing a file mime-type field is set to application/octet-stream

OCS error message for attempting to access share via share id as an unauthorized user is not informative

Listing shares via ocs API does not show path for parent folders

Allow getting the share list filtered by share type via API

No displayname_owner shown when creating a share

Delete shares from user when user is deleted

When sharing a file mime-type field is set to application/octet-stream

Previews via webDAV API tests fail on OCIS

Ability to return error messages in Webdav response bodies

various sharing settings cannot be set

OCIS share permissions not enforced

The following scenarios fail on OWNCLOUD storage but not on OCIS storage:

Adding public upload to a read only shared folder as a receipient is allowed

Upload-only shares must not overwrite but create a separate file

Set quota over settings

various sharing settings cannot be set

Resharing does not work with ocis storage

The following scenarios fail on OWNCLOUD storage but not on OCIS storage:

cannot move from Shares folder

various sharing settings cannot be set

share permissions are not enforced

The following scenarios fail on OWNCLOUD storage but not on OCIS storage:

500 status code on update share

Share receiver cannot get share by id

sharing with group not available

invalid format of sharees response

deleting a received share-folder moves it to trash-bin but does not unshare it

Restoring a file to read-only received folder returns incorrect status code

remote.php/dav/uploads endpoint does not exist

Copying into a shared folder

Scenario Outline: Copying a file to a folder with no permissions

Scenario Outline: delete a folder when there is a default folder for received shares

sharing with group not available

quota query

cannot get share-types webdav property

The following scenarios fail on OWNCLOUD storage but not on OCIS storage:

sharing with group not available

changing user quota gives ocs status 103 / Cannot set quota

not possible to move file into a received folder

cannot move from Shares folder

Scenario Outline: Moving a file into a shared folder as the sharee and as the sharer

restoring an older version of a shared file deletes the share

cannot move from Shares folder

sharing with group not available

####not possible to move file into a received folder

getting the metadata without permission results in a 403 error

Sharing seems to work but does not work

Expiration date for user shares is not implemented

sharing with group not available

Sharing seems to work but does not work

The following scenarios fail on OWNCLOUD storage but not on OCIS storage:

No way to set default folder for received shares

various sharing settings cannot be set

Group shares support

Group shares support

Sharing seems to work but does not work

Share additional info

Share extra attributes

Edit user share response has an "name" field

user can access version metadata of a received share before accepting it

when a share exists its impossible to share a renamed folder

sharing with group not available

Share lists deleted user as 'user'

deleting a share with wrong authentication returns OCS status 996 / HTTP 500

User Management

User and group management features

Cannot create user with different username and emails

special character username not valid

Password can be set to empty

Client token generation not implemented

disable users /cloud/users/disable|enable not available

displayname of user can be changed to empty

quota query

getting and setting quota

changing user quota gives ocs status 103 / Cannot set quota

user can get info of other users/ cloud/users endpoints not authenticated

incorrect ocs(v2) status value when getting info of user that does not exist should be 404, gives 998

ocs: api compatibility, return correct status code

incorrect ocs(v2) status value when getting info of share that does not exist should be 404, gives 998

ocs: api compatibility, return correct status code

subadmin endpoints not implemented for users

subadmin endpoints not implemented for groups

creating existing group doesn't gives error

cannot create group with '/'

adding user to non-existent group gives wrong statuscode

adding user to empty group gives wrong statuscode

adding non-existent user to a group gives wrong status code

Cannot create user with different username and emails

special character username not valid

normal users can list the members of the group

ocs v2 invalid status code for group endpoints

user-sync endpoint does not exist

Other

API, search, favorites, config, capabilities, not existing endpoints, CORS and others

no robots.txt available

There is no such thing like a "super-user"

no command equivalent to occ

ocs config endpoint only accessible by authorized users

Ability to return error messages in Webdav response bodies

server returns 500 when trying to access a not existing file

ocdav: api compatibility, return correct status code

users can access each-others data using the new webdav API

ocdav: api compatibility, return correct status code

Renaming a resource to banned name is allowed

ocdav: api compatibility, return correct status code

send POST requests to another user's webDav endpoints as normal user

ocdav: api compatibility, return correct status code

PUT request with missing parent must return status code 409

ocdav: api compatibility, return correct status code

Using double slash in URL to access a folder gives 501 and other status codes

Default capabilities for normal user not same as in oC-core

Difference in response content of status.php and default capabilities

REPORT request not implemented

Scenario Outline: search for entry by pattern

And other missing implementation of favorites

The following scenarios fail on OWNCLOUD storage but not on OCIS storage:

CSRF Headers

Scenario Outline: Downloading a file should serve security headers

Authentication

Scenario Outline: Unauthenticated call

trying to access a non-existing resource returns an empty body

Scenario Outline: Do a PROPFIND to a non-existing URL

wildcard Access-Control-Allow-Origin

No way to enforce token auth

App Passwords/Tokens for legacy WebDAV clients

various sharing settings cannot be set

Request to edit non-existing user by authorized admin gets unauthorized in http response

Sharing a same file twice to the same group

PATCH request for TUS upload with wrong checksum gives incorrect response

Won't fix

Not everything needs to be implemented for ocis. While the oc10 testsuite covers these things we are not looking at them right now.

  • The OC-LazyOps header is no longer supported by the client, implmenting this is not necessary for a first production release. We plan to have an uploed state machine to visualize the state of a file, see https://github.com/owncloud/ocis/issues/214
  • Blacklisted ignored files are no longer required because ocis can handle .htaccess files without security implications introduced by serving user provided files with apache.

uploading with old-chunking does not work

remote.php/dav/uploads endpoint does not exist

blacklisted filenames like .htaccess & file.parts can be uploaded

cannot rename files asynchronously

cannot set blacklisted file names

cannot set excluded directories

cannot set blacklisted file names

cannot set excluded directories

cannot set blacklisted file names

cannot set excluded directories

system configuration options missing

Checksum feature

Trying to accept a share with invalid ID gives incorrect OCS and HTTP status

File is still present in the file list after declining a share