# Bug OP-13106 - Access to project folders for non members and admins.

Project: OpenProject
Status: closed
URL: https://community.openproject.org/work_packages/OP-13106

## Open points

_No work packages_

## Details

| Attribute | Value |
| --- | --- |
| Date |  |
| Priority | Medium |
| Module |  |
| Target versions | 13.0.0 |
| Observed in versions |  |
| Sprint | 13.0.0 |
| Backlog bucket |  |
| Bug found in version (deprecated) |  |
| Found in mobile app version |  |
| Follow-up feedback e-mail |  |
| Requires doc change | No |
| Accessibility | No |
| Pull preview |  |
| List |  |
| Labels |  |

## People

| Attribute | Value |
| --- | --- |
| Assignee |  |
| Accountable |  |
| Product manager |  |
| Developers |  |
| Designer |  |
| Ordered by |  |
| Signed off by |  |
| Interest by |  |

## Planning

| Attribute | Value |
| --- | --- |
| Relevance |  |

## Costs

| Attribute | Value |
| --- | --- |
| Votes |  |
| Work |  |
| Labor costs |  |

## Description

### Steps to reproduce

*   Non member case.
    *   Sign in as a user;
    *   Make sure that Non member has permission to **Read files** in **File storages;**
    *   Make sure that the user is logged in into **Nextcloud** from within **OpenProject;**
    *   Navigate to a project with automatically managed project folder enabled;
    *   Make sure the user is not a member of the project you are navigating to;
    *   Click on one of the file links that navigates to the project folder and there is no access to it.
*   Admin case
    *   Sign in as an admin;
    *   The admin has all permissions. So, he has permission to manipulate files in **File storages;**
    *   Make sure that the admin is logged in into **Nextcloud** from within **OpenProject;**
    *   Navigate to a project with automatically managed project folder enabled;
    *   Make sure the admin is not a member of the project you are navigating to;
    *   Click on one of the file links that navigates to the project folder and there is no access to it.

### What is the buggy behavior?

*   In both cases users have no access to files on NC side.

### What is the expected behavior?

1.  In both cases users should have access to files.

**OpenProject version**

_13.0_