Public sharing links do not work if you are a logged-in user

[Jerome-Herbinet]

⚠️ This issue respects the following points: ⚠️

• This is a bug, not a question or a configuration/webserver/proxy issue.
• This issue is not already reported on Github (I've searched it).
• I agree to follow Nextcloud's Code of Conduct.

What went wrong, what did you observe?

1. Create a poll; in my case:

• it is not anonymous
• it is shared with platform users

2. Create a public share link
3. Access the public share URL as a logged-in user (another user than yours, but I think it may also occur with your own user)
4. You will then see an empty poll page with “No vote options available.” error message and a wrong creation date (01/01/1970).
5. Execute the public share URL another time, and, you will get a "403 - You are not allowed to access this poll" error.
6. You will also notice that the poll is duplicated in the “Relevant” section (left panel)... and that neither of them displays correctly ("No vote options available" error message).

What did you expect, how polls should behave instead?

• Public sharing links must work whether the user is logged in or not; if this is not possible, an internal link feature must be implemented, similar to the one for files.
• The form should not appear twice in the “relevant” section and must be accessible properly.

What steps does it need to replay this bug?

Check above

Affected polls version

8.6.3

Installation method

Installed/updated from the appstore (Apps section of your site)

Installation type

First time installation

Can you rule out that any extension you use is involved in the issue?

• I have checked all browser extension

Which browser did you use, when experiencing the bug?

• Firefox
• Chrome
• Chromium/Chromium based (i.e. Edge)
• Safari
• Other/Don't know

Other browser

No response

Add your browser log here

Can be provided if necessary. This issue seams to be easy for you to reproduce.

Additional client environment information

No response

NC version

Nextcloud 32 (Hub 25 Autumn)

Other Nextcloud version

33 (Hub 26 Winter)

PHP engine version

PHP 8.3

Other PHP version

8.3

Database engine

MariaDB

Database Engine version or other Database

No response

Which user-backends are you using?

• Default user-backend (database)
• LDAP/ Active Directory
• SSO - SAML
• Other/Don't know

Add your nextcloud server log here

Can be provided if necessary. This issue seams to be easy for you to reproduce.

