diff --git a/CHANGELOG.md b/CHANGELOG.md
index 4fc3001a0..fc8afa6b0 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -13,9 +13,10 @@ The format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and
 
 ### Fixed
 
-- A member of a group a secret is shared with can now change it for everyone it is shared with, as the owner and write-grade members can. Their change only reached their own copy, so the owner and the other recipients kept the old value. Membership is checked at every save, so a member who left the group can't save for everyone, even when their copy was not removed. A use-only group share doesn't give this right, and a recipient of a direct share still changes only their own copy until they join such a group; then the right comes at once, with nothing to approve, and the owner is told unless the recipient can change it for everyone as a delegate or through a team folder they can write in. A member's sync through `PUT /api/v1/secrets/{id}/sync` needs a base version and every copy once, may not clear a copy's key and is checked again just before it writes, as a share-save is; otherwise it answers 409, or 403 when the source is a read-only copy from another organisation. (#1285)
+- A member of a group a secret is shared with can now change it for everyone it is shared with, as the owner and write-grade members can. Their change only reached their own copy, so the owner and the other recipients kept the old value. Membership is checked at every save, so a member who left the group can't save for everyone, even when their copy was not removed. A use-only group share doesn't give this right, and a recipient of a direct share can't change it until they join such a group; then the right comes at once, with nothing to approve, and the owner is told unless the recipient can change it for everyone as a delegate or through a team folder they can write in. A member's sync through `PUT /api/v1/secrets/{id}/sync` needs a base version and every copy once, may not clear a copy's key and is checked again just before it writes, as a share-save is; otherwise it answers 409, or 403 when the source is a read-only copy from another organisation. (#1285)
 - A save by a delegate, a team-folder writer or a group member through their copy now keeps the owner's previous value as a version of the owner's secret, so the owner can restore it. Only the writer's own copy kept a version, and a sync through `/sync` kept none at all. (#1285)
 - Editing a shared secret in the web app updates the recipients' copies again. The copies were never updated, a write-grade member who changed only the password cleared the login and additional fields on the source, and a failed update showed as saved. A failed save now shows an error and changes nothing. (sharing-atomic-share-save, #1253)
+- A recipient who may not write a shared secret can no longer change the value of their own copy, which split that copy from the source and every other copy. A copy shared directly, or through a group whose share is use-only or expired, or held as a team-folder Viewer, is view-only: the web app hides Edit, Restore and "Ask for new values" on it, keeps Save disabled in its edit dialog and says it is shared to view only, while moving, starring, archiving, tagging and deleting it still work. An offline edit of such a copy fails on replay with its values kept to copy or discard. `PUT /api/v1/secrets/{id}` and `POST /api/v1/versions/{id}/restore` refuse a change of the value, login or additional fields of a view-only copy with 428 `view_only`, and a change of only other fields, such as the folder, still saves. `PUT /api/v1/secrets/{id}/sync` refuses a received copy's id with 428 `forbidden`, since a sync starts from the source. Filling a secret request for a view-only copy is refused too; a refused fill, also one for a use-only copy or a read-only copy from another organisation, answers 428 instead of 500, stores nothing and leaves the request pending. (user-sharing, sharing-atomic-share-save, #1287)
 - A save through `PUT /api/v1/secrets/{id}`, a sync through `PUT /api/v1/secrets/{id}/sync` and a version restore could overwrite a change that landed between their read and their write, such as a share-save from the web app while the browser extension saved. They now read and write in one step, so a change that lands meanwhile is kept in the version history instead of overwritten. A save or sync with a base version answers 409, as do a sync or restore without one; a save without one, filling a secret request for a user's secret and setting an expiry try once more on the current version, and answer 409 only if it moves again. (sharing-atomic-share-save)
 - A delegate or write-grade member who saves a shared secret through their copy is now recorded in the audit log on the owner's secret too, with the holders that were left out. A restore made through a share-save is recorded as the version the client restored from. (sharing-atomic-share-save)
 - Revoking a partner share while an update to that partner was still being sent could leave the partner's copy in place: the slower update replaced the pending unshare, so the unshare was never sent. An update now never replaces a pending unshare. (sharing-atomic-share-save)
diff --git a/l10n/be.js b/l10n/be.js
index 3e5da9e50..b1ee1ba59 100644
--- a/l10n/be.js
+++ b/l10n/be.js
@@ -4,6 +4,8 @@ OC.L10N.register(
         "This secret is shared with many partner organisations, so the save is waiting for the lookup limit and then continues. Keep this dialog open.": "Гэты сакрэт абагулены з многімі партнёрскімі арганізацыямі, таму захаванне чакае ліміту запытаў і потым працягнецца. Не закрывайце гэта акно.",
         "Too many partner lookups. Nothing was saved; try again in a minute.": "Занадта шмат запытаў да партнёрскіх арганізацый. Нічога не захавана; паспрабуйце яшчэ раз праз хвіліну.",
         "This version cannot be restored to this secret. Nothing was saved.": "Гэтую версію нельга аднавіць для гэтага сакрэту. Нічога не захавана.",
+        "Shared with you to view only. Ask its owner for edit rights to change it.": "Абагулена з вамі толькі для прагляду. Каб змяніць, папрасіце ўладальніка даць правы на рэдагаванне.",
+        "Shared with you to view only. Nothing was saved; ask its owner for edit rights to change it.": "Абагулена з вамі толькі для прагляду. Нічога не захавана; каб змяніць, папрасіце ўладальніка даць правы на рэдагаванне.",
         "A partner organisation this secret is shared with cannot be reached ({partners}). Make the change again online, where you can save without them.": "Партнёрская арганізацыя, з якой абагулены гэты сакрэт, недаступная ({partners}). Зрабіце змену яшчэ раз онлайн, дзе можна захаваць без іх.",
         "Save without them": "Захаваць без іх",
         "Saved. Recipients at partner organisations get this change when the owner next saves this secret.": "Захавана. Атрымальнікі ў партнёрскіх арганізацыях атрымаюць гэтую змену, калі ўладальнік наступным разам захавае гэты сакрэт.",
diff --git a/l10n/be.json b/l10n/be.json
index f28ba3323..4173ef788 100644
--- a/l10n/be.json
+++ b/l10n/be.json
@@ -3,6 +3,8 @@
         "This secret is shared with many partner organisations, so the save is waiting for the lookup limit and then continues. Keep this dialog open.": "Гэты сакрэт абагулены з многімі партнёрскімі арганізацыямі, таму захаванне чакае ліміту запытаў і потым працягнецца. Не закрывайце гэта акно.",
         "Too many partner lookups. Nothing was saved; try again in a minute.": "Занадта шмат запытаў да партнёрскіх арганізацый. Нічога не захавана; паспрабуйце яшчэ раз праз хвіліну.",
         "This version cannot be restored to this secret. Nothing was saved.": "Гэтую версію нельга аднавіць для гэтага сакрэту. Нічога не захавана.",
+        "Shared with you to view only. Ask its owner for edit rights to change it.": "Абагулена з вамі толькі для прагляду. Каб змяніць, папрасіце ўладальніка даць правы на рэдагаванне.",
+        "Shared with you to view only. Nothing was saved; ask its owner for edit rights to change it.": "Абагулена з вамі толькі для прагляду. Нічога не захавана; каб змяніць, папрасіце ўладальніка даць правы на рэдагаванне.",
         "A partner organisation this secret is shared with cannot be reached ({partners}). Make the change again online, where you can save without them.": "Партнёрская арганізацыя, з якой абагулены гэты сакрэт, недаступная ({partners}). Зрабіце змену яшчэ раз онлайн, дзе можна захаваць без іх.",
         "Save without them": "Захаваць без іх",
         "Saved. Recipients at partner organisations get this change when the owner next saves this secret.": "Захавана. Атрымальнікі ў партнёрскіх арганізацыях атрымаюць гэтую змену, калі ўладальнік наступным разам захавае гэты сакрэт.",
diff --git a/l10n/bg.js b/l10n/bg.js
index c66f97fea..05911d3d8 100644
--- a/l10n/bg.js
+++ b/l10n/bg.js
@@ -4,6 +4,8 @@ OC.L10N.register(
         "This secret is shared with many partner organisations, so the save is waiting for the lookup limit and then continues. Keep this dialog open.": "Тази тайна е споделена с много партньорски организации, затова запазването изчаква лимита на заявките и след това продължава. Не затваряйте този прозорец.",
         "Too many partner lookups. Nothing was saved; try again in a minute.": "Твърде много заявки към партньорски организации. Нищо не е запазено; опитайте отново след минута.",
         "This version cannot be restored to this secret. Nothing was saved.": "Тази версия не може да бъде възстановена за тази тайна. Нищо не е запазено.",
+        "Shared with you to view only. Ask its owner for edit rights to change it.": "Споделено с вас само за преглед. Помолете собственика за права за редактиране, за да го промените.",
+        "Shared with you to view only. Nothing was saved; ask its owner for edit rights to change it.": "Споделено с вас само за преглед. Нищо не е запазено; помолете собственика за права за редактиране, за да го промените.",
         "A partner organisation this secret is shared with cannot be reached ({partners}). Make the change again online, where you can save without them.": "Партньорска организация, с която е споделена тази тайна, е недостъпна ({partners}). Направете промяната отново онлайн, където можете да запазите без тях.",
         "Save without them": "Запазване без тях",
         "Saved. Recipients at partner organisations get this change when the owner next saves this secret.": "Запазено. Получателите в партньорски организации ще получат тази промяна, когато собственикът запази тази тайна следващия път.",
diff --git a/l10n/bg.json b/l10n/bg.json
index e7f00b5d5..2ed78c507 100644
--- a/l10n/bg.json
+++ b/l10n/bg.json
@@ -3,6 +3,8 @@
         "This secret is shared with many partner organisations, so the save is waiting for the lookup limit and then continues. Keep this dialog open.": "Тази тайна е споделена с много партньорски организации, затова запазването изчаква лимита на заявките и след това продължава. Не затваряйте този прозорец.",
         "Too many partner lookups. Nothing was saved; try again in a minute.": "Твърде много заявки към партньорски организации. Нищо не е запазено; опитайте отново след минута.",
         "This version cannot be restored to this secret. Nothing was saved.": "Тази версия не може да бъде възстановена за тази тайна. Нищо не е запазено.",
+        "Shared with you to view only. Ask its owner for edit rights to change it.": "Споделено с вас само за преглед. Помолете собственика за права за редактиране, за да го промените.",
+        "Shared with you to view only. Nothing was saved; ask its owner for edit rights to change it.": "Споделено с вас само за преглед. Нищо не е запазено; помолете собственика за права за редактиране, за да го промените.",
         "A partner organisation this secret is shared with cannot be reached ({partners}). Make the change again online, where you can save without them.": "Партньорска организация, с която е споделена тази тайна, е недостъпна ({partners}). Направете промяната отново онлайн, където можете да запазите без тях.",
         "Save without them": "Запазване без тях",
         "Saved. Recipients at partner organisations get this change when the owner next saves this secret.": "Запазено. Получателите в партньорски организации ще получат тази промяна, когато собственикът запази тази тайна следващия път.",
diff --git a/l10n/bs.js b/l10n/bs.js
index c86291493..ff073da0b 100644
--- a/l10n/bs.js
+++ b/l10n/bs.js
@@ -4,6 +4,8 @@ OC.L10N.register(
         "This secret is shared with many partner organisations, so the save is waiting for the lookup limit and then continues. Keep this dialog open.": "Ova tajna je podijeljena s mnogo partnerskih organizacija, pa čuvanje čeka na ograničenje upita i zatim se nastavlja. Ne zatvarajte ovaj prozor.",
         "Too many partner lookups. Nothing was saved; try again in a minute.": "Previše upita partnerskim organizacijama. Ništa nije sačuvano; pokušajte ponovo za minutu.",
         "This version cannot be restored to this secret. Nothing was saved.": "Ova verzija se ne može vratiti za ovu tajnu. Ništa nije sačuvano.",
+        "Shared with you to view only. Ask its owner for edit rights to change it.": "Podijeljeno s vama samo za pregled. Zatražite od vlasnika prava uređivanja da biste je promijenili.",
+        "Shared with you to view only. Nothing was saved; ask its owner for edit rights to change it.": "Podijeljeno s vama samo za pregled. Ništa nije sačuvano; zatražite od vlasnika prava uređivanja da biste je promijenili.",
         "A partner organisation this secret is shared with cannot be reached ({partners}). Make the change again online, where you can save without them.": "Partnerska organizacija s kojom se dijeli ova tajna nije dostupna ({partners}). Napravite promjenu ponovo dok ste na mreži, gdje je možete sačuvati bez njih.",
         "Save without them": "Sačuvaj bez njih",
         "Saved. Recipients at partner organisations get this change when the owner next saves this secret.": "Sačuvano. Primaoci u partnerskim organizacijama dobit će ovu promjenu kada vlasnik sljedeći put sačuva ovu tajnu.",
diff --git a/l10n/bs.json b/l10n/bs.json
index 4165cb384..826ad8858 100644
--- a/l10n/bs.json
+++ b/l10n/bs.json
@@ -3,6 +3,8 @@
         "This secret is shared with many partner organisations, so the save is waiting for the lookup limit and then continues. Keep this dialog open.": "Ova tajna je podijeljena s mnogo partnerskih organizacija, pa čuvanje čeka na ograničenje upita i zatim se nastavlja. Ne zatvarajte ovaj prozor.",
         "Too many partner lookups. Nothing was saved; try again in a minute.": "Previše upita partnerskim organizacijama. Ništa nije sačuvano; pokušajte ponovo za minutu.",
         "This version cannot be restored to this secret. Nothing was saved.": "Ova verzija se ne može vratiti za ovu tajnu. Ništa nije sačuvano.",
+        "Shared with you to view only. Ask its owner for edit rights to change it.": "Podijeljeno s vama samo za pregled. Zatražite od vlasnika prava uređivanja da biste je promijenili.",
+        "Shared with you to view only. Nothing was saved; ask its owner for edit rights to change it.": "Podijeljeno s vama samo za pregled. Ništa nije sačuvano; zatražite od vlasnika prava uređivanja da biste je promijenili.",
         "A partner organisation this secret is shared with cannot be reached ({partners}). Make the change again online, where you can save without them.": "Partnerska organizacija s kojom se dijeli ova tajna nije dostupna ({partners}). Napravite promjenu ponovo dok ste na mreži, gdje je možete sačuvati bez njih.",
         "Save without them": "Sačuvaj bez njih",
         "Saved. Recipients at partner organisations get this change when the owner next saves this secret.": "Sačuvano. Primaoci u partnerskim organizacijama dobit će ovu promjenu kada vlasnik sljedeći put sačuva ovu tajnu.",
diff --git a/l10n/ca.js b/l10n/ca.js
index 33bf6d047..685c232d3 100644
--- a/l10n/ca.js
+++ b/l10n/ca.js
@@ -4,6 +4,8 @@ OC.L10N.register(
         "This secret is shared with many partner organisations, so the save is waiting for the lookup limit and then continues. Keep this dialog open.": "Aquest secret es comparteix amb moltes organitzacions associades, així que el desament espera el límit de consultes i després continua. Mantén aquest diàleg obert.",
         "Too many partner lookups. Nothing was saved; try again in a minute.": "Massa consultes a organitzacions associades. No s'ha desat res; torna-ho a provar d'aquí a un minut.",
         "This version cannot be restored to this secret. Nothing was saved.": "Aquesta versió no es pot restaurar en aquest secret. No s'ha desat res.",
+        "Shared with you to view only. Ask its owner for edit rights to change it.": "Compartit amb tu només per veure'l. Demana al propietari permisos d'edició per canviar-lo.",
+        "Shared with you to view only. Nothing was saved; ask its owner for edit rights to change it.": "Compartit amb tu només per veure'l. No s'ha desat res; demana al propietari permisos d'edició per canviar-lo.",
         "A partner organisation this secret is shared with cannot be reached ({partners}). Make the change again online, where you can save without them.": "No es pot contactar amb una organització associada amb qui es comparteix aquest secret ({partners}). Torna a fer el canvi en línia, on pots desar sense ells.",
         "Save without them": "Desa sense ells",
         "Saved. Recipients at partner organisations get this change when the owner next saves this secret.": "Desat. Els destinataris d'organitzacions associades rebran aquest canvi quan el propietari torni a desar aquest secret.",
diff --git a/l10n/ca.json b/l10n/ca.json
index 38c61dc71..b9d301b80 100644
--- a/l10n/ca.json
+++ b/l10n/ca.json
@@ -3,6 +3,8 @@
         "This secret is shared with many partner organisations, so the save is waiting for the lookup limit and then continues. Keep this dialog open.": "Aquest secret es comparteix amb moltes organitzacions associades, així que el desament espera el límit de consultes i després continua. Mantén aquest diàleg obert.",
         "Too many partner lookups. Nothing was saved; try again in a minute.": "Massa consultes a organitzacions associades. No s'ha desat res; torna-ho a provar d'aquí a un minut.",
         "This version cannot be restored to this secret. Nothing was saved.": "Aquesta versió no es pot restaurar en aquest secret. No s'ha desat res.",
+        "Shared with you to view only. Ask its owner for edit rights to change it.": "Compartit amb tu només per veure'l. Demana al propietari permisos d'edició per canviar-lo.",
