feat(sharereview): expose tables(table/view/context) shares to share-review apps via OCP\Share\ShareReview

Implement IShareReviewSource listing all tables(table/view/context) shares
with their capabilities mapped to ShareReviewPermission entries,
gate deletions behind the ShareReviewAccessCheckEvent authorization
check including revocation of linked uploaded-files shares, and register
the source via RegisterShareReviewSourceEvent.

Assisted-by: Claude Code:claude-fable-5
Signed-off-by: Andy Scherzinger <info@andy-scherzinger.de>

Author: AndyScherzinger

lib/AppInfo/Application.php

@@ -34,6 +34,7 @@
 use OCA\Tables\Search\SearchTablesProvider;
 use OCA\Tables\Service\Support\AuditLogServiceInterface;
 use OCA\Tables\Service\Support\DefaultAuditLogService;
+use OCA\Tables\ShareReview\ShareReviewListener;
 use OCA\Tables\UserMigration\TablesMigrator;
 use OCP\AppFramework\App;
 use OCP\AppFramework\Bootstrap\IBootContext;
@@ -44,6 +45,7 @@
 use OCP\Collaboration\Resources\LoadAdditionalScriptsEvent;
 use OCP\DB\Events\AddMissingIndicesEvent;
 use OCP\Group\Events\GroupDeletedEvent;
+use OCP\Share\ShareReview\RegisterShareReviewSourceEvent;
 use OCP\User\Events\BeforeUserDeletedEvent;
 use OCP\User\Events\UserDeletedEvent;
 use Psr\Container\ContainerInterface;
@@ -84,6 +86,7 @@ public function register(IRegistrationContext $context): void {
 
 		$context->registerEventListener(BeforeUserDeletedEvent::class, UserDeletedListener::class);
 		$context->registerEventListener(DatasourceEvent::class, AnalyticsDatasourceListener::class);
+		$context->registerEventListener(RegisterShareReviewSourceEvent::class, ShareReviewListener::class);
 		$context->registerEventListener(RenderReferenceEvent::class, TablesReferenceListener::class);
 		$context->registerEventListener(BeforeTemplateRenderedEvent::class, BeforeTemplateRenderedListener::class);
 		$context->registerEventListener(LoadAdditionalScriptsEvent::class, LoadAdditionalListener::class);

lib/Db/ContextMapper.php

@@ -279,6 +279,33 @@ public function findAllContainingNode(int $nodeType, int $nodeId, string $userId
 		return $resultEntities;
 	}
 
+	/**
+	 * Fetch a map of id → name for the given context IDs.
+	 *
+	 * @param int[] $ids
+	 * @return array<int, string>
+	 * @throws Exception
+	 */
+	public function findIdToNameMap(array $ids): array {
+		if ($ids === []) {
+			return [];
+		}
+		$qb = $this->db->getQueryBuilder();
+		$qb->select('id', 'name')
+			->from($this->table)
+			->where($qb->expr()->in('id', $qb->createParameter('ids')));
+		$map = [];
+		foreach (array_chunk($ids, 1_000) as $chunk) {
+			$qb->setParameter('ids', $chunk, IQueryBuilder::PARAM_INT_ARRAY);
+			$result = $qb->executeQuery();
+			foreach ($result->fetchAll() as $row) {
+				$map[(int)$row['id']] = (string)$row['name'];
+			}
+			$result->closeCursor();
+		}
+		return $map;
+	}
+
 	protected function applyOwnedOrSharedQuery(IQueryBuilder $qb, string $userId): void {
 		$sharedToConditions = $qb->expr()->orX();
 

lib/Db/ShareMapper.php

@@ -191,6 +191,16 @@ public function findAllSharesForNodeTo(string $nodeType, int $nodeId, string $re
 		return $this->findEntities($qb);
 	}
 
+	/**
+	 * @throws Exception
+	 */
+	public function deleteById(int $id): bool {
+		$qb = $this->db->getQueryBuilder();
+		$qb->delete($this->table)
+			->where($qb->expr()->eq('id', $qb->createNamedParameter($id, IQueryBuilder::PARAM_INT)));
+		return $qb->executeStatement() > 0;
+	}
+
 	/**
 	 * @param int $nodeId
 	 * @param string $nodeType
@@ -236,6 +246,28 @@ public function findAllSharesForTablesAndContexts(array $tableIds, array $contex
 		return $this->findEntities($qb);
 	}
 