Additional environment informations

No response

Configuration report

{
    "passwordsalt": "***REMOVED SENSITIVE VALUE***",
    "secret": "***REMOVED SENSITIVE VALUE***",
    "trusted_domains": [
        ""
    ],
    "datadirectory": "***REMOVED SENSITIVE VALUE***",
    "dbtype": "mysql",
    "version": "32.0.7.1",
    "overwrite.cli.url": "https:\/\/",
    "dbname": "***REMOVED SENSITIVE VALUE***",
    "dbhost": "***REMOVED SENSITIVE VALUE***",
    "dbtableprefix": "oc_",
    "mysql.utf8mb4": true,
    "dbuser": "***REMOVED SENSITIVE VALUE***",
    "dbpassword": "***REMOVED SENSITIVE VALUE***",
    "updater.release.channel": "stable",
    "installed": true,
    "instanceid": "***REMOVED SENSITIVE VALUE***",
    "log_type": "file",
    "logfile": "\/var\/log\/nextcloud\/\/nextcloud.log",
    "redis": {
        "host": "***REMOVED SENSITIVE VALUE***",
        "password": "***REMOVED SENSITIVE VALUE***",
        "port": 6379,
        "dbindex": 6,
        "timeout": 0
    },
    "skeletondirectory": "",
    "logtimezone": "Europe\/Paris",
    "mail_smtpmode": "smtp",
    "mail_smtpsecure": "ssl",
    "mail_from_address": "***REMOVED SENSITIVE VALUE***",
    "mail_domain": "***REMOVED SENSITIVE VALUE***",
    "mail_smtpname": "***REMOVED SENSITIVE VALUE***",
    "mail_smtppassword": "***REMOVED SENSITIVE VALUE***",
    "mail_smtphost": "***REMOVED SENSITIVE VALUE***",
    "mail_smtpauthtype": "PLAIN",
    "default_language": "fr",
    "default_phone_region": "FR",
    "defaultapp": "files",
    "trashbin_retention_obligation": "20,40",
    "versions_retention_obligation": "auto,40",
    "check_for_working_wellknown_setup": false,
    "quota_include_external_storage": false,
    "cron_log": true,
    "has_internet_connection": true,
    "updatechecker": true,
    "appstoreenabled": true,
    "filelocking.enabled": true,
    "session_keepalive": true,
    "knowledgebaseenabled": true,
    "allow_user_to_change_display_name": true,
    "enable_previews": true,
    "enable_avatars": true,
    "auth.bruteforce.protection.enabled": true,
    "loglevel": 0,
    "log_rotate_size": 104857600,
    "mail_smtpauth": 1,
    "mail_smtpport": 465,
    "session_lifetime": 86400,
    "remember_login_cookie_lifetime": 1296000,
    "preview_max_filesize_image": 50,
    "activity_expire_days": 120,
    "maintenance_window_start": 1,
    "memcache.local": "\\OC\\Memcache\\APCu",
    "memcache.locking": "\\OC\\Memcache\\Redis",
    "memcache.distributed": "\\OC\\Memcache\\Redis",
    "app_install_overwrite": [
        "admin_audit",
        "user_ldap",
        "richdocuments",
        "workspace",
        "twofactor_gateway",
        "bbb",
        "fulltextsearch_elasticsearch",
        "zimbradrive",
        "occweb"
    ],
    "ldapProviderFactory": "OCA\\User_LDAP\\LDAPProviderFactory",
    "maintenance": false,
    "twofactor_enforced": "false",
    "twofactor_enforced_groups": [
        "guest_app"
    ],
    "twofactor_enforced_excluded_groups": [],
    "trusted_proxies": "***REMOVED SENSITIVE VALUE***",
    "forbidden_filename_basenames": [
        "con",
        "prn",
        "aux",
        "nul",
        "com0",
        "com1",
        "com2",
        "com3",
        "com4",
        "com5",
        "com6",
        "com7",
        "com8",
        "com9",
        "com\u00b9",
        "com\u00b2",
        "com\u00b3",
        "lpt0",
        "lpt1",
        "lpt2",
        "lpt3",
        "lpt4",
        "lpt5",
        "lpt6",
        "lpt7",
        "lpt8",
        "lpt9",
        "lpt\u00b9",
        "lpt\u00b2",
        "lpt\u00b3"
    ],
    "forbidden_filename_characters": [
        "<",
        ">",
        ":",
        "\"",
        "|",
        "?",
        "*",
        "\\",
        "\/"
    ],
    "forbidden_filename_extensions": [
        " ",
        ".",
        ".filepart",
        ".part"
    ],
    "activity_use_cached_mountpoints": true
}

