Navigate Folders Without Escaping the Configured Connection Root

This article shows how to open folders and move upward within the authorized tree while QCSB enforces the exact connection root as the hard top boundary.

Safe navigation

  1. Click a folder row to open it; only that panel reloads through AJAX.
  2. Use the parent/up control to move toward the configured root.
  3. When the panel reaches the connection root, QCSB stops there. The parent of the root is not a valid QCSB destination.
  4. If Allow access to subdirectories is disabled, folder descent is restricted according to that connection policy.
  5. Do not interpret a readable URL/path label as authority; QCSB resolves and checks the provider object/root server-side.

How to do it

  1. Open the File Workspace and the storage panel you are authorized to browse.
  2. Click a folder to open it; QCSB refreshes that panel and keeps the resulting location inside the configured connection root.
  3. Use the panel’s upward/breadcrumb navigation to return toward the root.
  4. At the exact configured root, confirm there is no control or crafted relative path that exposes the parent directory.
  5. If users genuinely need another parent/sibling area, create a separate administrator Storage Connection to that exact root instead of broadening the existing boundary.

Verify the result

  • Test Connection succeeds.
  • The displayed/usable root is exactly the intended root and no parent folder is reachable.
  • A normal authorized user can perform only the operations intended for that connection/Workspace role.

Important limits and mistakes to avoid

  • Never broaden a connection root merely to work around a permission or provider error; fix the actual root/credential/hosting problem.

Troubleshooting

  • If the provider is unreachable, test the connection in Administrator before troubleshooting the Workspace UI.
  • If a file action fails, retry with one small test item and read Transfer Details or the operation toast before changing global settings.
  • Keep passwords, OAuth secrets/tokens, private keys, and unrestricted private paths out of public screenshots and support posts.

Community Discussion

For practical QCSB workflows and discussion with other Joomla site owners, visit the QC Storage Bridge Community. For private support, bug reports, account-specific entitlement issues, or feature requests, use the QuantaCade support system.