@C0rby the logic around the base path is wrong. When base is empty means the path is either / or empty string.
Access paths outside the share folder is already covered by:

if !s.inSharedFolder(ctx, p) {
		return s.initiateFileUpload(ctx, req)
}

so this condition is not triggered.

The method isShareChild is more semantic that the path split.

Also, with your changes you will stat resources inside a share that don't exist in the home provider, they exist in original storage provider. This assumes that the storage drivers they need to handle resources outside its own storage provider and it not the case. Furthermore, this also assumes that you can create a reference with storage id and paths mixed, also not possible.

Please revert the changes in internal/grpc/services/gateway/storageprovider.go.
The filesystem implementation should work without those changes.

@C0rby the logic around the base path is wrong. When base is empty means the path is either / or empty string.

No, when the base is empty the path can be a path to a folder.

path.Split("/home/MyShare/somefolder/") => dir == "/home/MyShare/somefolder/", base == ""
path.Split("/home/MyShare/somefile") => dir == "/home/MyShare/", base == "somefile"

But I'll try to make the owncloud storage driver work without the changes in storageprovider.go.

@C0rby, I see, however we should not assume folder paths always end in a slash.

Can you clarify something for me?

// /home/MyShares/photos/
func (s *svc) isShareName(ctx context.Context, p string) bool {
	return s.split(ctx, p, 3)
}

// /home/MyShares/photos/Ibiza/beach.png
func (s *svc) isShareChild(ctx context.Context, p string) bool {
	return s.split(ctx, p, 4)
}

Both of these methods assume that the path contains at least 3 folders before the actual shared file but in the usershareprovider.createReference the reference path is build to /home/MyShare/x where x is the file.
Here a comment from the createReference method:

// reference path is the home path + some name
// CreateReferene(cs3://home/MyShares/x)
// that can end up in the storage provider like:
// /eos/user/.shadow/g/gonzalhu/MyShares/x

In my understanding this doesn't fit, either isShareName and isShareChild must be changed or createReference.
Or am I missing something here?

@C0rby both of those methods assume the path contains at least two folder, /home/MyShares before the shared reference. Those methods and the create reference are correct.

In the current design we lock down to the /home/MyShares folder where shares can be mounted.

@labkode, I know about /home/MyShares, that part is alright.

What I mean is:
The path created by storageprovider.CreateReference is always 3 parts long i.e. /home/beach.png results in the path /home/MyShares/beach.png same with /home/photos/beach.png, this also results in /home/MyShares/beach.png.

So now when we call isShareName(ctx, "/home/MyShares/beach.png") this will return true since it consists of 3 parts even though the last part is a file not a folder.

The call to isShareChild(ctx, "/home/MyShares/beach.png") would then fail since it consists of 3 not 4 parts.

My problem is line 138-148 in internal/grpc/services/gateway/storageprovider.go

log := appctx.GetLogger(ctx)
if s.isSharedFolder(ctx, p) || s.isShareName(ctx, p) {
	log.Debug().Msgf("path:%s points to shared folder or share name", p)
	err := errtypes.PermissionDenied("gateway: cannot upload to share folder or share name: path=" + p)
	log.Err(err).Msg("gateway: error downloading")
	return &gateway.InitiateFileDownloadResponse{
		Status: status.NewInvalidArg(ctx, "path points to share folder or share name"),
	}, nil

}

if s.isShareChild(ctx, p) {

isSharedFolder returns false that is ok but isShareName returns true.
But even if isShareName would return false, isShareChild would return false, preventing to download the file.

@C0rby I understand the problem now. You're trying to mount single file shares and the current checks enforce that only folders are allowed. Can you update your code to make file sharing optional rather than enabled by default? A config option will do.

Ok got it. My PR works with folder shares now only.
I reverted the changes in storageprovider.go.

Accepting and listing the shares work with this PR. I opened a new issue for downloading the shared files. owncloud/ocis-reva#359 That is not implemented here.