-
-
Notifications
You must be signed in to change notification settings - Fork 4.8k
[encryption] store keys by fileId instead of path #59345
Copy link
Copy link
Open
Labels
0. Needs triagePending check for reproducibility or if it fits our roadmapPending check for reproducibility or if it fits our roadmapenhancementfeature: encryption (server-side)
Description
Tip
Help move this idea forward
- Use the 👍 reaction to show support for this feature.
- Avoid commenting unless you have relevant information to add; unnecessary comments create noise for subscribers.
- Subscribe to receive notifications about status changes and new comments.
Is your feature request related to a problem? Please describe.
In Collectives, we can have different paths to a file by user (when a user changes their user_folder user setting). This leads to inaccessible files with server-side encryption as the encryption keys are stored by file path.
Describe the solution you'd like
In order to fix this, we should switch to fileId based key storage instead of file path based key storage.
Describe alternatives you've considered
- We could use the storage path instead for
ISystemMountPointpaths, but this would come with its own problems. E.g.appdatais excluded from encryption and Collectives files live inappdatadirectory. - We could introduce a way to map different user mountpoint paths to the same encryption key path.
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
0. Needs triagePending check for reproducibility or if it fits our roadmapPending check for reproducibility or if it fits our roadmapenhancementfeature: encryption (server-side)
Type
Projects
Status
To triage