+        "Shared with you to view only. Nothing was saved; ask its owner for edit rights to change it.": "Compartit amb tu només per veure'l. No s'ha desat res; demana al propietari permisos d'edició per canviar-lo.",
         "A partner organisation this secret is shared with cannot be reached ({partners}). Make the change again online, where you can save without them.": "No es pot contactar amb una organització associada amb qui es comparteix aquest secret ({partners}). Torna a fer el canvi en línia, on pots desar sense ells.",
         "Save without them": "Desa sense ells",
         "Saved. Recipients at partner organisations get this change when the owner next saves this secret.": "Desat. Els destinataris d'organitzacions associades rebran aquest canvi quan el propietari torni a desar aquest secret.",
diff --git a/l10n/cs.js b/l10n/cs.js
index c58b881cf..89af5da06 100644
--- a/l10n/cs.js
+++ b/l10n/cs.js
@@ -4,6 +4,8 @@ OC.L10N.register(
         "This secret is shared with many partner organisations, so the save is waiting for the lookup limit and then continues. Keep this dialog open.": "Toto tajemství je sdíleno s mnoha partnerskými organizacemi, proto ukládání čeká na limit dotazů a poté pokračuje. Nechte toto okno otevřené.",
         "Too many partner lookups. Nothing was saved; try again in a minute.": "Příliš mnoho dotazů na partnerské organizace. Nic nebylo uloženo; zkuste to znovu za minutu.",
         "This version cannot be restored to this secret. Nothing was saved.": "Tuto verzi nelze u tohoto tajemství obnovit. Nic nebylo uloženo.",
+        "Shared with you to view only. Ask its owner for edit rights to change it.": "Sdíleno s vámi pouze pro zobrazení. Chcete-li ho změnit, požádejte vlastníka o oprávnění k úpravám.",
+        "Shared with you to view only. Nothing was saved; ask its owner for edit rights to change it.": "Sdíleno s vámi pouze pro zobrazení. Nic nebylo uloženo; chcete-li ho změnit, požádejte vlastníka o oprávnění k úpravám.",
         "A partner organisation this secret is shared with cannot be reached ({partners}). Make the change again online, where you can save without them.": "Partnerská organizace, se kterou je toto tajemství sdíleno, není dostupná ({partners}). Proveďte změnu znovu online, kde ji můžete uložit bez ní.",
         "Save without them": "Uložit bez nich",
         "Saved. Recipients at partner organisations get this change when the owner next saves this secret.": "Uloženo. Příjemci v partnerských organizacích dostanou tuto změnu, až vlastník příště uloží toto tajemství.",
diff --git a/l10n/cs.json b/l10n/cs.json
index cda8b965f..717f5df05 100644
--- a/l10n/cs.json
+++ b/l10n/cs.json
@@ -3,6 +3,8 @@
         "This secret is shared with many partner organisations, so the save is waiting for the lookup limit and then continues. Keep this dialog open.": "Toto tajemství je sdíleno s mnoha partnerskými organizacemi, proto ukládání čeká na limit dotazů a poté pokračuje. Nechte toto okno otevřené.",
         "Too many partner lookups. Nothing was saved; try again in a minute.": "Příliš mnoho dotazů na partnerské organizace. Nic nebylo uloženo; zkuste to znovu za minutu.",
         "This version cannot be restored to this secret. Nothing was saved.": "Tuto verzi nelze u tohoto tajemství obnovit. Nic nebylo uloženo.",
+        "Shared with you to view only. Ask its owner for edit rights to change it.": "Sdíleno s vámi pouze pro zobrazení. Chcete-li ho změnit, požádejte vlastníka o oprávnění k úpravám.",
+        "Shared with you to view only. Nothing was saved; ask its owner for edit rights to change it.": "Sdíleno s vámi pouze pro zobrazení. Nic nebylo uloženo; chcete-li ho změnit, požádejte vlastníka o oprávnění k úpravám.",
         "A partner organisation this secret is shared with cannot be reached ({partners}). Make the change again online, where you can save without them.": "Partnerská organizace, se kterou je toto tajemství sdíleno, není dostupná ({partners}). Proveďte změnu znovu online, kde ji můžete uložit bez ní.",
         "Save without them": "Uložit bez nich",
         "Saved. Recipients at partner organisations get this change when the owner next saves this secret.": "Uloženo. Příjemci v partnerských organizacích dostanou tuto změnu, až vlastník příště uloží toto tajemství.",
diff --git a/l10n/da.js b/l10n/da.js
index ced9c1301..6c990e314 100644
--- a/l10n/da.js
+++ b/l10n/da.js
@@ -4,6 +4,8 @@ OC.L10N.register(
         "This secret is shared with many partner organisations, so the save is waiting for the lookup limit and then continues. Keep this dialog open.": "Denne hemmelighed er delt med mange partnerorganisationer, så gemningen venter på opslagsgrænsen og fortsætter derefter. Hold denne dialog åben.",
         "Too many partner lookups. Nothing was saved; try again in a minute.": "For mange opslag hos partnerorganisationer. Intet blev gemt; prøv igen om et minut.",
         "This version cannot be restored to this secret. Nothing was saved.": "Denne version kan ikke gendannes for denne hemmelighed. Intet blev gemt.",
+        "Shared with you to view only. Ask its owner for edit rights to change it.": "Delt med dig kun til visning. Bed ejeren om redigeringsrettigheder for at ændre den.",
+        "Shared with you to view only. Nothing was saved; ask its owner for edit rights to change it.": "Delt med dig kun til visning. Intet blev gemt; bed ejeren om redigeringsrettigheder for at ændre den.",
         "A partner organisation this secret is shared with cannot be reached ({partners}). Make the change again online, where you can save without them.": "En partnerorganisation, som denne hemmelighed er delt med, kan ikke nås ({partners}). Foretag ændringen igen online, hvor du kan gemme uden dem.",
         "Save without them": "Gem uden dem",
         "Saved. Recipients at partner organisations get this change when the owner next saves this secret.": "Gemt. Modtagere hos partnerorganisationer får denne ændring, næste gang ejeren gemmer denne hemmelighed.",
diff --git a/l10n/da.json b/l10n/da.json
index c8053f330..e78123d87 100644
--- a/l10n/da.json
+++ b/l10n/da.json
@@ -3,6 +3,8 @@
         "This secret is shared with many partner organisations, so the save is waiting for the lookup limit and then continues. Keep this dialog open.": "Denne hemmelighed er delt med mange partnerorganisationer, så gemningen venter på opslagsgrænsen og fortsætter derefter. Hold denne dialog åben.",
         "Too many partner lookups. Nothing was saved; try again in a minute.": "For mange opslag hos partnerorganisationer. Intet blev gemt; prøv igen om et minut.",
         "This version cannot be restored to this secret. Nothing was saved.": "Denne version kan ikke gendannes for denne hemmelighed. Intet blev gemt.",
+        "Shared with you to view only. Ask its owner for edit rights to change it.": "Delt med dig kun til visning. Bed ejeren om redigeringsrettigheder for at ændre den.",
+        "Shared with you to view only. Nothing was saved; ask its owner for edit rights to change it.": "Delt med dig kun til visning. Intet blev gemt; bed ejeren om redigeringsrettigheder for at ændre den.",
         "A partner organisation this secret is shared with cannot be reached ({partners}). Make the change again online, where you can save without them.": "En partnerorganisation, som denne hemmelighed er delt med, kan ikke nås ({partners}). Foretag ændringen igen online, hvor du kan gemme uden dem.",
         "Save without them": "Gem uden dem",
         "Saved. Recipients at partner organisations get this change when the owner next saves this secret.": "Gemt. Modtagere hos partnerorganisationer får denne ændring, næste gang ejeren gemmer denne hemmelighed.",
diff --git a/l10n/de.js b/l10n/de.js
index 0e92588e8..13fec0b67 100644
--- a/l10n/de.js
+++ b/l10n/de.js
@@ -4,6 +4,8 @@ OC.L10N.register(
         "This secret is shared with many partner organisations, so the save is waiting for the lookup limit and then continues. Keep this dialog open.": "Dieses Geheimnis ist mit vielen Partnerorganisationen geteilt, daher wartet das Speichern auf das Abfragelimit und wird dann fortgesetzt. Lassen Sie diesen Dialog geöffnet.",
         "Too many partner lookups. Nothing was saved; try again in a minute.": "Zu viele Abfragen bei Partnerorganisationen. Es wurde nichts gespeichert; versuchen Sie es in einer Minute erneut.",
         "This version cannot be restored to this secret. Nothing was saved.": "Diese Version kann für dieses Geheimnis nicht wiederhergestellt werden. Es wurde nichts gespeichert.",
+        "Shared with you to view only. Ask its owner for edit rights to change it.": "Nur zum Ansehen mit Ihnen geteilt. Bitten Sie den Eigentümer um Bearbeitungsrechte, um es zu ändern.",
+        "Shared with you to view only. Nothing was saved; ask its owner for edit rights to change it.": "Nur zum Ansehen mit Ihnen geteilt. Es wurde nichts gespeichert; bitten Sie den Eigentümer um Bearbeitungsrechte, um es zu ändern.",
         "A partner organisation this secret is shared with cannot be reached ({partners}). Make the change again online, where you can save without them.": "Eine Partnerorganisation, mit der dieses Geheimnis geteilt ist, ist nicht erreichbar ({partners}). Nehmen Sie die Änderung online erneut vor; dort können Sie ohne sie speichern.",
         "Save without them": "Ohne sie speichern",
         "Saved. Recipients at partner organisations get this change when the owner next saves this secret.": "Gespeichert. Empfänger bei Partnerorganisationen erhalten diese Änderung, wenn der Eigentümer dieses Geheimnis das nächste Mal speichert.",
diff --git a/l10n/de.json b/l10n/de.json
index 427e9aebc..b5bcd272d 100644
--- a/l10n/de.json
+++ b/l10n/de.json
@@ -3,6 +3,8 @@
         "This secret is shared with many partner organisations, so the save is waiting for the lookup limit and then continues. Keep this dialog open.": "Dieses Geheimnis ist mit vielen Partnerorganisationen geteilt, daher wartet das Speichern auf das Abfragelimit und wird dann fortgesetzt. Lassen Sie diesen Dialog geöffnet.",
         "Too many partner lookups. Nothing was saved; try again in a minute.": "Zu viele Abfragen bei Partnerorganisationen. Es wurde nichts gespeichert; versuchen Sie es in einer Minute erneut.",
         "This version cannot be restored to this secret. Nothing was saved.": "Diese Version kann für dieses Geheimnis nicht wiederhergestellt werden. Es wurde nichts gespeichert.",
+        "Shared with you to view only. Ask its owner for edit rights to change it.": "Nur zum Ansehen mit Ihnen geteilt. Bitten Sie den Eigentümer um Bearbeitungsrechte, um es zu ändern.",
+        "Shared with you to view only. Nothing was saved; ask its owner for edit rights to change it.": "Nur zum Ansehen mit Ihnen geteilt. Es wurde nichts gespeichert; bitten Sie den Eigentümer um Bearbeitungsrechte, um es zu ändern.",
         "A partner organisation this secret is shared with cannot be reached ({partners}). Make the change again online, where you can save without them.": "Eine Partnerorganisation, mit der dieses Geheimnis geteilt ist, ist nicht erreichbar ({partners}). Nehmen Sie die Änderung online erneut vor; dort können Sie ohne sie speichern.",
         "Save without them": "Ohne sie speichern",
         "Saved. Recipients at partner organisations get this change when the owner next saves this secret.": "Gespeichert. Empfänger bei Partnerorganisationen erhalten diese Änderung, wenn der Eigentümer dieses Geheimnis das nächste Mal speichert.",
diff --git a/l10n/el.js b/l10n/el.js
index 296c7a11d..7f600b0b3 100644
--- a/l10n/el.js
+++ b/l10n/el.js
@@ -4,6 +4,8 @@ OC.L10N.register(
         "This secret is shared with many partner organisations, so the save is waiting for the lookup limit and then continues. Keep this dialog open.": "Αυτό το μυστικό είναι κοινόχρηστο με πολλούς συνεργαζόμενους οργανισμούς, οπότε η αποθήκευση περιμένει το όριο αναζητήσεων και μετά συνεχίζει. Κρατήστε αυτό το παράθυρο ανοιχτό.",
         "Too many partner lookups. Nothing was saved; try again in a minute.": "Πάρα πολλές αναζητήσεις σε συνεργαζόμενους οργανισμούς. Δεν αποθηκεύτηκε τίποτα· δοκιμάστε ξανά σε ένα λεπτό.",
         "This version cannot be restored to this secret. Nothing was saved.": "Αυτή η έκδοση δεν μπορεί να επαναφερθεί σε αυτό το μυστικό. Δεν αποθηκεύτηκε τίποτα.",
+        "Shared with you to view only. Ask its owner for edit rights to change it.": "Κοινοποιήθηκε σε εσάς μόνο για προβολή. Ζητήστε από τον κάτοχο δικαιώματα επεξεργασίας για να το αλλάξετε.",
+        "Shared with you to view only. Nothing was saved; ask its owner for edit rights to change it.": "Κοινοποιήθηκε σε εσάς μόνο για προβολή. Δεν αποθηκεύτηκε τίποτα· ζητήστε από τον κάτοχο δικαιώματα επεξεργασίας για να το αλλάξετε.",
         "A partner organisation this secret is shared with cannot be reached ({partners}). Make the change again online, where you can save without them.": "Ένας συνεργαζόμενος οργανισμός με τον οποίο είναι κοινόχρηστο αυτό το μυστικό δεν είναι προσβάσιμος ({partners}). Κάντε ξανά την αλλαγή ενώ είστε συνδεδεμένοι, όπου μπορείτε να αποθηκεύσετε χωρίς αυτούς.",
         "Save without them": "Αποθήκευση χωρίς αυτούς",
         "Saved. Recipients at partner organisations get this change when the owner next saves this secret.": "Αποθηκεύτηκε. Οι παραλήπτες σε συνεργαζόμενους οργανισμούς θα λάβουν αυτή την αλλαγή όταν ο κάτοχος αποθηκεύσει ξανά αυτό το μυστικό.",
diff --git a/l10n/el.json b/l10n/el.json
index 57dc27ee3..171f4cf17 100644
--- a/l10n/el.json
+++ b/l10n/el.json
@@ -3,6 +3,8 @@
         "This secret is shared with many partner organisations, so the save is waiting for the lookup limit and then continues. Keep this dialog open.": "Αυτό το μυστικό είναι κοινόχρηστο με πολλούς συνεργαζόμενους οργανισμούς, οπότε η αποθήκευση περιμένει το όριο αναζητήσεων και μετά συνεχίζει. Κρατήστε αυτό το παράθυρο ανοιχτό.",
         "Too many partner lookups. Nothing was saved; try again in a minute.": "Πάρα πολλές αναζητήσεις σε συνεργαζόμενους οργανισμούς. Δεν αποθηκεύτηκε τίποτα· δοκιμάστε ξανά σε ένα λεπτό.",
         "This version cannot be restored to this secret. Nothing was saved.": "Αυτή η έκδοση δεν μπορεί να επαναφερθεί σε αυτό το μυστικό. Δεν αποθηκεύτηκε τίποτα.",
+        "Shared with you to view only. Ask its owner for edit rights to change it.": "Κοινοποιήθηκε σε εσάς μόνο για προβολή. Ζητήστε από τον κάτοχο δικαιώματα επεξεργασίας για να το αλλάξετε.",
+        "Shared with you to view only. Nothing was saved; ask its owner for edit rights to change it.": "Κοινοποιήθηκε σε εσάς μόνο για προβολή. Δεν αποθηκεύτηκε τίποτα· ζητήστε από τον κάτοχο δικαιώματα επεξεργασίας για να το αλλάξετε.",
         "A partner organisation this secret is shared with cannot be reached ({partners}). Make the change again online, where you can save without them.": "Ένας συνεργαζόμενος οργανισμός με τον οποίο είναι κοινόχρηστο αυτό το μυστικό δεν είναι προσβάσιμος ({partners}). Κάντε ξανά την αλλαγή ενώ είστε συνδεδεμένοι, όπου μπορείτε να αποθηκεύσετε χωρίς αυτούς.",
         "Save without them": "Αποθήκευση χωρίς αυτούς",
         "Saved. Recipients at partner organisations get this change when the owner next saves this secret.": "Αποθηκεύτηκε. Οι παραλήπτες σε συνεργαζόμενους οργανισμούς θα λάβουν αυτή την αλλαγή όταν ο κάτοχος αποθηκεύσει ξανά αυτό το μυστικό.",
diff --git a/l10n/en.js b/l10n/en.js
index 07ee52ab8..70e3540f0 100644
--- a/l10n/en.js
+++ b/l10n/en.js
@@ -1679,7 +1679,9 @@ OC.L10N.register(
         "This secret was changed elsewhere after you opened it. Nothing was saved; open it again and redo your change.": "This secret was changed elsewhere after you opened it. Nothing was saved; open it again and redo your change.",
         "You are not allowed to save this change for everyone this secret is shared with. Nothing was saved.": "You are not allowed to save this change for everyone this secret is shared with. Nothing was saved.",
         "A partner organisation this secret is shared with cannot be reached ({partners}). Make the change again online, where you can save without them.": "A partner organisation this secret is shared with cannot be reached ({partners}). Make the change again online, where you can save without them.",
-        "This version cannot be restored to this secret. Nothing was saved.": "This version cannot be restored to this secret. Nothing was saved."
+        "This version cannot be restored to this secret. Nothing was saved.": "This version cannot be restored to this secret. Nothing was saved.",
+        "Shared with you to view only. Ask its owner for edit rights to change it.": "Shared with you to view only. Ask its owner for edit rights to change it.",
+        "Shared with you to view only. Nothing was saved; ask its owner for edit rights to change it.": "Shared with you to view only. Nothing was saved; ask its owner for edit rights to change it."
     },
     "nplurals=2; plural=(n != 1);"
 )
diff --git a/l10n/en.json b/l10n/en.json
index e4aafbe9c..82e1dcf54 100644
--- a/l10n/en.json
+++ b/l10n/en.json
@@ -1753,7 +1753,9 @@
         "This secret was changed elsewhere after you opened it. Nothing was saved; open it again and redo your change.": "This secret was changed elsewhere after you opened it. Nothing was saved; open it again and redo your change.",
         "You are not allowed to save this change for everyone this secret is shared with. Nothing was saved.": "You are not allowed to save this change for everyone this secret is shared with. Nothing was saved.",
         "A partner organisation this secret is shared with cannot be reached ({partners}). Make the change again online, where you can save without them.": "A partner organisation this secret is shared with cannot be reached ({partners}). Make the change again online, where you can save without them.",
-        "This version cannot be restored to this secret. Nothing was saved.": "This version cannot be restored to this secret. Nothing was saved."
+        "This version cannot be restored to this secret. Nothing was saved.": "This version cannot be restored to this secret. Nothing was saved.",
+        "Shared with you to view only. Ask its owner for edit rights to change it.": "Shared with you to view only. Ask its owner for edit rights to change it.",
+        "Shared with you to view only. Nothing was saved; ask its owner for edit rights to change it.": "Shared with you to view only. Nothing was saved; ask its owner for edit rights to change it."
