Non-admin users should only be able to grant permissions they have when sharing

• Type: Bug
• Status: Closed
• Resolution: Won't Fix
• Affects Version/s: Master
• Fix Version/s: Master
• Component/s: Sharing
• Labels:
  • 7.2-must
• Fix Priority: 4

Steps to reproduce:

1. Add a user (site member)
2. Add a document
3. Share a document with user (View only), making sure Allow the document to be shared with other users. is checked
4. Log in as site member
5. Go to the sharing modal for the document

Expected result:
User is only able to share document with View permissions. The other two options are disabled.

Actual result:
User can choose between View and Comments permissions to share.

Reproduced on:
Tomcat 9.0.17 + MySQL 5.7.
Portal master 8686a0769e574ca304d9662f04a484a3976b4462