{"action":"closed","issue":{"url":"https://api.github.com/repos/haiwen/seafile/issues/853","repository_url":"https://api.github.com/repos/haiwen/seafile","labels_url":"https://api.github.com/repos/haiwen/seafile/issues/853/labels{/name}","comments_url":"https://api.github.com/repos/haiwen/seafile/issues/853/comments","events_url":"https://api.github.com/repos/haiwen/seafile/issues/853/events","html_url":"https://github.com/haiwen/seafile/issues/853","id":42830304,"number":853,"title":"shared read only library - user can create share link","user":{"login":"vibe-x","id":1497705,"avatar_url":"https://avatars.githubusercontent.com/u/1497705?v=3","gravatar_id":"","url":"https://api.github.com/users/vibe-x","html_url":"https://github.com/vibe-x","followers_url":"https://api.github.com/users/vibe-x/followers","following_url":"https://api.github.com/users/vibe-x/following{/other_user}","gists_url":"https://api.github.com/users/vibe-x/gists{/gist_id}","starred_url":"https://api.github.com/users/vibe-x/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/vibe-x/subscriptions","organizations_url":"https://api.github.com/users/vibe-x/orgs","repos_url":"https://api.github.com/users/vibe-x/repos","events_url":"https://api.github.com/users/vibe-x/events{/privacy}","received_events_url":"https://api.github.com/users/vibe-x/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/haiwen/seafile/labels/wontfix","name":"wontfix","color":"ffffff"}],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":7,"created_at":"2014-09-15T23:29:06Z","updated_at":"2016-02-09T20:54:08Z","closed_at":"2016-02-09T20:54:08Z","body":"I don't know if this is a bug, or a feature, but i shared a library and the read only user was able to create a share link. Maybe this should be changed? If a user has no write permission, he should not be able to create a public share link.\r\n\r\nCan anyone reproduce this?"}}