     },
     "plurals": "",
     "pluralForm": "nplurals=2; plural=(n != 1);"
diff --git a/l10n/es.js b/l10n/es.js
index ae17156d9..deab05735 100644
--- a/l10n/es.js
+++ b/l10n/es.js
@@ -4,6 +4,8 @@ OC.L10N.register(
         "This secret is shared with many partner organisations, so the save is waiting for the lookup limit and then continues. Keep this dialog open.": "Este secreto se comparte con muchas organizaciones asociadas, así que el guardado espera al límite de consultas y después continúa. Mantén este diálogo abierto.",
         "Too many partner lookups. Nothing was saved; try again in a minute.": "Demasiadas consultas a organizaciones asociadas. No se ha guardado nada; inténtalo de nuevo en un minuto.",
         "This version cannot be restored to this secret. Nothing was saved.": "Esta versión no se puede restaurar en este secreto. No se ha guardado nada.",
+        "Shared with you to view only. Ask its owner for edit rights to change it.": "Compartido contigo solo para verlo. Pide al propietario permisos de edición para cambiarlo.",
+        "Shared with you to view only. Nothing was saved; ask its owner for edit rights to change it.": "Compartido contigo solo para verlo. No se ha guardado nada; pide al propietario permisos de edición para cambiarlo.",
         "A partner organisation this secret is shared with cannot be reached ({partners}). Make the change again online, where you can save without them.": "No se puede contactar con una organización asociada con la que se comparte este secreto ({partners}). Vuelve a hacer el cambio en línea, donde puedes guardar sin ellos.",
         "Save without them": "Guardar sin ellos",
         "Saved. Recipients at partner organisations get this change when the owner next saves this secret.": "Guardado. Los destinatarios de organizaciones asociadas recibirán este cambio cuando el propietario vuelva a guardar este secreto.",
diff --git a/l10n/es.json b/l10n/es.json
index 34766ed91..a45019e91 100644
--- a/l10n/es.json
+++ b/l10n/es.json
@@ -3,6 +3,8 @@
         "This secret is shared with many partner organisations, so the save is waiting for the lookup limit and then continues. Keep this dialog open.": "Este secreto se comparte con muchas organizaciones asociadas, así que el guardado espera al límite de consultas y después continúa. Mantén este diálogo abierto.",
         "Too many partner lookups. Nothing was saved; try again in a minute.": "Demasiadas consultas a organizaciones asociadas. No se ha guardado nada; inténtalo de nuevo en un minuto.",
         "This version cannot be restored to this secret. Nothing was saved.": "Esta versión no se puede restaurar en este secreto. No se ha guardado nada.",
+        "Shared with you to view only. Ask its owner for edit rights to change it.": "Compartido contigo solo para verlo. Pide al propietario permisos de edición para cambiarlo.",
+        "Shared with you to view only. Nothing was saved; ask its owner for edit rights to change it.": "Compartido contigo solo para verlo. No se ha guardado nada; pide al propietario permisos de edición para cambiarlo.",
         "A partner organisation this secret is shared with cannot be reached ({partners}). Make the change again online, where you can save without them.": "No se puede contactar con una organización asociada con la que se comparte este secreto ({partners}). Vuelve a hacer el cambio en línea, donde puedes guardar sin ellos.",
         "Save without them": "Guardar sin ellos",
         "Saved. Recipients at partner organisations get this change when the owner next saves this secret.": "Guardado. Los destinatarios de organizaciones asociadas recibirán este cambio cuando el propietario vuelva a guardar este secreto.",
diff --git a/l10n/et.js b/l10n/et.js
index a20108cbb..a315d9dc2 100644
--- a/l10n/et.js
+++ b/l10n/et.js
@@ -4,6 +4,8 @@ OC.L10N.register(
         "This secret is shared with many partner organisations, so the save is waiting for the lookup limit and then continues. Keep this dialog open.": "See saladus on jagatud paljude partnerorganisatsioonidega, seega salvestamine ootab päringupiirangu möödumist ja jätkub siis. Hoia see aken avatuna.",
         "Too many partner lookups. Nothing was saved; try again in a minute.": "Liiga palju partnerorganisatsioonide päringuid. Midagi ei salvestatud; proovi minuti pärast uuesti.",
         "This version cannot be restored to this secret. Nothing was saved.": "Seda versiooni ei saa selle saladuse jaoks taastada. Midagi ei salvestatud.",
+        "Shared with you to view only. Ask its owner for edit rights to change it.": "Sinuga jagatud ainult vaatamiseks. Selle muutmiseks küsi omanikult muutmisõigust.",
+        "Shared with you to view only. Nothing was saved; ask its owner for edit rights to change it.": "Sinuga jagatud ainult vaatamiseks. Midagi ei salvestatud; selle muutmiseks küsi omanikult muutmisõigust.",
         "A partner organisation this secret is shared with cannot be reached ({partners}). Make the change again online, where you can save without them.": "Partnerorganisatsioon, kellega see saladus on jagatud, ei ole kättesaadav ({partners}). Tee muudatus uuesti võrgus olles, kus saad salvestada ilma nendeta.",
         "Save without them": "Salvesta ilma nendeta",
         "Saved. Recipients at partner organisations get this change when the owner next saves this secret.": "Salvestatud. Partnerorganisatsioonide saajad saavad selle muudatuse, kui omanik selle saladuse järgmine kord salvestab.",
diff --git a/l10n/et.json b/l10n/et.json
index 16fc5af67..f9a0c9d72 100644
--- a/l10n/et.json
+++ b/l10n/et.json
@@ -3,6 +3,8 @@
         "This secret is shared with many partner organisations, so the save is waiting for the lookup limit and then continues. Keep this dialog open.": "See saladus on jagatud paljude partnerorganisatsioonidega, seega salvestamine ootab päringupiirangu möödumist ja jätkub siis. Hoia see aken avatuna.",
         "Too many partner lookups. Nothing was saved; try again in a minute.": "Liiga palju partnerorganisatsioonide päringuid. Midagi ei salvestatud; proovi minuti pärast uuesti.",
         "This version cannot be restored to this secret. Nothing was saved.": "Seda versiooni ei saa selle saladuse jaoks taastada. Midagi ei salvestatud.",
+        "Shared with you to view only. Ask its owner for edit rights to change it.": "Sinuga jagatud ainult vaatamiseks. Selle muutmiseks küsi omanikult muutmisõigust.",
+        "Shared with you to view only. Nothing was saved; ask its owner for edit rights to change it.": "Sinuga jagatud ainult vaatamiseks. Midagi ei salvestatud; selle muutmiseks küsi omanikult muutmisõigust.",
         "A partner organisation this secret is shared with cannot be reached ({partners}). Make the change again online, where you can save without them.": "Partnerorganisatsioon, kellega see saladus on jagatud, ei ole kättesaadav ({partners}). Tee muudatus uuesti võrgus olles, kus saad salvestada ilma nendeta.",
         "Save without them": "Salvesta ilma nendeta",
         "Saved. Recipients at partner organisations get this change when the owner next saves this secret.": "Salvestatud. Partnerorganisatsioonide saajad saavad selle muudatuse, kui omanik selle saladuse järgmine kord salvestab.",
diff --git a/l10n/fi.js b/l10n/fi.js
index 4e3ff6304..db094decd 100644
--- a/l10n/fi.js
+++ b/l10n/fi.js
@@ -4,6 +4,8 @@ OC.L10N.register(
         "This secret is shared with many partner organisations, so the save is waiting for the lookup limit and then continues. Keep this dialog open.": "Tämä salaisuus on jaettu monen kumppaniorganisaation kanssa, joten tallennus odottaa hakurajaa ja jatkuu sitten. Pidä tämä ikkuna auki.",
         "Too many partner lookups. Nothing was saved; try again in a minute.": "Liian monta hakua kumppaniorganisaatioilta. Mitään ei tallennettu; yritä uudelleen minuutin kuluttua.",
         "This version cannot be restored to this secret. Nothing was saved.": "Tätä versiota ei voi palauttaa tähän salaisuuteen. Mitään ei tallennettu.",
+        "Shared with you to view only. Ask its owner for edit rights to change it.": "Jaettu sinulle vain katseltavaksi. Pyydä omistajalta muokkausoikeudet, jos haluat muuttaa sitä.",
+        "Shared with you to view only. Nothing was saved; ask its owner for edit rights to change it.": "Jaettu sinulle vain katseltavaksi. Mitään ei tallennettu; pyydä omistajalta muokkausoikeudet, jos haluat muuttaa sitä.",
         "A partner organisation this secret is shared with cannot be reached ({partners}). Make the change again online, where you can save without them.": "Kumppaniorganisaatiota, jonka kanssa tämä salaisuus on jaettu, ei tavoiteta ({partners}). Tee muutos uudelleen verkossa, jossa voit tallentaa ilman heitä.",
         "Save without them": "Tallenna ilman heitä",
         "Saved. Recipients at partner organisations get this change when the owner next saves this secret.": "Tallennettu. Kumppaniorganisaatioiden vastaanottajat saavat tämän muutoksen, kun omistaja seuraavan kerran tallentaa tämän salaisuuden.",
diff --git a/l10n/fi.json b/l10n/fi.json
index d2f397886..1e221b5f8 100644
--- a/l10n/fi.json
+++ b/l10n/fi.json
@@ -3,6 +3,8 @@
         "This secret is shared with many partner organisations, so the save is waiting for the lookup limit and then continues. Keep this dialog open.": "Tämä salaisuus on jaettu monen kumppaniorganisaation kanssa, joten tallennus odottaa hakurajaa ja jatkuu sitten. Pidä tämä ikkuna auki.",
         "Too many partner lookups. Nothing was saved; try again in a minute.": "Liian monta hakua kumppaniorganisaatioilta. Mitään ei tallennettu; yritä uudelleen minuutin kuluttua.",
         "This version cannot be restored to this secret. Nothing was saved.": "Tätä versiota ei voi palauttaa tähän salaisuuteen. Mitään ei tallennettu.",
+        "Shared with you to view only. Ask its owner for edit rights to change it.": "Jaettu sinulle vain katseltavaksi. Pyydä omistajalta muokkausoikeudet, jos haluat muuttaa sitä.",
+        "Shared with you to view only. Nothing was saved; ask its owner for edit rights to change it.": "Jaettu sinulle vain katseltavaksi. Mitään ei tallennettu; pyydä omistajalta muokkausoikeudet, jos haluat muuttaa sitä.",
         "A partner organisation this secret is shared with cannot be reached ({partners}). Make the change again online, where you can save without them.": "Kumppaniorganisaatiota, jonka kanssa tämä salaisuus on jaettu, ei tavoiteta ({partners}). Tee muutos uudelleen verkossa, jossa voit tallentaa ilman heitä.",
         "Save without them": "Tallenna ilman heitä",
         "Saved. Recipients at partner organisations get this change when the owner next saves this secret.": "Tallennettu. Kumppaniorganisaatioiden vastaanottajat saavat tämän muutoksen, kun omistaja seuraavan kerran tallentaa tämän salaisuuden.",
diff --git a/l10n/fr.js b/l10n/fr.js
index b97dbc4b9..d5a0c9c96 100644
--- a/l10n/fr.js
+++ b/l10n/fr.js
@@ -4,6 +4,8 @@ OC.L10N.register(
         "This secret is shared with many partner organisations, so the save is waiting for the lookup limit and then continues. Keep this dialog open.": "Ce secret est partagé avec de nombreuses organisations partenaires, l'enregistrement attend donc la limite de recherches puis reprend. Gardez cette fenêtre ouverte.",
         "Too many partner lookups. Nothing was saved; try again in a minute.": "Trop de recherches auprès des organisations partenaires. Rien n'a été enregistré ; veuillez réessayer dans une minute.",
         "This version cannot be restored to this secret. Nothing was saved.": "Cette version ne peut pas être restaurée pour ce secret. Rien n'a été enregistré.",
+        "Shared with you to view only. Ask its owner for edit rights to change it.": "Partagé avec vous en lecture seule. Demandez au propriétaire des droits de modification pour le changer.",
+        "Shared with you to view only. Nothing was saved; ask its owner for edit rights to change it.": "Partagé avec vous en lecture seule. Rien n'a été enregistré ; demandez au propriétaire des droits de modification pour le changer.",
         "A partner organisation this secret is shared with cannot be reached ({partners}). Make the change again online, where you can save without them.": "Une organisation partenaire avec laquelle ce secret est partagé est injoignable ({partners}). Refaites la modification en ligne, où vous pouvez enregistrer sans elle.",
         "Save without them": "Enregistrer sans eux",
         "Saved. Recipients at partner organisations get this change when the owner next saves this secret.": "Enregistré. Les destinataires des organisations partenaires recevront cette modification lorsque le propriétaire enregistrera de nouveau ce secret.",
diff --git a/l10n/fr.json b/l10n/fr.json
index 2ddbc0da9..8d9485b06 100644
--- a/l10n/fr.json
+++ b/l10n/fr.json
@@ -3,6 +3,8 @@
         "This secret is shared with many partner organisations, so the save is waiting for the lookup limit and then continues. Keep this dialog open.": "Ce secret est partagé avec de nombreuses organisations partenaires, l'enregistrement attend donc la limite de recherches puis reprend. Gardez cette fenêtre ouverte.",
         "Too many partner lookups. Nothing was saved; try again in a minute.": "Trop de recherches auprès des organisations partenaires. Rien n'a été enregistré ; veuillez réessayer dans une minute.",
         "This version cannot be restored to this secret. Nothing was saved.": "Cette version ne peut pas être restaurée pour ce secret. Rien n'a été enregistré.",
+        "Shared with you to view only. Ask its owner for edit rights to change it.": "Partagé avec vous en lecture seule. Demandez au propriétaire des droits de modification pour le changer.",
+        "Shared with you to view only. Nothing was saved; ask its owner for edit rights to change it.": "Partagé avec vous en lecture seule. Rien n'a été enregistré ; demandez au propriétaire des droits de modification pour le changer.",
         "A partner organisation this secret is shared with cannot be reached ({partners}). Make the change again online, where you can save without them.": "Une organisation partenaire avec laquelle ce secret est partagé est injoignable ({partners}). Refaites la modification en ligne, où vous pouvez enregistrer sans elle.",
         "Save without them": "Enregistrer sans eux",
         "Saved. Recipients at partner organisations get this change when the owner next saves this secret.": "Enregistré. Les destinataires des organisations partenaires recevront cette modification lorsque le propriétaire enregistrera de nouveau ce secret.",
diff --git a/l10n/ga.js b/l10n/ga.js
index 9c310f6ac..886049d3b 100644
--- a/l10n/ga.js
+++ b/l10n/ga.js
@@ -4,6 +4,8 @@ OC.L10N.register(
         "This secret is shared with many partner organisations, so the save is waiting for the lookup limit and then continues. Keep this dialog open.": "Tá an rún seo comhroinnte le go leor eagraíochtaí comhpháirtíochta, mar sin tá an sábháil ag fanacht ar an teorainn cuardaigh agus leanfaidh sí ar aghaidh ansin. Coinnigh an fhuinneog seo oscailte.",
         "Too many partner lookups. Nothing was saved; try again in a minute.": "An iomarca cuardach ar eagraíochtaí comhpháirtíochta. Níor sábháladh aon rud; bain triail eile as i gceann nóiméid.",
         "This version cannot be restored to this secret. Nothing was saved.": "Ní féidir an leagan seo a athchóiriú don rún seo. Níor sábháladh aon rud.",
+        "Shared with you to view only. Ask its owner for edit rights to change it.": "Comhroinnte leat le féachaint air amháin. Iarr cearta eagarthóireachta ar an úinéir chun é a athrú.",
+        "Shared with you to view only. Nothing was saved; ask its owner for edit rights to change it.": "Comhroinnte leat le féachaint air amháin. Níor sábháladh aon rud; iarr cearta eagarthóireachta ar an úinéir chun é a athrú.",
         "A partner organisation this secret is shared with cannot be reached ({partners}). Make the change again online, where you can save without them.": "Ní féidir teagmháil a dhéanamh le heagraíocht chomhpháirtíochta a bhfuil an rún seo roinnte léi ({partners}). Déan an t-athrú arís ar líne, áit ar féidir leat sábháil gan iad.",
         "Save without them": "Sábháil gan iad",
         "Saved. Recipients at partner organisations get this change when the owner next saves this secret.": "Sábháilte. Gheobhaidh faighteoirí in eagraíochtaí comhpháirtíochta an t-athrú seo nuair a shábhálfaidh an t-úinéir an rún seo an chéad uair eile.",
diff --git a/l10n/ga.json b/l10n/ga.json
index 8e2409fe5..fcdd2c730 100644
--- a/l10n/ga.json
+++ b/l10n/ga.json
@@ -3,6 +3,8 @@
         "This secret is shared with many partner organisations, so the save is waiting for the lookup limit and then continues. Keep this dialog open.": "Tá an rún seo comhroinnte le go leor eagraíochtaí comhpháirtíochta, mar sin tá an sábháil ag fanacht ar an teorainn cuardaigh agus leanfaidh sí ar aghaidh ansin. Coinnigh an fhuinneog seo oscailte.",
         "Too many partner lookups. Nothing was saved; try again in a minute.": "An iomarca cuardach ar eagraíochtaí comhpháirtíochta. Níor sábháladh aon rud; bain triail eile as i gceann nóiméid.",
         "This version cannot be restored to this secret. Nothing was saved.": "Ní féidir an leagan seo a athchóiriú don rún seo. Níor sábháladh aon rud.",
+        "Shared with you to view only. Ask its owner for edit rights to change it.": "Comhroinnte leat le féachaint air amháin. Iarr cearta eagarthóireachta ar an úinéir chun é a athrú.",
+        "Shared with you to view only. Nothing was saved; ask its owner for edit rights to change it.": "Comhroinnte leat le féachaint air amháin. Níor sábháladh aon rud; iarr cearta eagarthóireachta ar an úinéir chun é a athrú.",
         "A partner organisation this secret is shared with cannot be reached ({partners}). Make the change again online, where you can save without them.": "Ní féidir teagmháil a dhéanamh le heagraíocht chomhpháirtíochta a bhfuil an rún seo roinnte léi ({partners}). Déan an t-athrú arís ar líne, áit ar féidir leat sábháil gan iad.",
