Web UI: hide /.trash from the file browser (Deleted files has its own view) #75

New issue

Closed

opened 2026-07-30 03:29:32 +00:00 by Cordy · 0 comments

Cordy commented

2026-07-30 03:29:32 +00:00

Owner

Dogfood finding (Nikola, 2026-07-30): .trash/ shows up as an ordinary folder in Personal.

Why it appears: the trash decorator hides /.trash from non-admins only, and admins are unscoped — so an admin's Personal view is the backend root, .trash included. Correct at the storage layer (admins need raw access for "empty trash" and recovery), wrong as UX: trash has a dedicated Deleted files sidebar view, and browsing the raw entries — opaque <id>.data / <id>.meta pairs — is never what someone wants from the file list.

Fix in the web UI: filter the .trash entry out of directory listings and search results. Raw access stays available over the admin API/WebDAV for the operator paths that need it, and the Deleted files view is unaffected.

Dogfood finding (Nikola, 2026-07-30): `.trash/` shows up as an ordinary folder in Personal. Why it appears: the trash decorator hides `/.trash` from **non-admins** only, and admins are unscoped — so an admin's Personal view is the backend root, `.trash` included. Correct at the storage layer (admins need raw access for "empty trash" and recovery), wrong as UX: trash has a dedicated **Deleted files** sidebar view, and browsing the raw entries — opaque `<id>.data` / `<id>.meta` pairs — is never what someone wants from the file list. Fix in the web UI: filter the `.trash` entry out of directory listings and search results. Raw access stays available over the admin API/WebDAV for the operator paths that need it, and the Deleted files view is unaffected.