+	/**
+	 * Return all shares as raw associative arrays, ordered by id.
+	 *
+	 * @return list<array<string, mixed>>
+	 * @throws Exception
+	 */
+	public function findAllRaw(): array {
+		$qb = $this->db->getQueryBuilder();
+		$qb->select(
+			'id', 'sender', 'receiver', 'receiver_type', 'node_id', 'node_type',
+			'token', 'password',
+			'permission_read', 'permission_create', 'permission_update',
+			'permission_delete', 'permission_manage',
+			'created_at', 'last_edit_at'
+		)->from($this->table)
+			->orderBy('id', 'ASC');
+		$result = $qb->executeQuery();
+		$rows = $result->fetchAll();
+		$result->closeCursor();
+		return $rows;
+	}
+
 	/**
 	 * @throws Exception
 	 */

lib/Db/TableMapper.php

@@ -176,4 +176,31 @@ public function insert(Entity $entity): Table {
 	public function getDbConnection() {
 		return $this->db;
 	}
+
+	/**
+	 * Fetch a map of id → title for the given table IDs.
+	 *
+	 * @param int[] $ids
+	 * @return array<int, string>
+	 * @throws Exception
+	 */
+	public function findIdToTitleMap(array $ids): array {
+		if ($ids === []) {
+			return [];
+		}
+		$qb = $this->db->getQueryBuilder();
+		$qb->select('id', 'title')
+			->from($this->table)
+			->where($qb->expr()->in('id', $qb->createParameter('ids')));
+		$map = [];
+		foreach (array_chunk($ids, 1_000) as $chunk) {
+			$qb->setParameter('ids', $chunk, IQueryBuilder::PARAM_INT_ARRAY);
+			$result = $qb->executeQuery();
+			foreach ($result->fetchAll() as $row) {
+				$map[(int)$row['id']] = (string)$row['title'];
+			}
+			$result->closeCursor();
+		}
+		return $map;
+	}
 }

lib/Db/ViewMapper.php

@@ -178,4 +178,31 @@ public function search(?string $term = null, ?string $userId = null, ?int $limit
 
 		return $this->findEntities($qb);
 	}
+
+	/**
+	 * Fetch a map of id → title for the given view IDs.
+	 *
+	 * @param int[] $ids
+	 * @return array<int, string>
+	 * @throws Exception
+	 */
+	public function findIdToTitleMap(array $ids): array {
+		if ($ids === []) {
+			return [];
+		}
+		$qb = $this->db->getQueryBuilder();
+		$qb->select('id', 'title')
+			->from($this->table)
+			->where($qb->expr()->in('id', $qb->createParameter('ids')));
+		$map = [];
+		foreach (array_chunk($ids, 1_000) as $chunk) {
+			$qb->setParameter('ids', $chunk, IQueryBuilder::PARAM_INT_ARRAY);
+			$result = $qb->executeQuery();
+			foreach ($result->fetchAll() as $row) {
+				$map[(int)$row['id']] = (string)$row['title'];
+			}
+			$result->closeCursor();
+		}
+		return $map;
+	}
 }

lib/Service/ShareService.php

@@ -755,6 +755,24 @@ private function addReceiverDisplayNames(array $shares): array {
 		return $shares;
 	}
 
+	/**
+	 * Delete a share on behalf of a trusted share-review operation.
+	 *
+	 * PERMISSION_MANAGE is intentionally not checked. The caller must verify
+	 * operator access via ShareReviewAccessCheckEvent before invoking this
+	 * method. All other side effects are preserved so the deletion is auditable.
+	 *
+	 * @throws \OCP\AppFramework\Db\DoesNotExistException if $id does not exist
+	 * @throws Exception on database failure
+	 */
+	public function deleteForShareReview(int $id): void {
+		$share = $this->mapper->find($id);
+		$this->mapper->delete($share);
+		if ($share->getNodeType() === 'context') {
+			$this->contextNavigationMapper->deleteByShareId($share->getId());
+		}
+	}
+
 	public function deleteAllForTable(Table $table):void {
 		try {
 			$this->mapper->deleteByNode($table->getId(), 'table');

lib/ShareReview/ShareReviewListener.php

@@ -0,0 +1,27 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: 2026 Nextcloud GmbH and Nextcloud contributors
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace OCA\Tables\ShareReview;
+
+use OCP\EventDispatcher\Event;
+use OCP\EventDispatcher\IEventListener;
+use OCP\Share\ShareReview\RegisterShareReviewSourceEvent;
+
+/** @template-implements IEventListener<RegisterShareReviewSourceEvent> */
+class ShareReviewListener implements IEventListener {
+	public function __construct() {
+	}
+
+	public function handle(Event $event): void {
+		if (!$event instanceof RegisterShareReviewSourceEvent) {
+			return;
+		}
+		$event->registerSource(ShareReviewSource::class);
+	}
+}