         "Save without them": "Sábháil gan iad",
         "Saved. Recipients at partner organisations get this change when the owner next saves this secret.": "Sábháilte. Gheobhaidh faighteoirí in eagraíochtaí comhpháirtíochta an t-athrú seo nuair a shábhálfaidh an t-úinéir an rún seo an chéad uair eile.",
diff --git a/l10n/hr.js b/l10n/hr.js
index 1e4cb951f..9e0c9c42d 100644
--- a/l10n/hr.js
+++ b/l10n/hr.js
@@ -4,6 +4,8 @@ OC.L10N.register(
         "This secret is shared with many partner organisations, so the save is waiting for the lookup limit and then continues. Keep this dialog open.": "Ova tajna dijeli se s mnogo partnerskih organizacija, pa spremanje čeka ograničenje upita i zatim se nastavlja. Ne zatvarajte ovaj prozor.",
         "Too many partner lookups. Nothing was saved; try again in a minute.": "Previše upita partnerskim organizacijama. Ništa nije spremljeno; pokušajte ponovno za minutu.",
         "This version cannot be restored to this secret. Nothing was saved.": "Ova verzija ne može se vratiti za ovu tajnu. Ništa nije spremljeno.",
+        "Shared with you to view only. Ask its owner for edit rights to change it.": "Podijeljeno s vama samo za pregled. Zatražite od vlasnika prava uređivanja kako biste je promijenili.",
+        "Shared with you to view only. Nothing was saved; ask its owner for edit rights to change it.": "Podijeljeno s vama samo za pregled. Ništa nije spremljeno; zatražite od vlasnika prava uređivanja kako biste je promijenili.",
         "A partner organisation this secret is shared with cannot be reached ({partners}). Make the change again online, where you can save without them.": "Partnerska organizacija s kojom se dijeli ova tajna nije dostupna ({partners}). Ponovite promjenu na mreži, gdje je možete spremiti bez njih.",
         "Save without them": "Spremi bez njih",
         "Saved. Recipients at partner organisations get this change when the owner next saves this secret.": "Spremljeno. Primatelji u partnerskim organizacijama dobit će ovu promjenu kada vlasnik sljedeći put spremi ovu tajnu.",
diff --git a/l10n/hr.json b/l10n/hr.json
index e888d51d6..3973121db 100644
--- a/l10n/hr.json
+++ b/l10n/hr.json
@@ -3,6 +3,8 @@
         "This secret is shared with many partner organisations, so the save is waiting for the lookup limit and then continues. Keep this dialog open.": "Ova tajna dijeli se s mnogo partnerskih organizacija, pa spremanje čeka ograničenje upita i zatim se nastavlja. Ne zatvarajte ovaj prozor.",
         "Too many partner lookups. Nothing was saved; try again in a minute.": "Previše upita partnerskim organizacijama. Ništa nije spremljeno; pokušajte ponovno za minutu.",
         "This version cannot be restored to this secret. Nothing was saved.": "Ova verzija ne može se vratiti za ovu tajnu. Ništa nije spremljeno.",
+        "Shared with you to view only. Ask its owner for edit rights to change it.": "Podijeljeno s vama samo za pregled. Zatražite od vlasnika prava uređivanja kako biste je promijenili.",
+        "Shared with you to view only. Nothing was saved; ask its owner for edit rights to change it.": "Podijeljeno s vama samo za pregled. Ništa nije spremljeno; zatražite od vlasnika prava uređivanja kako biste je promijenili.",
         "A partner organisation this secret is shared with cannot be reached ({partners}). Make the change again online, where you can save without them.": "Partnerska organizacija s kojom se dijeli ova tajna nije dostupna ({partners}). Ponovite promjenu na mreži, gdje je možete spremiti bez njih.",
         "Save without them": "Spremi bez njih",
         "Saved. Recipients at partner organisations get this change when the owner next saves this secret.": "Spremljeno. Primatelji u partnerskim organizacijama dobit će ovu promjenu kada vlasnik sljedeći put spremi ovu tajnu.",
diff --git a/l10n/hu.js b/l10n/hu.js
index 948e1e35d..727f67351 100644
--- a/l10n/hu.js
+++ b/l10n/hu.js
@@ -4,6 +4,8 @@ OC.L10N.register(
         "This secret is shared with many partner organisations, so the save is waiting for the lookup limit and then continues. Keep this dialog open.": "Ez a titok sok partnerszervezettel van megosztva, ezért a mentés kivárja a lekérdezési korlátot, majd folytatódik. Hagyja nyitva ezt az ablakot.",
         "Too many partner lookups. Nothing was saved; try again in a minute.": "Túl sok lekérdezés a partnerszervezetek felé. Semmi sem lett mentve; próbálja újra egy perc múlva.",
         "This version cannot be restored to this secret. Nothing was saved.": "Ez a verzió nem állítható vissza ehhez a titokhoz. Semmi sem lett mentve.",
+        "Shared with you to view only. Ask its owner for edit rights to change it.": "Csak megtekintésre osztották meg Önnel. A módosításhoz kérjen szerkesztési jogot a tulajdonostól.",
+        "Shared with you to view only. Nothing was saved; ask its owner for edit rights to change it.": "Csak megtekintésre osztották meg Önnel. Semmi sem lett mentve; a módosításhoz kérjen szerkesztési jogot a tulajdonostól.",
         "A partner organisation this secret is shared with cannot be reached ({partners}). Make the change again online, where you can save without them.": "Egy partnerszervezet, amellyel ez a titok meg van osztva, nem érhető el ({partners}). Végezze el újra a módosítást online, ahol nélkülük is mentheti.",
         "Save without them": "Mentés nélkülük",
         "Saved. Recipients at partner organisations get this change when the owner next saves this secret.": "Mentve. A partnerszervezeteknél lévő címzettek akkor kapják meg ezt a módosítást, amikor a tulajdonos legközelebb menti ezt a titkot.",
diff --git a/l10n/hu.json b/l10n/hu.json
index 662f33872..183e1c239 100644
--- a/l10n/hu.json
+++ b/l10n/hu.json
@@ -3,6 +3,8 @@
         "This secret is shared with many partner organisations, so the save is waiting for the lookup limit and then continues. Keep this dialog open.": "Ez a titok sok partnerszervezettel van megosztva, ezért a mentés kivárja a lekérdezési korlátot, majd folytatódik. Hagyja nyitva ezt az ablakot.",
         "Too many partner lookups. Nothing was saved; try again in a minute.": "Túl sok lekérdezés a partnerszervezetek felé. Semmi sem lett mentve; próbálja újra egy perc múlva.",
         "This version cannot be restored to this secret. Nothing was saved.": "Ez a verzió nem állítható vissza ehhez a titokhoz. Semmi sem lett mentve.",
+        "Shared with you to view only. Ask its owner for edit rights to change it.": "Csak megtekintésre osztották meg Önnel. A módosításhoz kérjen szerkesztési jogot a tulajdonostól.",
+        "Shared with you to view only. Nothing was saved; ask its owner for edit rights to change it.": "Csak megtekintésre osztották meg Önnel. Semmi sem lett mentve; a módosításhoz kérjen szerkesztési jogot a tulajdonostól.",
         "A partner organisation this secret is shared with cannot be reached ({partners}). Make the change again online, where you can save without them.": "Egy partnerszervezet, amellyel ez a titok meg van osztva, nem érhető el ({partners}). Végezze el újra a módosítást online, ahol nélkülük is mentheti.",
         "Save without them": "Mentés nélkülük",
         "Saved. Recipients at partner organisations get this change when the owner next saves this secret.": "Mentve. A partnerszervezeteknél lévő címzettek akkor kapják meg ezt a módosítást, amikor a tulajdonos legközelebb menti ezt a titkot.",
diff --git a/l10n/is.js b/l10n/is.js
index 85af0cca5..551ccfe4c 100644
--- a/l10n/is.js
+++ b/l10n/is.js
@@ -4,6 +4,8 @@ OC.L10N.register(
         "This secret is shared with many partner organisations, so the save is waiting for the lookup limit and then continues. Keep this dialog open.": "Þetta leyndarmál er deilt með mörgum samstarfsaðilum, svo vistunin bíður eftir uppflettimörkunum og heldur svo áfram. Hafðu þennan glugga opinn.",
         "Too many partner lookups. Nothing was saved; try again in a minute.": "Of margar uppflettingar hjá samstarfsaðilum. Ekkert var vistað; reyndu aftur eftir eina mínútu.",
         "This version cannot be restored to this secret. Nothing was saved.": "Ekki er hægt að endurheimta þessa útgáfu fyrir þetta leyndarmál. Ekkert var vistað.",
+        "Shared with you to view only. Ask its owner for edit rights to change it.": "Deilt með þér eingöngu til skoðunar. Biddu eigandann um breytingaheimild til að breyta því.",
+        "Shared with you to view only. Nothing was saved; ask its owner for edit rights to change it.": "Deilt með þér eingöngu til skoðunar. Ekkert var vistað; biddu eigandann um breytingaheimild til að breyta því.",
         "A partner organisation this secret is shared with cannot be reached ({partners}). Make the change again online, where you can save without them.": "Ekki næst í samstarfsfyrirtæki sem þetta leyndarmál er samnýtt með ({partners}). Gerðu breytinguna aftur á netinu, þar sem þú getur vistað án þeirra.",
         "Save without them": "Vista án þeirra",
         "Saved. Recipients at partner organisations get this change when the owner next saves this secret.": "Vistað. Viðtakendur hjá samstarfsfyrirtækjum fá þessa breytingu þegar eigandinn vistar þetta leyndarmál næst.",
diff --git a/l10n/is.json b/l10n/is.json
index c9963e85f..69cf816bf 100644
--- a/l10n/is.json
+++ b/l10n/is.json
@@ -3,6 +3,8 @@
         "This secret is shared with many partner organisations, so the save is waiting for the lookup limit and then continues. Keep this dialog open.": "Þetta leyndarmál er deilt með mörgum samstarfsaðilum, svo vistunin bíður eftir uppflettimörkunum og heldur svo áfram. Hafðu þennan glugga opinn.",
         "Too many partner lookups. Nothing was saved; try again in a minute.": "Of margar uppflettingar hjá samstarfsaðilum. Ekkert var vistað; reyndu aftur eftir eina mínútu.",
         "This version cannot be restored to this secret. Nothing was saved.": "Ekki er hægt að endurheimta þessa útgáfu fyrir þetta leyndarmál. Ekkert var vistað.",
+        "Shared with you to view only. Ask its owner for edit rights to change it.": "Deilt með þér eingöngu til skoðunar. Biddu eigandann um breytingaheimild til að breyta því.",
+        "Shared with you to view only. Nothing was saved; ask its owner for edit rights to change it.": "Deilt með þér eingöngu til skoðunar. Ekkert var vistað; biddu eigandann um breytingaheimild til að breyta því.",
         "A partner organisation this secret is shared with cannot be reached ({partners}). Make the change again online, where you can save without them.": "Ekki næst í samstarfsfyrirtæki sem þetta leyndarmál er samnýtt með ({partners}). Gerðu breytinguna aftur á netinu, þar sem þú getur vistað án þeirra.",
         "Save without them": "Vista án þeirra",
         "Saved. Recipients at partner organisations get this change when the owner next saves this secret.": "Vistað. Viðtakendur hjá samstarfsfyrirtækjum fá þessa breytingu þegar eigandinn vistar þetta leyndarmál næst.",
diff --git a/l10n/it.js b/l10n/it.js
index 3da2623d3..605f756ff 100644
--- a/l10n/it.js
+++ b/l10n/it.js
@@ -4,6 +4,8 @@ OC.L10N.register(
         "This secret is shared with many partner organisations, so the save is waiting for the lookup limit and then continues. Keep this dialog open.": "Questo segreto è condiviso con molte organizzazioni partner, quindi il salvataggio attende il limite di ricerche e poi prosegue. Tieni aperta questa finestra.",
         "Too many partner lookups. Nothing was saved; try again in a minute.": "Troppe ricerche presso le organizzazioni partner. Non è stato salvato nulla; riprova tra un minuto.",
         "This version cannot be restored to this secret. Nothing was saved.": "Questa versione non può essere ripristinata per questo segreto. Non è stato salvato nulla.",
+        "Shared with you to view only. Ask its owner for edit rights to change it.": "Condiviso con te in sola visualizzazione. Chiedi al proprietario i permessi di modifica per cambiarlo.",
+        "Shared with you to view only. Nothing was saved; ask its owner for edit rights to change it.": "Condiviso con te in sola visualizzazione. Non è stato salvato nulla; chiedi al proprietario i permessi di modifica per cambiarlo.",
         "A partner organisation this secret is shared with cannot be reached ({partners}). Make the change again online, where you can save without them.": "Un'organizzazione partner con cui è condiviso questo segreto non è raggiungibile ({partners}). Ripeti la modifica online, dove puoi salvare senza di loro.",
         "Save without them": "Salva senza di loro",
         "Saved. Recipients at partner organisations get this change when the owner next saves this secret.": "Salvato. I destinatari presso le organizzazioni partner riceveranno questa modifica quando il proprietario salverà di nuovo questo segreto.",
diff --git a/l10n/it.json b/l10n/it.json
index 44e2d5bde..ebd53e3ef 100644
--- a/l10n/it.json
+++ b/l10n/it.json
@@ -3,6 +3,8 @@
         "This secret is shared with many partner organisations, so the save is waiting for the lookup limit and then continues. Keep this dialog open.": "Questo segreto è condiviso con molte organizzazioni partner, quindi il salvataggio attende il limite di ricerche e poi prosegue. Tieni aperta questa finestra.",
         "Too many partner lookups. Nothing was saved; try again in a minute.": "Troppe ricerche presso le organizzazioni partner. Non è stato salvato nulla; riprova tra un minuto.",
         "This version cannot be restored to this secret. Nothing was saved.": "Questa versione non può essere ripristinata per questo segreto. Non è stato salvato nulla.",
+        "Shared with you to view only. Ask its owner for edit rights to change it.": "Condiviso con te in sola visualizzazione. Chiedi al proprietario i permessi di modifica per cambiarlo.",
+        "Shared with you to view only. Nothing was saved; ask its owner for edit rights to change it.": "Condiviso con te in sola visualizzazione. Non è stato salvato nulla; chiedi al proprietario i permessi di modifica per cambiarlo.",
         "A partner organisation this secret is shared with cannot be reached ({partners}). Make the change again online, where you can save without them.": "Un'organizzazione partner con cui è condiviso questo segreto non è raggiungibile ({partners}). Ripeti la modifica online, dove puoi salvare senza di loro.",
         "Save without them": "Salva senza di loro",
         "Saved. Recipients at partner organisations get this change when the owner next saves this secret.": "Salvato. I destinatari presso le organizzazioni partner riceveranno questa modifica quando il proprietario salverà di nuovo questo segreto.",
diff --git a/l10n/lb.js b/l10n/lb.js
index 464ced051..88e1fdcc9 100644
--- a/l10n/lb.js
+++ b/l10n/lb.js
@@ -4,6 +4,8 @@ OC.L10N.register(
         "This secret is shared with many partner organisations, so the save is waiting for the lookup limit and then continues. Keep this dialog open.": "Dëst Geheimnis ass mat ville Partnerorganisatiounen gedeelt, dofir waart d'Späicheren op d'Ufrolimit a geet duerno weider. Loosst dës Fënster op.",
         "Too many partner lookups. Nothing was saved; try again in a minute.": "Ze vill Ufroe bei Partnerorganisatiounen. Et gouf näischt gespäichert; probéiert an enger Minutt nach eng Kéier.",
         "This version cannot be restored to this secret. Nothing was saved.": "Dës Versioun kann net fir dëst Geheimnis restauréiert ginn. Et gouf näischt gespäichert.",
+        "Shared with you to view only. Ask its owner for edit rights to change it.": "Mat Iech nëmmen zum Ukucken gedeelt. Frot de Besëtzer no Ännerungsrechter, fir et z'änneren.",
+        "Shared with you to view only. Nothing was saved; ask its owner for edit rights to change it.": "Mat Iech nëmmen zum Ukucken gedeelt. Et gouf näischt gespäichert; frot de Besëtzer no Ännerungsrechter, fir et z'änneren.",
         "A partner organisation this secret is shared with cannot be reached ({partners}). Make the change again online, where you can save without them.": "Eng Partnerorganisatioun, mat där dëst Geheimnis gedeelt ass, ass net erreechbar ({partners}). Maacht d'Ännerung online nach eng Kéier; do kënnt Dir ouni si späicheren.",
         "Save without them": "Ouni si späicheren",
         "Saved. Recipients at partner organisations get this change when the owner next saves this secret.": "Gespäichert. Empfänger bei Partnerorganisatiounen kréien dës Ännerung, wann de Besëtzer dëst Geheimnis déi nächst Kéier späichert.",
diff --git a/l10n/lb.json b/l10n/lb.json
index 66ccaebbe..82c51e452 100644
--- a/l10n/lb.json
+++ b/l10n/lb.json
@@ -3,6 +3,8 @@
         "This secret is shared with many partner organisations, so the save is waiting for the lookup limit and then continues. Keep this dialog open.": "Dëst Geheimnis ass mat ville Partnerorganisatiounen gedeelt, dofir waart d'Späicheren op d'Ufrolimit a geet duerno weider. Loosst dës Fënster op.",
         "Too many partner lookups. Nothing was saved; try again in a minute.": "Ze vill Ufroe bei Partnerorganisatiounen. Et gouf näischt gespäichert; probéiert an enger Minutt nach eng Kéier.",
         "This version cannot be restored to this secret. Nothing was saved.": "Dës Versioun kann net fir dëst Geheimnis restauréiert ginn. Et gouf näischt gespäichert.",
+        "Shared with you to view only. Ask its owner for edit rights to change it.": "Mat Iech nëmmen zum Ukucken gedeelt. Frot de Besëtzer no Ännerungsrechter, fir et z'änneren.",
+        "Shared with you to view only. Nothing was saved; ask its owner for edit rights to change it.": "Mat Iech nëmmen zum Ukucken gedeelt. Et gouf näischt gespäichert; frot de Besëtzer no Ännerungsrechter, fir et z'änneren.",
         "A partner organisation this secret is shared with cannot be reached ({partners}). Make the change again online, where you can save without them.": "Eng Partnerorganisatioun, mat där dëst Geheimnis gedeelt ass, ass net erreechbar ({partners}). Maacht d'Ännerung online nach eng Kéier; do kënnt Dir ouni si späicheren.",
         "Save without them": "Ouni si späicheren",
