Begin of the insertion**As**End of the insertion Begin of the deletion ### Steps to reproduce

1. HaveEnd of the deletion a Begin of the insertionuser,
**I want to** haveEnd of the insertion Begin of the deletion NextcloudEnd of the deletion storage Begin of the insertionpermissions updated synchronouslyEnd of the insertion Begin of the deletion that authenticates through SSO

2. Login as a **new** SSO user to OpenProject and Nextcloud, so that your account is provisioned on both sides

1. The SSO user must not be adminEnd of the deletion in Begin of the insertionmore cases,
**so that** I immediately see myEnd of the insertion Begin of the deletion Nextcloud, because it must not be allowed to read files in NC before OpenProject sets upEnd of the deletion access Begin of the deletion permissions

3. GoEnd of the deletion to Begin of the deletion a project where you should be allowed to seeEnd of the deletion linked files Begin of the deletion

4. Access a work package's files tab with already linked files


### What is the buggy behavior?

The linked file shows slightly greyed out, with a hover text indicating that you do not have access to the file.

Clicking on the file works as expected andEnd of the deletion after Begin of the insertionreceiving storage access.End of the insertion Begin of the deletion a page refresh, the file shows as readable.End of the deletion

Begin of the insertion####

#### Acceptance criteriaEnd of the insertion Begin of the deletion ### What is the expected behavior?End of the deletion

Begin of the insertion* Users can see filesEnd of the insertion Begin of the deletion Even first-time users should immediately know thatEnd of the deletion they have access to Begin of the insertionimmediately...

* after performingEnd of the insertion Begin of the deletion files linked to a work package.

**Out of scope:** We decided that we will not try to fixEnd of the deletion the Begin of the insertionOAuth flow forEnd of the insertion Begin of the deletion case where the first-time user immediately clicks onEnd of the deletion a Begin of the insertionstorage

* afterEnd of the insertion Begin of the deletion files tab link. In general if users are "too quick" seeing the files tab, they might still see the errorneous behaviour. But a userEnd of the deletion logging in and Begin of the insertionauthenticatingEnd of the insertion Begin of the deletion then navigatingEnd of the deletion to a Begin of the insertionstorage via SSO

End of the insertion Begin of the deletion work package where they should be allowed to see files, should be able to see their access from the beginning.

### Environment information

**OpenProject installation type**

End of the deletion * Begin of the insertionSynchronous remote calls to update the user's permissions are performed in a way that the duration does not scale with the number of users or projectsEnd of the insertion Begin of the deletion Hosted cloud edition


**OpenProject version**

QA Edge

**Browser**

* [ ] Chrome
* [x] Firefox
* [ ] Safari
* [ ] Mobile Safari
* [ ] Other (please specify)End of the deletion