List of activated Apps

Enabled:
 - activity: 5.0.0
 - admin_audit: 1.22.0
 - admincockpit: 1.2.2
 - announcementbanner: 2.3.1
 - announcementcenter: 7.3.0
 - app_api: 32.0.0
 - assistant: 2.13.0
 - bbb: 2.9.1
 - bruteforcesettings: 5.0.0
 - calendar: 6.2.1
 - call_summary_bot: 3.3.0
 - circles: 32.0.0
 - collectives: 4.2.0
 - comments: 1.22.0
 - contacts: 8.3.6
 - contactsinteraction: 1.13.1
 - context_chat: 5.3.1
 - dashboard: 7.12.0
 - deck: 1.16.3
 - end_to_end_encryption: 2.0.0-rc.7
 - external: 7.0.0
 - federation: 1.22.0
 - files_archive: 1.2.8
 - files_downloadlimit: 5.0.0-dev.0
 - files_external: 1.24.1
 - files_fulltextsearch: 32.0.2
 - files_lock: 32.0.2
 - files_pdfviewer: 5.0.0
 - files_reminders: 1.5.0
 - files_sharing: 1.24.1
 - files_trashbin: 1.22.0
 - files_versions: 1.25.0
 - firstrunwizard: 5.0.0
 - folder_protection: 2.1.1
 - forms: 5.2.5
 - formvox: 0.3.9
 - fulltextsearch: 32.0.0
 - fulltextsearch_elasticsearch: 32.0.2
 - groupfolders: 20.1.12
 - guests: 4.6.0
 - impersonate: 3.0.1
 - integration_deepl: 2.1.0
 - integration_giphy: 2.2.0
 - integration_github: 3.2.2
 - integration_gitlab: 4.0.0
 - integration_mastodon: 4.0.0
 - integration_openai: 3.10.1
 - integration_openstreetmap: 3.0.0
 - integration_peertube: 2.1.0
 - integration_replicate: 4.2.0
 - integration_tmdb: 3.0.1
 - integration_youtube: 0.6.1
 - integration_zimbra: 1.0.15
 - intravox: 1.0.1
 - introvox: 1.3.1
 - libresign: 12.4.0
 - logreader: 5.0.0
 - mail: 5.7.5
 - memegen: 1.1.3
 - metavox: 1.8.3
 - nextcloud_announcements: 4.0.0
 - notes: 4.13.1
 - notifications: 5.0.0
 - notify_push: 1.3.1
 - occweb: 0.2.3
 - ocs_api_viewer: 1.0.11
 - onlyoffice: 9.13.0
 - password_policy: 4.0.0
 - photos: 5.0.0
 - polls: 8.6.3
 - privacy: 4.0.0
 - recommendations: 5.0.0
 - related_resources: 3.0.0
 - richdocuments: 9.0.5
 - serverinfo: 4.0.0
 - sharebymail: 1.22.0
 - sharereview: 2.1.0
 - sketch_picker: 2.4.0
 - spreed: 22.0.10
 - support: 4.0.0
 - systemtags: 1.22.0
 - tables: 2.0.0-beta.2
 - terms_of_service: 4.7.0-rc.2
 - text: 6.0.1
 - theming_customcss: 1.20.0
 - twofactor_email: 3.0.6-beta.1
 - twofactor_gateway: 2.2.2
 - twofactor_nextcloud_notification: 6.0.0
 - twofactor_totp: 14.0.0
 - updatenotification: 1.22.0
 - user_ldap: 1.23.0
 - user_migration: 10.1.0
 - user_oidc: 8.7.0
 - user_retention: 1.16.0
 - user_status: 1.12.0
 - users_picker: 1.2.2
 - weather_status: 1.12.0
 - webhook_listeners: 1.3.0
 - whiteboard: 1.5.7
 - workspace: 4.3.1
Disabled:
 - encryption
 - group_everyone: 0.1.19
 - survey_client: 4.0.0-dev.0
 - suspicious_login

Nextcloud Signing status

[]

Additional Information

No response

[FriMeDev]

We could reproduce the issue as well.

[ma-ludw]

I do have the same problem with version 8.6.3
Additionally, we have the problem, that if I share an invitation via E-Mail-address of a user (and not select a user) and the user is logged in, the 403 is shown, and the user is not able to vote.

[dartcafe]

Looks like #4496. Unfortunately I was not able to reproduce the bug until now. There must be one detail I am missing.

Unfortunately I am in the middle of some optimizations regarding sharing and registering.

Additionally, we have the problem, that if I share an invitation via E-Mail-address of a user (and not select a user) and the user is logged in, the 403 is shown, and the user is not able to vote.

Is there a connection between this fact and the denied access or is this an additional issue?

[Jerome-Herbinet]

Looks like #4496. Unfortunately I was not able to reproduce the bug until now. There must be one detail I am missing.

Unfortunately I am in the middle of some optimizations regarding sharing and registering.

Additionally, we have the problem, that if I share an invitation via E-Mail-address of a user (and not select a user) and the user is logged in, the 403 is shown, and the user is not able to vote.

Is there a connection between this fact and the denied access or is this an additional issue?

Hello,

What Nextcloud Server and Polls App version do you use ?

[dartcafe]

Me? Multiple combinations. But this bug should only be related to the app itself.