         "Saved. Recipients at partner organisations get this change when the owner next saves this secret.": "Gespäichert. Empfänger bei Partnerorganisatiounen kréien dës Ännerung, wann de Besëtzer dëst Geheimnis déi nächst Kéier späichert.",
diff --git a/l10n/lt.js b/l10n/lt.js
index 3976d8159..39a291dcc 100644
--- a/l10n/lt.js
+++ b/l10n/lt.js
@@ -4,6 +4,8 @@ OC.L10N.register(
         "This secret is shared with many partner organisations, so the save is waiting for the lookup limit and then continues. Keep this dialog open.": "Ši paslaptis bendrinama su daug partnerių organizacijų, todėl išsaugojimas laukia užklausų ribos ir tada tęsiamas. Neuždarykite šio lango.",
         "Too many partner lookups. Nothing was saved; try again in a minute.": "Per daug užklausų partnerių organizacijoms. Niekas neišsaugota; bandykite dar kartą po minutės.",
         "This version cannot be restored to this secret. Nothing was saved.": "Šios versijos negalima atkurti šiai paslapčiai. Niekas neišsaugota.",
+        "Shared with you to view only. Ask its owner for edit rights to change it.": "Bendrinama su jumis tik peržiūrai. Norėdami pakeisti, paprašykite savininko redagavimo teisių.",
+        "Shared with you to view only. Nothing was saved; ask its owner for edit rights to change it.": "Bendrinama su jumis tik peržiūrai. Niekas neišsaugota; norėdami pakeisti, paprašykite savininko redagavimo teisių.",
         "A partner organisation this secret is shared with cannot be reached ({partners}). Make the change again online, where you can save without them.": "Partnerių organizacija, su kuria bendrinama ši paslaptis, nepasiekiama ({partners}). Pakartokite pakeitimą prisijungę, kur galite išsaugoti be jų.",
         "Save without them": "Išsaugoti be jų",
         "Saved. Recipients at partner organisations get this change when the owner next saves this secret.": "Išsaugota. Gavėjai partnerių organizacijose gaus šį pakeitimą, kai savininkas kitą kartą išsaugos šią paslaptį.",
diff --git a/l10n/lt.json b/l10n/lt.json
index 0635621f9..54e785b8d 100644
--- a/l10n/lt.json
+++ b/l10n/lt.json
@@ -3,6 +3,8 @@
         "This secret is shared with many partner organisations, so the save is waiting for the lookup limit and then continues. Keep this dialog open.": "Ši paslaptis bendrinama su daug partnerių organizacijų, todėl išsaugojimas laukia užklausų ribos ir tada tęsiamas. Neuždarykite šio lango.",
         "Too many partner lookups. Nothing was saved; try again in a minute.": "Per daug užklausų partnerių organizacijoms. Niekas neišsaugota; bandykite dar kartą po minutės.",
         "This version cannot be restored to this secret. Nothing was saved.": "Šios versijos negalima atkurti šiai paslapčiai. Niekas neišsaugota.",
+        "Shared with you to view only. Ask its owner for edit rights to change it.": "Bendrinama su jumis tik peržiūrai. Norėdami pakeisti, paprašykite savininko redagavimo teisių.",
+        "Shared with you to view only. Nothing was saved; ask its owner for edit rights to change it.": "Bendrinama su jumis tik peržiūrai. Niekas neišsaugota; norėdami pakeisti, paprašykite savininko redagavimo teisių.",
         "A partner organisation this secret is shared with cannot be reached ({partners}). Make the change again online, where you can save without them.": "Partnerių organizacija, su kuria bendrinama ši paslaptis, nepasiekiama ({partners}). Pakartokite pakeitimą prisijungę, kur galite išsaugoti be jų.",
         "Save without them": "Išsaugoti be jų",
         "Saved. Recipients at partner organisations get this change when the owner next saves this secret.": "Išsaugota. Gavėjai partnerių organizacijose gaus šį pakeitimą, kai savininkas kitą kartą išsaugos šią paslaptį.",
diff --git a/l10n/lv.js b/l10n/lv.js
index 2427bd25b..30b61ae4b 100644
--- a/l10n/lv.js
+++ b/l10n/lv.js
@@ -4,6 +4,8 @@ OC.L10N.register(
         "This secret is shared with many partner organisations, so the save is waiting for the lookup limit and then continues. Keep this dialog open.": "Šis noslēpums ir kopīgots ar daudzām partneru organizācijām, tāpēc saglabāšana gaida vaicājumu ierobežojumu un pēc tam turpinās. Neaizveriet šo logu.",
         "Too many partner lookups. Nothing was saved; try again in a minute.": "Pārāk daudz vaicājumu partneru organizācijām. Nekas netika saglabāts; mēģiniet vēlreiz pēc minūtes.",
         "This version cannot be restored to this secret. Nothing was saved.": "Šo versiju nevar atjaunot šim noslēpumam. Nekas netika saglabāts.",
+        "Shared with you to view only. Ask its owner for edit rights to change it.": "Kopīgots ar jums tikai skatīšanai. Lai to mainītu, lūdziet īpašniekam rediģēšanas tiesības.",
+        "Shared with you to view only. Nothing was saved; ask its owner for edit rights to change it.": "Kopīgots ar jums tikai skatīšanai. Nekas netika saglabāts; lai to mainītu, lūdziet īpašniekam rediģēšanas tiesības.",
         "A partner organisation this secret is shared with cannot be reached ({partners}). Make the change again online, where you can save without them.": "Partneru organizācija, ar kuru šis noslēpums ir koplietots, nav sasniedzama ({partners}). Veiciet izmaiņas vēlreiz tiešsaistē, kur varat saglabāt bez viņiem.",
         "Save without them": "Saglabāt bez viņiem",
         "Saved. Recipients at partner organisations get this change when the owner next saves this secret.": "Saglabāts. Saņēmēji partneru organizācijās saņems šīs izmaiņas, kad īpašnieks nākamreiz saglabās šo noslēpumu.",
diff --git a/l10n/lv.json b/l10n/lv.json
index d0e4384eb..7e572d029 100644
--- a/l10n/lv.json
+++ b/l10n/lv.json
@@ -3,6 +3,8 @@
         "This secret is shared with many partner organisations, so the save is waiting for the lookup limit and then continues. Keep this dialog open.": "Šis noslēpums ir kopīgots ar daudzām partneru organizācijām, tāpēc saglabāšana gaida vaicājumu ierobežojumu un pēc tam turpinās. Neaizveriet šo logu.",
         "Too many partner lookups. Nothing was saved; try again in a minute.": "Pārāk daudz vaicājumu partneru organizācijām. Nekas netika saglabāts; mēģiniet vēlreiz pēc minūtes.",
         "This version cannot be restored to this secret. Nothing was saved.": "Šo versiju nevar atjaunot šim noslēpumam. Nekas netika saglabāts.",
+        "Shared with you to view only. Ask its owner for edit rights to change it.": "Kopīgots ar jums tikai skatīšanai. Lai to mainītu, lūdziet īpašniekam rediģēšanas tiesības.",
+        "Shared with you to view only. Nothing was saved; ask its owner for edit rights to change it.": "Kopīgots ar jums tikai skatīšanai. Nekas netika saglabāts; lai to mainītu, lūdziet īpašniekam rediģēšanas tiesības.",
         "A partner organisation this secret is shared with cannot be reached ({partners}). Make the change again online, where you can save without them.": "Partneru organizācija, ar kuru šis noslēpums ir koplietots, nav sasniedzama ({partners}). Veiciet izmaiņas vēlreiz tiešsaistē, kur varat saglabāt bez viņiem.",
         "Save without them": "Saglabāt bez viņiem",
         "Saved. Recipients at partner organisations get this change when the owner next saves this secret.": "Saglabāts. Saņēmēji partneru organizācijās saņems šīs izmaiņas, kad īpašnieks nākamreiz saglabās šo noslēpumu.",
diff --git a/l10n/mk.js b/l10n/mk.js
index ee4a7a838..f5771bb8c 100644
--- a/l10n/mk.js
+++ b/l10n/mk.js
@@ -4,6 +4,8 @@ OC.L10N.register(
         "This secret is shared with many partner organisations, so the save is waiting for the lookup limit and then continues. Keep this dialog open.": "Оваа тајна е споделена со многу партнерски организации, па зачувувањето чека на ограничувањето на барањата и потоа продолжува. Не го затворајте овој прозорец.",
         "Too many partner lookups. Nothing was saved; try again in a minute.": "Премногу барања до партнерските организации. Ништо не е зачувано; обидете се повторно за една минута.",
         "This version cannot be restored to this secret. Nothing was saved.": "Оваа верзија не може да се врати за оваа тајна. Ништо не е зачувано.",
+        "Shared with you to view only. Ask its owner for edit rights to change it.": "Споделено со вас само за прегледување. Побарајте од сопственикот права за уредување за да ја промените.",
+        "Shared with you to view only. Nothing was saved; ask its owner for edit rights to change it.": "Споделено со вас само за прегледување. Ништо не е зачувано; побарајте од сопственикот права за уредување за да ја промените.",
         "A partner organisation this secret is shared with cannot be reached ({partners}). Make the change again online, where you can save without them.": "Партнерска организација со која е споделена оваа тајна не е достапна ({partners}). Направете ја промената повторно на интернет, каде што можете да зачувате без нив.",
         "Save without them": "Зачувај без нив",
         "Saved. Recipients at partner organisations get this change when the owner next saves this secret.": "Зачувано. Примачите во партнерските организации ќе ја добијат оваа промена кога сопственикот следниот пат ќе ја зачува оваа тајна.",
diff --git a/l10n/mk.json b/l10n/mk.json
index 0d9aa8dd0..80256eeab 100644
--- a/l10n/mk.json
+++ b/l10n/mk.json
@@ -3,6 +3,8 @@
         "This secret is shared with many partner organisations, so the save is waiting for the lookup limit and then continues. Keep this dialog open.": "Оваа тајна е споделена со многу партнерски организации, па зачувувањето чека на ограничувањето на барањата и потоа продолжува. Не го затворајте овој прозорец.",
         "Too many partner lookups. Nothing was saved; try again in a minute.": "Премногу барања до партнерските организации. Ништо не е зачувано; обидете се повторно за една минута.",
         "This version cannot be restored to this secret. Nothing was saved.": "Оваа верзија не може да се врати за оваа тајна. Ништо не е зачувано.",
+        "Shared with you to view only. Ask its owner for edit rights to change it.": "Споделено со вас само за прегледување. Побарајте од сопственикот права за уредување за да ја промените.",
+        "Shared with you to view only. Nothing was saved; ask its owner for edit rights to change it.": "Споделено со вас само за прегледување. Ништо не е зачувано; побарајте од сопственикот права за уредување за да ја промените.",
         "A partner organisation this secret is shared with cannot be reached ({partners}). Make the change again online, where you can save without them.": "Партнерска организација со која е споделена оваа тајна не е достапна ({partners}). Направете ја промената повторно на интернет, каде што можете да зачувате без нив.",
         "Save without them": "Зачувај без нив",
         "Saved. Recipients at partner organisations get this change when the owner next saves this secret.": "Зачувано. Примачите во партнерските организации ќе ја добијат оваа промена кога сопственикот следниот пат ќе ја зачува оваа тајна.",
diff --git a/l10n/mt.js b/l10n/mt.js
index c0aa30136..1aa67c203 100644
--- a/l10n/mt.js
+++ b/l10n/mt.js
@@ -4,6 +4,8 @@ OC.L10N.register(
         "This secret is shared with many partner organisations, so the save is waiting for the lookup limit and then continues. Keep this dialog open.": "Dan is-sigriet huwa kondiviż ma' ħafna organizzazzjonijiet sħab, għalhekk is-salvataġġ qed jistenna l-limitu tat-tfittxijiet u mbagħad ikompli. Żomm din it-tieqa miftuħa.",
         "Too many partner lookups. Nothing was saved; try again in a minute.": "Wisq tfittxijiet għand organizzazzjonijiet sħab. Ma ġie ssejvjat xejn; erġa' pprova wara minuta.",
         "This version cannot be restored to this secret. Nothing was saved.": "Din il-verżjoni ma tistax terġa' tiġi restawrata għal dan is-sigriet. Ma ġie ssejvjat xejn.",
+        "Shared with you to view only. Ask its owner for edit rights to change it.": "Maqsum miegħek biex tarah biss. Itlob lis-sid drittijiet ta' editjar biex tibdlu.",
+        "Shared with you to view only. Nothing was saved; ask its owner for edit rights to change it.": "Maqsum miegħek biex tarah biss. Ma ġie ssejvjat xejn; itlob lis-sid drittijiet ta' editjar biex tibdlu.",
         "A partner organisation this secret is shared with cannot be reached ({partners}). Make the change again online, where you can save without them.": "Organizzazzjoni sieħba li magħha huwa kondiviż dan is-sigriet ma tistax tintlaħaq ({partners}). Erġa' agħmel il-bidla online, fejn tista' tissejvja mingħajrhom.",
         "Save without them": "Issejvja mingħajrhom",
         "Saved. Recipients at partner organisations get this change when the owner next saves this secret.": "Issejvjat. Ir-riċevituri f'organizzazzjonijiet sħab jirċievu din il-bidla meta s-sid jerġa' jissejvja dan is-sigriet.",
diff --git a/l10n/mt.json b/l10n/mt.json
index d53712fa1..4c13284b5 100644
--- a/l10n/mt.json
+++ b/l10n/mt.json
@@ -3,6 +3,8 @@
         "This secret is shared with many partner organisations, so the save is waiting for the lookup limit and then continues. Keep this dialog open.": "Dan is-sigriet huwa kondiviż ma' ħafna organizzazzjonijiet sħab, għalhekk is-salvataġġ qed jistenna l-limitu tat-tfittxijiet u mbagħad ikompli. Żomm din it-tieqa miftuħa.",
         "Too many partner lookups. Nothing was saved; try again in a minute.": "Wisq tfittxijiet għand organizzazzjonijiet sħab. Ma ġie ssejvjat xejn; erġa' pprova wara minuta.",
         "This version cannot be restored to this secret. Nothing was saved.": "Din il-verżjoni ma tistax terġa' tiġi restawrata għal dan is-sigriet. Ma ġie ssejvjat xejn.",
+        "Shared with you to view only. Ask its owner for edit rights to change it.": "Maqsum miegħek biex tarah biss. Itlob lis-sid drittijiet ta' editjar biex tibdlu.",
+        "Shared with you to view only. Nothing was saved; ask its owner for edit rights to change it.": "Maqsum miegħek biex tarah biss. Ma ġie ssejvjat xejn; itlob lis-sid drittijiet ta' editjar biex tibdlu.",
         "A partner organisation this secret is shared with cannot be reached ({partners}). Make the change again online, where you can save without them.": "Organizzazzjoni sieħba li magħha huwa kondiviż dan is-sigriet ma tistax tintlaħaq ({partners}). Erġa' agħmel il-bidla online, fejn tista' tissejvja mingħajrhom.",
         "Save without them": "Issejvja mingħajrhom",
         "Saved. Recipients at partner organisations get this change when the owner next saves this secret.": "Issejvjat. Ir-riċevituri f'organizzazzjonijiet sħab jirċievu din il-bidla meta s-sid jerġa' jissejvja dan is-sigriet.",
diff --git a/l10n/nb.js b/l10n/nb.js
index 50c1d7c1c..51d99f7fa 100644
--- a/l10n/nb.js
+++ b/l10n/nb.js
@@ -4,6 +4,8 @@ OC.L10N.register(
         "This secret is shared with many partner organisations, so the save is waiting for the lookup limit and then continues. Keep this dialog open.": "Denne hemmeligheten er delt med mange partnerorganisasjoner, så lagringen venter på oppslagsgrensen og fortsetter deretter. Hold denne dialogen åpen.",
         "Too many partner lookups. Nothing was saved; try again in a minute.": "For mange oppslag hos partnerorganisasjoner. Ingenting ble lagret; prøv igjen om et minutt.",
         "This version cannot be restored to this secret. Nothing was saved.": "Denne versjonen kan ikke gjenopprettes for denne hemmeligheten. Ingenting ble lagret.",
+        "Shared with you to view only. Ask its owner for edit rights to change it.": "Delt med deg kun for visning. Be eieren om redigeringstilgang for å endre den.",
+        "Shared with you to view only. Nothing was saved; ask its owner for edit rights to change it.": "Delt med deg kun for visning. Ingenting ble lagret; be eieren om redigeringstilgang for å endre den.",
         "A partner organisation this secret is shared with cannot be reached ({partners}). Make the change again online, where you can save without them.": "En partnerorganisasjon som denne hemmeligheten er delt med, kan ikke nås ({partners}). Gjør endringen på nytt på nett, der du kan lagre uten dem.",
         "Save without them": "Lagre uten dem",
         "Saved. Recipients at partner organisations get this change when the owner next saves this secret.": "Lagret. Mottakere i partnerorganisasjoner får denne endringen neste gang eieren lagrer denne hemmeligheten.",
diff --git a/l10n/nb.json b/l10n/nb.json
index c6f3d99c4..d0eeb2419 100644
--- a/l10n/nb.json
+++ b/l10n/nb.json
@@ -3,6 +3,8 @@
         "This secret is shared with many partner organisations, so the save is waiting for the lookup limit and then continues. Keep this dialog open.": "Denne hemmeligheten er delt med mange partnerorganisasjoner, så lagringen venter på oppslagsgrensen og fortsetter deretter. Hold denne dialogen åpen.",
         "Too many partner lookups. Nothing was saved; try again in a minute.": "For mange oppslag hos partnerorganisasjoner. Ingenting ble lagret; prøv igjen om et minutt.",
         "This version cannot be restored to this secret. Nothing was saved.": "Denne versjonen kan ikke gjenopprettes for denne hemmeligheten. Ingenting ble lagret.",
+        "Shared with you to view only. Ask its owner for edit rights to change it.": "Delt med deg kun for visning. Be eieren om redigeringstilgang for å endre den.",
+        "Shared with you to view only. Nothing was saved; ask its owner for edit rights to change it.": "Delt med deg kun for visning. Ingenting ble lagret; be eieren om redigeringstilgang for å endre den.",
         "A partner organisation this secret is shared with cannot be reached ({partners}). Make the change again online, where you can save without them.": "En partnerorganisasjon som denne hemmeligheten er delt med, kan ikke nås ({partners}). Gjør endringen på nytt på nett, der du kan lagre uten dem.",
         "Save without them": "Lagre uten dem",
         "Saved. Recipients at partner organisations get this change when the owner next saves this secret.": "Lagret. Mottakere i partnerorganisasjoner får denne endringen neste gang eieren lagrer denne hemmeligheten.",
diff --git a/l10n/nl.js b/l10n/nl.js
index 340d9d899..9db4752c1 100644
--- a/l10n/nl.js
+++ b/l10n/nl.js
@@ -4,6 +4,8 @@ OC.L10N.register(
