Access controls and permissions
Securely sharing and collaborating on documents requires
strong access control mechanisms. Nextcloud features a variety
of sharing mechanisms and associated control solutions like
ACLs and sharing permissions.
The basic sharing model in Nextcloud follows a flat model where users are in control of the sharing. Any file or folder can be individually shared and access permissions can be configured. New files show up in the home of users whom you share with. They can rename these folders if they like, or put them where they want to optimize their own productivity.
Administrators control these capabilities and can set a variety of permissions by default.
File locking helps users prevent conflicts with colleagues who are trying to edit the same files. While office documents and notes can be edited in real time in the browser, some files have to be downloaded to make changes. Lock the file and collisions are avoided! Other users can easily contact you in chat or by a comment to ask what is going on.
Collaborating in a team benefits from having a single, canonical folder structure available. Groupfolders provide administrator-defined shared folders with support for full ACLs. These are inherited by default, can be overridden and control can be given to group administrators to configure them.