         "This secret is shared with many partner organisations, so the save is waiting for the lookup limit and then continues. Keep this dialog open.": "Dit geheim is gedeeld met veel partnerorganisaties, dus het opslaan wacht op de opzoeklimiet en gaat daarna verder. Houd dit venster open.",
         "Too many partner lookups. Nothing was saved; try again in a minute.": "Te veel opzoekingen bij partnerorganisaties. Er is niets opgeslagen; probeer het over een minuut opnieuw.",
         "This version cannot be restored to this secret. Nothing was saved.": "Deze versie kan niet worden hersteld voor dit geheim. Er is niets opgeslagen.",
+        "Shared with you to view only. Ask its owner for edit rights to change it.": "Met je gedeeld om alleen te bekijken. Vraag de eigenaar om bewerkingsrechten om het te wijzigen.",
+        "Shared with you to view only. Nothing was saved; ask its owner for edit rights to change it.": "Met je gedeeld om alleen te bekijken. Er is niets opgeslagen; vraag de eigenaar om bewerkingsrechten om het te wijzigen.",
         "A partner organisation this secret is shared with cannot be reached ({partners}). Make the change again online, where you can save without them.": "Een partnerorganisatie waarmee dit geheim gedeeld is, is niet bereikbaar ({partners}). Voer de wijziging online opnieuw uit; daar kun je opslaan zonder hen.",
         "Save without them": "Opslaan zonder hen",
         "Saved. Recipients at partner organisations get this change when the owner next saves this secret.": "Opgeslagen. Ontvangers bij partnerorganisaties krijgen deze wijziging zodra de eigenaar dit geheim opnieuw opslaat.",
diff --git a/l10n/nl.json b/l10n/nl.json
index 43e89a8c5..985ab48b0 100644
--- a/l10n/nl.json
+++ b/l10n/nl.json
@@ -3,6 +3,8 @@
         "This secret is shared with many partner organisations, so the save is waiting for the lookup limit and then continues. Keep this dialog open.": "Dit geheim is gedeeld met veel partnerorganisaties, dus het opslaan wacht op de opzoeklimiet en gaat daarna verder. Houd dit venster open.",
         "Too many partner lookups. Nothing was saved; try again in a minute.": "Te veel opzoekingen bij partnerorganisaties. Er is niets opgeslagen; probeer het over een minuut opnieuw.",
         "This version cannot be restored to this secret. Nothing was saved.": "Deze versie kan niet worden hersteld voor dit geheim. Er is niets opgeslagen.",
+        "Shared with you to view only. Ask its owner for edit rights to change it.": "Met je gedeeld om alleen te bekijken. Vraag de eigenaar om bewerkingsrechten om het te wijzigen.",
+        "Shared with you to view only. Nothing was saved; ask its owner for edit rights to change it.": "Met je gedeeld om alleen te bekijken. Er is niets opgeslagen; vraag de eigenaar om bewerkingsrechten om het te wijzigen.",
         "A partner organisation this secret is shared with cannot be reached ({partners}). Make the change again online, where you can save without them.": "Een partnerorganisatie waarmee dit geheim gedeeld is, is niet bereikbaar ({partners}). Voer de wijziging online opnieuw uit; daar kun je opslaan zonder hen.",
         "Save without them": "Opslaan zonder hen",
         "Saved. Recipients at partner organisations get this change when the owner next saves this secret.": "Opgeslagen. Ontvangers bij partnerorganisaties krijgen deze wijziging zodra de eigenaar dit geheim opnieuw opslaat.",
diff --git a/l10n/pl.js b/l10n/pl.js
index 972803a80..3a3cbf8d3 100644
--- a/l10n/pl.js
+++ b/l10n/pl.js
@@ -4,6 +4,8 @@ OC.L10N.register(
         "This secret is shared with many partner organisations, so the save is waiting for the lookup limit and then continues. Keep this dialog open.": "Ten sekret jest udostępniony wielu organizacjom partnerskim, więc zapisywanie czeka na limit zapytań, a potem jest kontynuowane. Nie zamykaj tego okna.",
         "Too many partner lookups. Nothing was saved; try again in a minute.": "Zbyt wiele zapytań do organizacji partnerskich. Nic nie zostało zapisane; spróbuj ponownie za minutę.",
         "This version cannot be restored to this secret. Nothing was saved.": "Tej wersji nie można przywrócić dla tego sekretu. Nic nie zostało zapisane.",
+        "Shared with you to view only. Ask its owner for edit rights to change it.": "Udostępnione Ci tylko do wglądu. Aby to zmienić, poproś właściciela o prawa do edycji.",
+        "Shared with you to view only. Nothing was saved; ask its owner for edit rights to change it.": "Udostępnione Ci tylko do wglądu. Nic nie zostało zapisane; aby to zmienić, poproś właściciela o prawa do edycji.",
         "A partner organisation this secret is shared with cannot be reached ({partners}). Make the change again online, where you can save without them.": "Organizacja partnerska, której udostępniono ten sekret, jest nieosiągalna ({partners}). Wprowadź zmianę ponownie online, gdzie możesz zapisać bez niej.",
         "Save without them": "Zapisz bez nich",
         "Saved. Recipients at partner organisations get this change when the owner next saves this secret.": "Zapisano. Odbiorcy w organizacjach partnerskich otrzymają tę zmianę, gdy właściciel następnym razem zapisze ten sekret.",
diff --git a/l10n/pl.json b/l10n/pl.json
index b7d2c9e3b..32fb836be 100644
--- a/l10n/pl.json
+++ b/l10n/pl.json
@@ -3,6 +3,8 @@
         "This secret is shared with many partner organisations, so the save is waiting for the lookup limit and then continues. Keep this dialog open.": "Ten sekret jest udostępniony wielu organizacjom partnerskim, więc zapisywanie czeka na limit zapytań, a potem jest kontynuowane. Nie zamykaj tego okna.",
         "Too many partner lookups. Nothing was saved; try again in a minute.": "Zbyt wiele zapytań do organizacji partnerskich. Nic nie zostało zapisane; spróbuj ponownie za minutę.",
         "This version cannot be restored to this secret. Nothing was saved.": "Tej wersji nie można przywrócić dla tego sekretu. Nic nie zostało zapisane.",
+        "Shared with you to view only. Ask its owner for edit rights to change it.": "Udostępnione Ci tylko do wglądu. Aby to zmienić, poproś właściciela o prawa do edycji.",
+        "Shared with you to view only. Nothing was saved; ask its owner for edit rights to change it.": "Udostępnione Ci tylko do wglądu. Nic nie zostało zapisane; aby to zmienić, poproś właściciela o prawa do edycji.",
         "A partner organisation this secret is shared with cannot be reached ({partners}). Make the change again online, where you can save without them.": "Organizacja partnerska, której udostępniono ten sekret, jest nieosiągalna ({partners}). Wprowadź zmianę ponownie online, gdzie możesz zapisać bez niej.",
         "Save without them": "Zapisz bez nich",
         "Saved. Recipients at partner organisations get this change when the owner next saves this secret.": "Zapisano. Odbiorcy w organizacjach partnerskich otrzymają tę zmianę, gdy właściciel następnym razem zapisze ten sekret.",
diff --git a/l10n/pt.js b/l10n/pt.js
index 274e7efc8..835e0a177 100644
--- a/l10n/pt.js
+++ b/l10n/pt.js
@@ -4,6 +4,8 @@ OC.L10N.register(
         "This secret is shared with many partner organisations, so the save is waiting for the lookup limit and then continues. Keep this dialog open.": "Este segredo está partilhado com muitas organizações parceiras, por isso a gravação aguarda o limite de consultas e depois continua. Mantenha esta janela aberta.",
         "Too many partner lookups. Nothing was saved; try again in a minute.": "Demasiadas consultas a organizações parceiras. Nada foi guardado; tente novamente dentro de um minuto.",
         "This version cannot be restored to this secret. Nothing was saved.": "Esta versão não pode ser restaurada para este segredo. Nada foi guardado.",
+        "Shared with you to view only. Ask its owner for edit rights to change it.": "Partilhado consigo apenas para visualização. Peça ao proprietário direitos de edição para o alterar.",
+        "Shared with you to view only. Nothing was saved; ask its owner for edit rights to change it.": "Partilhado consigo apenas para visualização. Nada foi guardado; peça ao proprietário direitos de edição para o alterar.",
         "A partner organisation this secret is shared with cannot be reached ({partners}). Make the change again online, where you can save without them.": "Uma organização parceira com quem este segredo é partilhado está inacessível ({partners}). Faça a alteração novamente online, onde pode guardar sem eles.",
         "Save without them": "Guardar sem eles",
         "Saved. Recipients at partner organisations get this change when the owner next saves this secret.": "Guardado. Os destinatários em organizações parceiras recebem esta alteração quando o proprietário voltar a guardar este segredo.",
diff --git a/l10n/pt.json b/l10n/pt.json
index aa055417c..e34b183f7 100644
--- a/l10n/pt.json
+++ b/l10n/pt.json
@@ -3,6 +3,8 @@
         "This secret is shared with many partner organisations, so the save is waiting for the lookup limit and then continues. Keep this dialog open.": "Este segredo está partilhado com muitas organizações parceiras, por isso a gravação aguarda o limite de consultas e depois continua. Mantenha esta janela aberta.",
         "Too many partner lookups. Nothing was saved; try again in a minute.": "Demasiadas consultas a organizações parceiras. Nada foi guardado; tente novamente dentro de um minuto.",
         "This version cannot be restored to this secret. Nothing was saved.": "Esta versão não pode ser restaurada para este segredo. Nada foi guardado.",
+        "Shared with you to view only. Ask its owner for edit rights to change it.": "Partilhado consigo apenas para visualização. Peça ao proprietário direitos de edição para o alterar.",
+        "Shared with you to view only. Nothing was saved; ask its owner for edit rights to change it.": "Partilhado consigo apenas para visualização. Nada foi guardado; peça ao proprietário direitos de edição para o alterar.",
         "A partner organisation this secret is shared with cannot be reached ({partners}). Make the change again online, where you can save without them.": "Uma organização parceira com quem este segredo é partilhado está inacessível ({partners}). Faça a alteração novamente online, onde pode guardar sem eles.",
         "Save without them": "Guardar sem eles",
         "Saved. Recipients at partner organisations get this change when the owner next saves this secret.": "Guardado. Os destinatários em organizações parceiras recebem esta alteração quando o proprietário voltar a guardar este segredo.",
diff --git a/l10n/rm.js b/l10n/rm.js
index 6530655fe..a5a789b66 100644
--- a/l10n/rm.js
+++ b/l10n/rm.js
@@ -4,6 +4,8 @@ OC.L10N.register(
         "This secret is shared with many partner organisations, so the save is waiting for the lookup limit and then continues. Keep this dialog open.": "Quest secret è parti cun bleras organisaziuns partenarias, perquai spetga la memorisaziun il limit da dumondas e cuntinuescha lura. Tegna avert quest dialog.",
         "Too many partner lookups. Nothing was saved; try again in a minute.": "Memia bleras dumondas tar organisaziuns partenarias. Nagut n'è vegnì memorisà; emprova anc ina giada en ina minuta.",
         "This version cannot be restored to this secret. Nothing was saved.": "Questa versiun na po betg vegnir restaurada per quest secret. Nagut n'è vegnì memorisà.",
+        "Shared with you to view only. Ask its owner for edit rights to change it.": "Parti cun tai mo per guardar. Dumonda il possessur per dretgs da modifitgar, per al midar.",
+        "Shared with you to view only. Nothing was saved; ask its owner for edit rights to change it.": "Parti cun tai mo per guardar. Nagut n'è vegnì memorisà; dumonda il possessur per dretgs da modifitgar, per al midar.",
         "A partner organisation this secret is shared with cannot be reached ({partners}). Make the change again online, where you can save without them.": "Ina organisaziun partenaria cun la quala quest secret è partì n'è betg cuntanschibla ({partners}). Fa la midada danovamain online, nua che ti pos memorisar senza els.",
         "Save without them": "Memorisar senza els",
         "Saved. Recipients at partner organisations get this change when the owner next saves this secret.": "Memorisà. Destinaturs en organisaziuns partenarias survegnan questa midada, cura che il proprietari memorisescha la proxima giada quest secret.",
diff --git a/l10n/rm.json b/l10n/rm.json
index 6217a42fc..191128adf 100644
--- a/l10n/rm.json
+++ b/l10n/rm.json
@@ -3,6 +3,8 @@
         "This secret is shared with many partner organisations, so the save is waiting for the lookup limit and then continues. Keep this dialog open.": "Quest secret è parti cun bleras organisaziuns partenarias, perquai spetga la memorisaziun il limit da dumondas e cuntinuescha lura. Tegna avert quest dialog.",
         "Too many partner lookups. Nothing was saved; try again in a minute.": "Memia bleras dumondas tar organisaziuns partenarias. Nagut n'è vegnì memorisà; emprova anc ina giada en ina minuta.",
         "This version cannot be restored to this secret. Nothing was saved.": "Questa versiun na po betg vegnir restaurada per quest secret. Nagut n'è vegnì memorisà.",
+        "Shared with you to view only. Ask its owner for edit rights to change it.": "Parti cun tai mo per guardar. Dumonda il possessur per dretgs da modifitgar, per al midar.",
+        "Shared with you to view only. Nothing was saved; ask its owner for edit rights to change it.": "Parti cun tai mo per guardar. Nagut n'è vegnì memorisà; dumonda il possessur per dretgs da modifitgar, per al midar.",
         "A partner organisation this secret is shared with cannot be reached ({partners}). Make the change again online, where you can save without them.": "Ina organisaziun partenaria cun la quala quest secret è partì n'è betg cuntanschibla ({partners}). Fa la midada danovamain online, nua che ti pos memorisar senza els.",
         "Save without them": "Memorisar senza els",
         "Saved. Recipients at partner organisations get this change when the owner next saves this secret.": "Memorisà. Destinaturs en organisaziuns partenarias survegnan questa midada, cura che il proprietari memorisescha la proxima giada quest secret.",
diff --git a/l10n/ro.js b/l10n/ro.js
index b5b42ebce..b54955f46 100644
--- a/l10n/ro.js
+++ b/l10n/ro.js
@@ -4,6 +4,8 @@ OC.L10N.register(
         "This secret is shared with many partner organisations, so the save is waiting for the lookup limit and then continues. Keep this dialog open.": "Acest secret este partajat cu multe organizații partenere, așa că salvarea așteaptă limita de interogări și apoi continuă. Păstrați această fereastră deschisă.",
         "Too many partner lookups. Nothing was saved; try again in a minute.": "Prea multe interogări către organizațiile partenere. Nu s-a salvat nimic; încercați din nou peste un minut.",
         "This version cannot be restored to this secret. Nothing was saved.": "Această versiune nu poate fi restaurată pentru acest secret. Nu s-a salvat nimic.",
+        "Shared with you to view only. Ask its owner for edit rights to change it.": "Partajat cu dumneavoastră doar pentru vizualizare. Cereți proprietarului drepturi de editare pentru a-l modifica.",
+        "Shared with you to view only. Nothing was saved; ask its owner for edit rights to change it.": "Partajat cu dumneavoastră doar pentru vizualizare. Nu s-a salvat nimic; cereți proprietarului drepturi de editare pentru a-l modifica.",
         "A partner organisation this secret is shared with cannot be reached ({partners}). Make the change again online, where you can save without them.": "O organizație parteneră cu care este partajat acest secret nu poate fi contactată ({partners}). Refaceți modificarea online, unde puteți salva fără ei.",
         "Save without them": "Salvați fără ei",
         "Saved. Recipients at partner organisations get this change when the owner next saves this secret.": "Salvat. Destinatarii din organizațiile partenere vor primi această modificare când proprietarul va salva din nou acest secret.",
diff --git a/l10n/ro.json b/l10n/ro.json
index ce2173eca..b340da049 100644
--- a/l10n/ro.json
+++ b/l10n/ro.json
@@ -3,6 +3,8 @@
         "This secret is shared with many partner organisations, so the save is waiting for the lookup limit and then continues. Keep this dialog open.": "Acest secret este partajat cu multe organizații partenere, așa că salvarea așteaptă limita de interogări și apoi continuă. Păstrați această fereastră deschisă.",
         "Too many partner lookups. Nothing was saved; try again in a minute.": "Prea multe interogări către organizațiile partenere. Nu s-a salvat nimic; încercați din nou peste un minut.",
         "This version cannot be restored to this secret. Nothing was saved.": "Această versiune nu poate fi restaurată pentru acest secret. Nu s-a salvat nimic.",
+        "Shared with you to view only. Ask its owner for edit rights to change it.": "Partajat cu dumneavoastră doar pentru vizualizare. Cereți proprietarului drepturi de editare pentru a-l modifica.",
+        "Shared with you to view only. Nothing was saved; ask its owner for edit rights to change it.": "Partajat cu dumneavoastră doar pentru vizualizare. Nu s-a salvat nimic; cereți proprietarului drepturi de editare pentru a-l modifica.",
         "A partner organisation this secret is shared with cannot be reached ({partners}). Make the change again online, where you can save without them.": "O organizație parteneră cu care este partajat acest secret nu poate fi contactată ({partners}). Refaceți modificarea online, unde puteți salva fără ei.",
         "Save without them": "Salvați fără ei",
         "Saved. Recipients at partner organisations get this change when the owner next saves this secret.": "Salvat. Destinatarii din organizațiile partenere vor primi această modificare când proprietarul va salva din nou acest secret.",
diff --git a/l10n/ru.js b/l10n/ru.js
index ed87e8181..ef875f0f5 100644
--- a/l10n/ru.js
+++ b/l10n/ru.js
@@ -4,6 +4,8 @@ OC.L10N.register(
         "This secret is shared with many partner organisations, so the save is waiting for the lookup limit and then continues. Keep this dialog open.": "Этот секрет доступен многим партнёрским организациям, поэтому сохранение ждёт снятия лимита запросов и затем продолжится. Не закрывайте это окно.",
         "Too many partner lookups. Nothing was saved; try again in a minute.": "Слишком много запросов к партнёрским организациям. Ничего не сохранено; попробуйте ещё раз через минуту.",
         "This version cannot be restored to this secret. Nothing was saved.": "Эту версию нельзя восстановить для этого секрета. Ничего не сохранено.",
+        "Shared with you to view only. Ask its owner for edit rights to change it.": "Предоставлено вам только для просмотра. Чтобы изменить, попросите владельца дать права на редактирование.",
+        "Shared with you to view only. Nothing was saved; ask its owner for edit rights to change it.": "Предоставлено вам только для просмотра. Ничего не сохранено; чтобы изменить, попросите владельца дать права на редактирование.",
         "A partner organisation this secret is shared with cannot be reached ({partners}). Make the change again online, where you can save without them.": "Партнёрская организация, с которой поделён этот секрет, недоступна ({partners}). Повторите изменение в сети, где можно сохранить без неё.",
         "Save without them": "Сохранить без них",
         "Saved. Recipients at partner organisations get this change when the owner next saves this secret.": "Сохранено. Получатели в партнёрских организациях получат это изменение, когда владелец в следующий раз сохранит этот секрет.",
diff --git a/l10n/ru.json b/l10n/ru.json
index ed4ea1031..4ac2e703d 100644
--- a/l10n/ru.json
+++ b/l10n/ru.json
@@ -3,6 +3,8 @@
         "This secret is shared with many partner organisations, so the save is waiting for the lookup limit and then continues. Keep this dialog open.": "Этот секрет доступен многим партнёрским организациям, поэтому сохранение ждёт снятия лимита запросов и затем продолжится. Не закрывайте это окно.",
         "Too many partner lookups. Nothing was saved; try again in a minute.": "Слишком много запросов к партнёрским организациям. Ничего не сохранено; попробуйте ещё раз через минуту.",
         "This version cannot be restored to this secret. Nothing was saved.": "Эту версию нельзя восстановить для этого секрета. Ничего не сохранено.",
+        "Shared with you to view only. Ask its owner for edit rights to change it.": "Предоставлено вам только для просмотра. Чтобы изменить, попросите владельца дать права на редактирование.",
+        "Shared with you to view only. Nothing was saved; ask its owner for edit rights to change it.": "Предоставлено вам только для просмотра. Ничего не сохранено; чтобы изменить, попросите владельца дать права на редактирование.",
         "A partner organisation this secret is shared with cannot be reached ({partners}). Make the change again online, where you can save without them.": "Партнёрская организация, с которой поделён этот секрет, недоступна ({partners}). Повторите изменение в сети, где можно сохранить без неё.",
         "Save without them": "Сохранить без них",
         "Saved. Recipients at partner organisations get this change when the owner next saves this secret.": "Сохранено. Получатели в партнёрских организациях получат это изменение, когда владелец в следующий раз сохранит этот секрет.",
diff --git a/l10n/sk.js b/l10n/sk.js
index aa1ebb16a..11dcc8a38 100644
--- a/l10n/sk.js
+++ b/l10n/sk.js
@@ -4,6 +4,8 @@ OC.L10N.register(
         "This secret is shared with many partner organisations, so the save is waiting for the lookup limit and then continues. Keep this dialog open.": "Toto tajomstvo je zdieľané s mnohými partnerskými organizáciami, preto ukladanie čaká na limit dopytov a potom pokračuje. Nechajte toto okno otvorené.",
         "Too many partner lookups. Nothing was saved; try again in a minute.": "Príliš veľa dopytov na partnerské organizácie. Nič sa neuložilo; skúste to znova o minútu.",
         "This version cannot be restored to this secret. Nothing was saved.": "Túto verziu nemožno obnoviť pre toto tajomstvo. Nič sa neuložilo.",
+        "Shared with you to view only. Ask its owner for edit rights to change it.": "Zdieľané s vami len na zobrazenie. Ak ho chcete zmeniť, požiadajte vlastníka o oprávnenie na úpravy.",
+        "Shared with you to view only. Nothing was saved; ask its owner for edit rights to change it.": "Zdieľané s vami len na zobrazenie. Nič sa neuložilo; ak ho chcete zmeniť, požiadajte vlastníka o oprávnenie na úpravy.",
         "A partner organisation this secret is shared with cannot be reached ({partners}). Make the change again online, where you can save without them.": "Partnerská organizácia, s ktorou je toto tajomstvo zdieľané, nie je dostupná ({partners}). Urobte zmenu znova online, kde ju môžete uložiť bez nej.",
         "Save without them": "Uložiť bez nich",
         "Saved. Recipients at partner organisations get this change when the owner next saves this secret.": "Uložené. Príjemcovia v partnerských organizáciách dostanú túto zmenu, keď vlastník nabudúce uloží toto tajomstvo.",
diff --git a/l10n/sk.json b/l10n/sk.json
index 78cdadcc2..0779b5ab6 100644
--- a/l10n/sk.json
+++ b/l10n/sk.json
@@ -3,6 +3,8 @@
         "This secret is shared with many partner organisations, so the save is waiting for the lookup limit and then continues. Keep this dialog open.": "Toto tajomstvo je zdieľané s mnohými partnerskými organizáciami, preto ukladanie čaká na limit dopytov a potom pokračuje. Nechajte toto okno otvorené.",
         "Too many partner lookups. Nothing was saved; try again in a minute.": "Príliš veľa dopytov na partnerské organizácie. Nič sa neuložilo; skúste to znova o minútu.",
         "This version cannot be restored to this secret. Nothing was saved.": "Túto verziu nemožno obnoviť pre toto tajomstvo. Nič sa neuložilo.",
+        "Shared with you to view only. Ask its owner for edit rights to change it.": "Zdieľané s vami len na zobrazenie. Ak ho chcete zmeniť, požiadajte vlastníka o oprávnenie na úpravy.",
+        "Shared with you to view only. Nothing was saved; ask its owner for edit rights to change it.": "Zdieľané s vami len na zobrazenie. Nič sa neuložilo; ak ho chcete zmeniť, požiadajte vlastníka o oprávnenie na úpravy.",
         "A partner organisation this secret is shared with cannot be reached ({partners}). Make the change again online, where you can save without them.": "Partnerská organizácia, s ktorou je toto tajomstvo zdieľané, nie je dostupná ({partners}). Urobte zmenu znova online, kde ju môžete uložiť bez nej.",
         "Save without them": "Uložiť bez nich",
         "Saved. Recipients at partner organisations get this change when the owner next saves this secret.": "Uložené. Príjemcovia v partnerských organizáciách dostanú túto zmenu, keď vlastník nabudúce uloží toto tajomstvo.",
diff --git a/l10n/sl.js b/l10n/sl.js
index 74697cf37..bd7c85d9e 100644
--- a/l10n/sl.js
+++ b/l10n/sl.js
@@ -4,6 +4,8 @@ OC.L10N.register(
         "This secret is shared with many partner organisations, so the save is waiting for the lookup limit and then continues. Keep this dialog open.": "Ta skrivnost je deljena z mnogimi partnerskimi organizacijami, zato shranjevanje čaka na omejitev poizvedb in se nato nadaljuje. Pustite to okno odprto.",
         "Too many partner lookups. Nothing was saved; try again in a minute.": "Preveč poizvedb pri partnerskih organizacijah. Nič ni bilo shranjeno; poskusite znova čez minuto.",
         "This version cannot be restored to this secret. Nothing was saved.": "Te različice ni mogoče obnoviti za to skrivnost. Nič ni bilo shranjeno.",
+        "Shared with you to view only. Ask its owner for edit rights to change it.": "Deljeno z vami samo za ogled. Če jo želite spremeniti, prosite lastnika za pravice urejanja.",
+        "Shared with you to view only. Nothing was saved; ask its owner for edit rights to change it.": "Deljeno z vami samo za ogled. Nič ni bilo shranjeno; če jo želite spremeniti, prosite lastnika za pravice urejanja.",
         "A partner organisation this secret is shared with cannot be reached ({partners}). Make the change again online, where you can save without them.": "Partnerska organizacija, s katero je deljena ta skrivnost, ni dosegljiva ({partners}). Spremembo ponovite na spletu, kjer lahko shranite brez njih.",
         "Save without them": "Shrani brez njih",
         "Saved. Recipients at partner organisations get this change when the owner next saves this secret.": "Shranjeno. Prejemniki v partnerskih organizacijah bodo to spremembo prejeli, ko bo lastnik naslednjič shranil to skrivnost.",
diff --git a/l10n/sl.json b/l10n/sl.json
index 9bfcc64f4..6b1cebd9c 100644
--- a/l10n/sl.json
+++ b/l10n/sl.json
@@ -3,6 +3,8 @@
         "This secret is shared with many partner organisations, so the save is waiting for the lookup limit and then continues. Keep this dialog open.": "Ta skrivnost je deljena z mnogimi partnerskimi organizacijami, zato shranjevanje čaka na omejitev poizvedb in se nato nadaljuje. Pustite to okno odprto.",
         "Too many partner lookups. Nothing was saved; try again in a minute.": "Preveč poizvedb pri partnerskih organizacijah. Nič ni bilo shranjeno; poskusite znova čez minuto.",
         "This version cannot be restored to this secret. Nothing was saved.": "Te različice ni mogoče obnoviti za to skrivnost. Nič ni bilo shranjeno.",
+        "Shared with you to view only. Ask its owner for edit rights to change it.": "Deljeno z vami samo za ogled. Če jo želite spremeniti, prosite lastnika za pravice urejanja.",
+        "Shared with you to view only. Nothing was saved; ask its owner for edit rights to change it.": "Deljeno z vami samo za ogled. Nič ni bilo shranjeno; če jo želite spremeniti, prosite lastnika za pravice urejanja.",
         "A partner organisation this secret is shared with cannot be reached ({partners}). Make the change again online, where you can save without them.": "Partnerska organizacija, s katero je deljena ta skrivnost, ni dosegljiva ({partners}). Spremembo ponovite na spletu, kjer lahko shranite brez njih.",
         "Save without them": "Shrani brez njih",
         "Saved. Recipients at partner organisations get this change when the owner next saves this secret.": "Shranjeno. Prejemniki v partnerskih organizacijah bodo to spremembo prejeli, ko bo lastnik naslednjič shranil to skrivnost.",
diff --git a/l10n/sq.js b/l10n/sq.js
index 6a0b4f784..9bd6c8550 100644
--- a/l10n/sq.js
+++ b/l10n/sq.js
@@ -4,6 +4,8 @@ OC.L10N.register(
         "This secret is shared with many partner organisations, so the save is waiting for the lookup limit and then continues. Keep this dialog open.": "Ky sekret është ndarë me shumë organizata partnere, prandaj ruajtja po pret kufirin e kërkimeve dhe pastaj vazhdon. Mbajeni këtë dritare të hapur.",
         "Too many partner lookups. Nothing was saved; try again in a minute.": "Shumë kërkime te organizatat partnere. Asgjë nuk u ruajt; provoni përsëri pas një minute.",
         "This version cannot be restored to this secret. Nothing was saved.": "Ky version nuk mund të rikthehet për këtë sekret. Asgjë nuk u ruajt.",
+        "Shared with you to view only. Ask its owner for edit rights to change it.": "Ndarë me ju vetëm për shikim. Kërkojini pronarit të drejta redaktimi për ta ndryshuar.",
+        "Shared with you to view only. Nothing was saved; ask its owner for edit rights to change it.": "Ndarë me ju vetëm për shikim. Asgjë nuk u ruajt; kërkojini pronarit të drejta redaktimi për ta ndryshuar.",
         "A partner organisation this secret is shared with cannot be reached ({partners}). Make the change again online, where you can save without them.": "Një organizatë partnere me të cilën ndahet ky sekret nuk mund të arrihet ({partners}). Bëjeni sërish ndryshimin në linjë, ku mund ta ruani pa ata.",
         "Save without them": "Ruaje pa ata",
         "Saved. Recipients at partner organisations get this change when the owner next saves this secret.": "U ruajt. Marrësit në organizatat partnere do ta marrin këtë ndryshim kur pronari ta ruajë herën tjetër këtë sekret.",
diff --git a/l10n/sq.json b/l10n/sq.json
index 06067ec4a..ac6068c24 100644
--- a/l10n/sq.json
+++ b/l10n/sq.json
@@ -3,6 +3,8 @@
         "This secret is shared with many partner organisations, so the save is waiting for the lookup limit and then continues. Keep this dialog open.": "Ky sekret është ndarë me shumë organizata partnere, prandaj ruajtja po pret kufirin e kërkimeve dhe pastaj vazhdon. Mbajeni këtë dritare të hapur.",
         "Too many partner lookups. Nothing was saved; try again in a minute.": "Shumë kërkime te organizatat partnere. Asgjë nuk u ruajt; provoni përsëri pas një minute.",
         "This version cannot be restored to this secret. Nothing was saved.": "Ky version nuk mund të rikthehet për këtë sekret. Asgjë nuk u ruajt.",
+        "Shared with you to view only. Ask its owner for edit rights to change it.": "Ndarë me ju vetëm për shikim. Kërkojini pronarit të drejta redaktimi për ta ndryshuar.",
+        "Shared with you to view only. Nothing was saved; ask its owner for edit rights to change it.": "Ndarë me ju vetëm për shikim. Asgjë nuk u ruajt; kërkojini pronarit të drejta redaktimi për ta ndryshuar.",
         "A partner organisation this secret is shared with cannot be reached ({partners}). Make the change again online, where you can save without them.": "Një organizatë partnere me të cilën ndahet ky sekret nuk mund të arrihet ({partners}). Bëjeni sërish ndryshimin në linjë, ku mund ta ruani pa ata.",
         "Save without them": "Ruaje pa ata",
         "Saved. Recipients at partner organisations get this change when the owner next saves this secret.": "U ruajt. Marrësit në organizatat partnere do ta marrin këtë ndryshim kur pronari ta ruajë herën tjetër këtë sekret.",
diff --git a/l10n/sr.js b/l10n/sr.js
index 4d02c3050..6c613fdb4 100644
--- a/l10n/sr.js
+++ b/l10n/sr.js
@@ -4,6 +4,8 @@ OC.L10N.register(
         "This secret is shared with many partner organisations, so the save is waiting for the lookup limit and then continues. Keep this dialog open.": "Ова тајна је дељена са много партнерских организација, па чување чека ограничење упита и затим се наставља. Не затварајте овај прозор.",
         "Too many partner lookups. Nothing was saved; try again in a minute.": "Превише упита партнерским организацијама. Ништа није сачувано; покушајте поново за минут.",
         "This version cannot be restored to this secret. Nothing was saved.": "Ова верзија не може да се врати за ову тајну. Ништа није сачувано.",
+        "Shared with you to view only. Ask its owner for edit rights to change it.": "Подељено са вама само за преглед. Затражите од власника права уређивања да бисте је променили.",
+        "Shared with you to view only. Nothing was saved; ask its owner for edit rights to change it.": "Подељено са вама само за преглед. Ништа није сачувано; затражите од власника права уређивања да бисте је променили.",
         "A partner organisation this secret is shared with cannot be reached ({partners}). Make the change again online, where you can save without them.": "Партнерска организација са којом се дели ова тајна није доступна ({partners}). Поновите измену на мрежи, где можете да сачувате без њих.",
         "Save without them": "Сачувај без њих",
         "Saved. Recipients at partner organisations get this change when the owner next saves this secret.": "Сачувано. Примаоци у партнерским организацијама добиће ову измену када власник следећи пут сачува ову тајну.",
diff --git a/l10n/sr.json b/l10n/sr.json
index ac21a4fff..f7031d3e1 100644
--- a/l10n/sr.json
+++ b/l10n/sr.json
@@ -3,6 +3,8 @@
         "This secret is shared with many partner organisations, so the save is waiting for the lookup limit and then continues. Keep this dialog open.": "Ова тајна је дељена са много партнерских организација, па чување чека ограничење упита и затим се наставља. Не затварајте овај прозор.",
         "Too many partner lookups. Nothing was saved; try again in a minute.": "Превише упита партнерским организацијама. Ништа није сачувано; покушајте поново за минут.",
         "This version cannot be restored to this secret. Nothing was saved.": "Ова верзија не може да се врати за ову тајну. Ништа није сачувано.",
+        "Shared with you to view only. Ask its owner for edit rights to change it.": "Подељено са вама само за преглед. Затражите од власника права уређивања да бисте је променили.",
+        "Shared with you to view only. Nothing was saved; ask its owner for edit rights to change it.": "Подељено са вама само за преглед. Ништа није сачувано; затражите од власника права уређивања да бисте је променили.",
         "A partner organisation this secret is shared with cannot be reached ({partners}). Make the change again online, where you can save without them.": "Партнерска организација са којом се дели ова тајна није доступна ({partners}). Поновите измену на мрежи, где можете да сачувате без њих.",
         "Save without them": "Сачувај без њих",
         "Saved. Recipients at partner organisations get this change when the owner next saves this secret.": "Сачувано. Примаоци у партнерским организацијама добиће ову измену када власник следећи пут сачува ову тајну.",
diff --git a/l10n/sv.js b/l10n/sv.js
index ca9a0f939..7228ae880 100644
--- a/l10n/sv.js
+++ b/l10n/sv.js
@@ -4,6 +4,8 @@ OC.L10N.register(
         "This secret is shared with many partner organisations, so the save is waiting for the lookup limit and then continues. Keep this dialog open.": "Den här hemligheten delas med många partnerorganisationer, så sparandet väntar på uppslagsgränsen och fortsätter sedan. Håll den här dialogen öppen.",
         "Too many partner lookups. Nothing was saved; try again in a minute.": "För många uppslag hos partnerorganisationer. Inget sparades; försök igen om en minut.",
         "This version cannot be restored to this secret. Nothing was saved.": "Den här versionen kan inte återställas för den här hemligheten. Inget sparades.",
+        "Shared with you to view only. Ask its owner for edit rights to change it.": "Delad med dig endast för visning. Be ägaren om redigeringsrättigheter för att ändra den.",
+        "Shared with you to view only. Nothing was saved; ask its owner for edit rights to change it.": "Delad med dig endast för visning. Inget sparades; be ägaren om redigeringsrättigheter för att ändra den.",
         "A partner organisation this secret is shared with cannot be reached ({partners}). Make the change again online, where you can save without them.": "En partnerorganisation som den här hemligheten delas med kan inte nås ({partners}). Gör om ändringen online, där du kan spara utan dem.",
         "Save without them": "Spara utan dem",
         "Saved. Recipients at partner organisations get this change when the owner next saves this secret.": "Sparat. Mottagare i partnerorganisationer får ändringen nästa gång ägaren sparar den här hemligheten.",
diff --git a/l10n/sv.json b/l10n/sv.json
index 6736d9eed..93dd2b4f5 100644
--- a/l10n/sv.json
+++ b/l10n/sv.json
@@ -3,6 +3,8 @@
         "This secret is shared with many partner organisations, so the save is waiting for the lookup limit and then continues. Keep this dialog open.": "Den här hemligheten delas med många partnerorganisationer, så sparandet väntar på uppslagsgränsen och fortsätter sedan. Håll den här dialogen öppen.",
         "Too many partner lookups. Nothing was saved; try again in a minute.": "För många uppslag hos partnerorganisationer. Inget sparades; försök igen om en minut.",
         "This version cannot be restored to this secret. Nothing was saved.": "Den här versionen kan inte återställas för den här hemligheten. Inget sparades.",
+        "Shared with you to view only. Ask its owner for edit rights to change it.": "Delad med dig endast för visning. Be ägaren om redigeringsrättigheter för att ändra den.",
+        "Shared with you to view only. Nothing was saved; ask its owner for edit rights to change it.": "Delad med dig endast för visning. Inget sparades; be ägaren om redigeringsrättigheter för att ändra den.",
         "A partner organisation this secret is shared with cannot be reached ({partners}). Make the change again online, where you can save without them.": "En partnerorganisation som den här hemligheten delas med kan inte nås ({partners}). Gör om ändringen online, där du kan spara utan dem.",
         "Save without them": "Spara utan dem",
         "Saved. Recipients at partner organisations get this change when the owner next saves this secret.": "Sparat. Mottagare i partnerorganisationer får ändringen nästa gång ägaren sparar den här hemligheten.",
diff --git a/l10n/tr.js b/l10n/tr.js
index 5fea5a1c6..60444f94f 100644
--- a/l10n/tr.js
+++ b/l10n/tr.js
@@ -4,6 +4,8 @@ OC.L10N.register(
         "This secret is shared with many partner organisations, so the save is waiting for the lookup limit and then continues. Keep this dialog open.": "Bu sır birçok ortak kuruluşla paylaşılıyor, bu yüzden kaydetme sorgu sınırını bekliyor ve ardından devam ediyor. Bu pencereyi açık tutun.",
         "Too many partner lookups. Nothing was saved; try again in a minute.": "Ortak kuruluşlara çok fazla sorgu yapıldı. Hiçbir şey kaydedilmedi; bir dakika sonra tekrar deneyin.",
         "This version cannot be restored to this secret. Nothing was saved.": "Bu sürüm bu gizliye geri yüklenemez. Hiçbir şey kaydedilmedi.",
+        "Shared with you to view only. Ask its owner for edit rights to change it.": "Sizinle yalnızca görüntülemeniz için paylaşıldı. Değiştirmek için sahibinden düzenleme izni isteyin.",
+        "Shared with you to view only. Nothing was saved; ask its owner for edit rights to change it.": "Sizinle yalnızca görüntülemeniz için paylaşıldı. Hiçbir şey kaydedilmedi; değiştirmek için sahibinden düzenleme izni isteyin.",
         "A partner organisation this secret is shared with cannot be reached ({partners}). Make the change again online, where you can save without them.": "Bu gizlinin paylaşıldığı bir ortak kuruluşa ulaşılamıyor ({partners}). Değişikliği çevrimiçiyken yeniden yapın; orada onlar olmadan kaydedebilirsiniz.",
         "Save without them": "Onlar olmadan kaydet",
         "Saved. Recipients at partner organisations get this change when the owner next saves this secret.": "Kaydedildi. Ortak kuruluşlardaki alıcılar, sahip bu gizliyi bir sonraki kaydedişinde bu değişikliği alır.",
diff --git a/l10n/tr.json b/l10n/tr.json
index ee979fdaa..4da7c3d94 100644
--- a/l10n/tr.json
+++ b/l10n/tr.json
@@ -3,6 +3,8 @@
         "This secret is shared with many partner organisations, so the save is waiting for the lookup limit and then continues. Keep this dialog open.": "Bu sır birçok ortak kuruluşla paylaşılıyor, bu yüzden kaydetme sorgu sınırını bekliyor ve ardından devam ediyor. Bu pencereyi açık tutun.",
         "Too many partner lookups. Nothing was saved; try again in a minute.": "Ortak kuruluşlara çok fazla sorgu yapıldı. Hiçbir şey kaydedilmedi; bir dakika sonra tekrar deneyin.",
         "This version cannot be restored to this secret. Nothing was saved.": "Bu sürüm bu gizliye geri yüklenemez. Hiçbir şey kaydedilmedi.",
+        "Shared with you to view only. Ask its owner for edit rights to change it.": "Sizinle yalnızca görüntülemeniz için paylaşıldı. Değiştirmek için sahibinden düzenleme izni isteyin.",
+        "Shared with you to view only. Nothing was saved; ask its owner for edit rights to change it.": "Sizinle yalnızca görüntülemeniz için paylaşıldı. Hiçbir şey kaydedilmedi; değiştirmek için sahibinden düzenleme izni isteyin.",
         "A partner organisation this secret is shared with cannot be reached ({partners}). Make the change again online, where you can save without them.": "Bu gizlinin paylaşıldığı bir ortak kuruluşa ulaşılamıyor ({partners}). Değişikliği çevrimiçiyken yeniden yapın; orada onlar olmadan kaydedebilirsiniz.",
         "Save without them": "Onlar olmadan kaydet",
         "Saved. Recipients at partner organisations get this change when the owner next saves this secret.": "Kaydedildi. Ortak kuruluşlardaki alıcılar, sahip bu gizliyi bir sonraki kaydedişinde bu değişikliği alır.",
diff --git a/l10n/uk.js b/l10n/uk.js
index 7c0d2803c..a24b6b56a 100644
--- a/l10n/uk.js
+++ b/l10n/uk.js
@@ -4,6 +4,8 @@ OC.L10N.register(
         "This secret is shared with many partner organisations, so the save is waiting for the lookup limit and then continues. Keep this dialog open.": "Цей секрет спільний із багатьма партнерськими організаціями, тому збереження чекає на ліміт запитів і потім продовжиться. Не закривайте це вікно.",
         "Too many partner lookups. Nothing was saved; try again in a minute.": "Забагато запитів до партнерських організацій. Нічого не збережено; спробуйте ще раз за хвилину.",
         "This version cannot be restored to this secret. Nothing was saved.": "Цю версію не можна відновити для цього секрету. Нічого не збережено.",
+        "Shared with you to view only. Ask its owner for edit rights to change it.": "Надано вам лише для перегляду. Щоб змінити, попросіть власника надати права на редагування.",
+        "Shared with you to view only. Nothing was saved; ask its owner for edit rights to change it.": "Надано вам лише для перегляду. Нічого не збережено; щоб змінити, попросіть власника надати права на редагування.",
         "A partner organisation this secret is shared with cannot be reached ({partners}). Make the change again online, where you can save without them.": "Партнерська організація, з якою поділено цей секрет, недоступна ({partners}). Повторіть зміну онлайн, де можна зберегти без неї.",
         "Save without them": "Зберегти без них",
         "Saved. Recipients at partner organisations get this change when the owner next saves this secret.": "Збережено. Одержувачі в партнерських організаціях отримають цю зміну, коли власник наступного разу збереже цей секрет.",
diff --git a/l10n/uk.json b/l10n/uk.json
index 7101677b2..2cc7304cf 100644
--- a/l10n/uk.json
+++ b/l10n/uk.json
@@ -3,6 +3,8 @@
         "This secret is shared with many partner organisations, so the save is waiting for the lookup limit and then continues. Keep this dialog open.": "Цей секрет спільний із багатьма партнерськими організаціями, тому збереження чекає на ліміт запитів і потім продовжиться. Не закривайте це вікно.",
         "Too many partner lookups. Nothing was saved; try again in a minute.": "Забагато запитів до партнерських організацій. Нічого не збережено; спробуйте ще раз за хвилину.",
         "This version cannot be restored to this secret. Nothing was saved.": "Цю версію не можна відновити для цього секрету. Нічого не збережено.",
+        "Shared with you to view only. Ask its owner for edit rights to change it.": "Надано вам лише для перегляду. Щоб змінити, попросіть власника надати права на редагування.",
+        "Shared with you to view only. Nothing was saved; ask its owner for edit rights to change it.": "Надано вам лише для перегляду. Нічого не збережено; щоб змінити, попросіть власника надати права на редагування.",
         "A partner organisation this secret is shared with cannot be reached ({partners}). Make the change again online, where you can save without them.": "Партнерська організація, з якою поділено цей секрет, недоступна ({partners}). Повторіть зміну онлайн, де можна зберегти без неї.",
         "Save without them": "Зберегти без них",
         "Saved. Recipients at partner organisations get this change when the owner next saves this secret.": "Збережено. Одержувачі в партнерських організаціях отримають цю зміну, коли власник наступного разу збереже цей секрет.",
diff --git a/lib/Controller/SecretRequestFillController.php b/lib/Controller/SecretRequestFillController.php
index 66e5f8314..21a16b02f 100644
--- a/lib/Controller/SecretRequestFillController.php
+++ b/lib/Controller/SecretRequestFillController.php
@@ -32,6 +32,8 @@
 
 use InvalidArgumentException;
 use OCA\Keepiq\AppInfo\Application;
+use OCA\Keepiq\Exception\ForbiddenException;
+use OCA\Keepiq\Exception\NotFoundException;
 use OCA\Keepiq\Service\EncryptionSuiteService;
 use OCA\Keepiq\Service\SecretRequestService;
 use OCP\AppFramework\Http;
@@ -190,6 +192,13 @@ public function fill(
 				data: ['message' => $e->getMessage()],
 				statusCode: $status
 			);
+		} catch (ForbiddenException|NotFoundException) {
+			// The refusal speaks to the secret's holder; the filler gets its
+			// outcome only. The request stays pending.
+			return new JSONResponse(
+				data: ['message' => 'The secret this request writes to cannot be changed'],
+				statusCode: Http::STATUS_FORBIDDEN
+			);
 		} catch (Throwable) {
 			return new JSONResponse(
 				data: ['message' => 'Unable to fulfil request'],
diff --git a/lib/Controller/SecretVersionController.php b/lib/Controller/SecretVersionController.php
index e2f126ca3..443dcb064 100644
--- a/lib/Controller/SecretVersionController.php
+++ b/lib/Controller/SecretVersionController.php
@@ -27,6 +27,8 @@
 
 use InvalidArgumentException;
 use OCA\Keepiq\AppInfo\Application;
+use OCA\Keepiq\Exception\ForbiddenException;
+use OCA\Keepiq\Exception\NotFoundException;
 use OCA\Keepiq\Exception\StaleWriteException;
 use OCA\Keepiq\Service\SecretVersionService;
 use OCP\AppFramework\Http;
@@ -126,8 +128,8 @@ public function show(string $id): JSONResponse {
 
 	/**
 	 * Restore a version onto this one row. The web app restores through
-	 * share-save (`restoredFrom`) and uses this route only for a copy holder
-	 * without a write grade, whose restore changes their own copy alone.
+	 * share-save (`restoredFrom`). A copy whose holder may not write its
+	 * source is view-only and its restore is refused.
 	 *
 	 * @param string $id The version UUID
 	 * @param string|null $baseUpdatedAt The head version the restore was chosen on
@@ -153,12 +155,24 @@ public function restore(string $id, ?string $baseUpdatedAt = null): JSONResponse
 				data: ['message' => $exception->getMessage(), 'current' => $exception->getCurrent()->jsonSerialize()],
 				statusCode: Http::STATUS_CONFLICT
 			);
+		} catch (ForbiddenException $exception) {
+			$body = ['message' => $exception->getMessage()];
+			if ($exception->policyCode() !== null) {
+				$body['code'] = $exception->policyCode();
+			}
+
+			return new JSONResponse(data: $body, statusCode: Http::STATUS_FORBIDDEN);
+		} catch (NotFoundException $exception) {
+			return new JSONResponse(
+				data: ['message' => $exception->getMessage()],
+				statusCode: Http::STATUS_NOT_FOUND
+			);
 		} catch (InvalidArgumentException $exception) {
 			return new JSONResponse(
 				data: ['message' => $exception->getMessage()],
 				statusCode: Http::STATUS_BAD_REQUEST
 			);
-		}
+		}//end try
 
 		return new JSONResponse(data: $secret->jsonSerialize());
 	}//end restore()
diff --git a/lib/Db/Secret.php b/lib/Db/Secret.php
index 68fd09396..e1eb04951 100644
--- a/lib/Db/Secret.php
+++ b/lib/Db/Secret.php
@@ -112,6 +112,14 @@ class Secret extends Entity implements JsonSerializable {
 	 */
 	public const READ_ONLY_REFUSAL = 'A copy from another organisation is read-only';
 
+	/**
+	 * What a value change of a copy answers when its holder may not write
+	 * the source (keepiq#1287).
+	 *
+	 * @var string
+	 */
+	public const VIEW_ONLY_REFUSAL = 'Shared with you to view only. Ask its owner for edit rights to change it.';
+
 	/**
 	 * What the holder of a read-only copy may still change: where it is filed
 	 * (sharing-federated-recipients task 3.5). `baseUpdatedAt` only names the
diff --git a/lib/Exception/ViewOnlyCopyException.php b/lib/Exception/ViewOnlyCopyException.php
new file mode 100644
index 000000000..f550f59f3
--- /dev/null
+++ b/lib/Exception/ViewOnlyCopyException.php
@@ -0,0 +1,60 @@
+<?php
+
+/**
+ * Keepiq View-Only Copy Exception
+ *
+ * A value change of a received copy whose holder may not write its source
+ * (keepiq#1287). It is a ForbiddenException, so every caller that maps that
+ * to 403 keeps doing so, and it carries the code `view_only`.
+ *
+ * @category Exception
+ * @package  OCA\Keepiq\Exception
+ *
+ * @author    Conduction Development Team <dev@conductio.nl>
+ * @copyright 2026 Conduction B.V.
+ * @license   EUPL-1.2 https://joinup.ec.europa.eu/collection/eupl/eupl-text-eupl-12
+ *
+ * @version GIT: <git-id>
+ *
+ * @link https://conduction.nl
+ */
+
+declare(strict_types=1);
+
+namespace OCA\Keepiq\Exception;
+
+use OCA\Keepiq\Db\Secret;
+
+/**
+ * Thrown when the holder of a view-only copy changes its value.
+ *
+ * @spec openspec/specs/user-sharing/spec.md#requirement-view-only-copies
+ */
+class ViewOnlyCopyException extends ForbiddenException {
+	/**
+	 * The machine-readable code the refusal carries.
+	 */
+	public const CODE = 'view_only';
+
+	/**
+	 * Constructor.
+	 *
+	 * @return void
+	 *
+	 * @spec openspec/specs/user-sharing/spec.md#requirement-view-only-copies
+	 */
+	public function __construct() {
+		parent::__construct(message: Secret::VIEW_ONLY_REFUSAL);
+	}//end __construct()
+
+	/**
+	 * The code `view_only`.
+	 *
+	 * @return string|null
+	 *
+	 * @spec openspec/specs/user-sharing/spec.md#requirement-view-only-copies
+	 */
+	public function policyCode(): ?string {
+		return self::CODE;
+	}//end policyCode()
+}//end class
diff --git a/lib/Service/SecretRequestService.php b/lib/Service/SecretRequestService.php
index 6faee6da1..fc4e89668 100644
--- a/lib/Service/SecretRequestService.php
+++ b/lib/Service/SecretRequestService.php
@@ -81,6 +81,7 @@ class SecretRequestService {
 	 * @param SecretMapper $secretMapper Reads the Secret a request writes to
 	 * @param ContainerInterface $container Resolves SecretService lazily (see fill)
 	 * @param SecretPlaceholderCleaner $placeholderCleaner Removes an unfilled placeholder
+	 * @param ViewOnlyCopyGuard $viewOnlyCopies Refuses a fill onto a copy its holder may not write
 	 *
 	 * @return void
 	 */
@@ -93,6 +94,7 @@ public function __construct(
 		private SecretMapper $secretMapper,
 		private ContainerInterface $container,
 		private SecretPlaceholderCleaner $placeholderCleaner,
+		private ViewOnlyCopyGuard $viewOnlyCopies,
 	) {
 	}//end __construct()
 
@@ -160,6 +162,8 @@ public function refusalReason(string $token): string {
 	 * @return SecretRequest
 	 *
 	 * @throws InvalidArgumentException
+	 * @throws \OCA\Keepiq\Exception\ForbiddenException When the secret's holder may not change it, as with a copy shared with them to view only
+	 * @throws \OCA\Keepiq\Exception\NotFoundException When the secret is a copy whose source cannot be resolved, or is gone by the write
 	 *
 	 * @spec openspec/changes/add-secret-audit-trail/tasks.md#task-3.5
 	 */
@@ -311,6 +315,8 @@ private function persistFilledValues(
 	 * @return void
 	 *
 	 * @throws InvalidArgumentException With code 409 when the row moved twice during the fill
+	 * @throws \OCA\Keepiq\Exception\ForbiddenException When the owner may not change the secret, as with a copy shared with them to view only
+	 * @throws \OCA\Keepiq\Exception\NotFoundException When the secret is a copy whose source cannot be resolved, or is gone by the write
 	 *
 	 * @spec openspec/specs/secret-requests/spec.md#requirement-requestable-fields
 	 * @spec openspec/specs/offline-edit-queue/spec.md#requirement-concurrent-server-changes-are-never-overwritten-silently
@@ -328,6 +334,10 @@ private function writeFilledValues(Secret $secret, array $data): void {
 			return;
 		}
 
+		// Before the hold-back: it stores a filled extra-field blob on its own,
+		// and that is a value change too.
+		$this->viewOnlyCopies->assertMayChangeValue(row: $secret, fields: array_keys($data), userId: $secret->getOwnerId());
+
 		$data = $this->holdBackAdditionalFields(secret: $secret, data: $data);
 		if ($data === []) {
 			return;
diff --git a/lib/Service/SecretService.php b/lib/Service/SecretService.php
index 889b1108d..dafe8ed78 100644
--- a/lib/Service/SecretService.php
+++ b/lib/Service/SecretService.php
@@ -142,6 +142,7 @@ class SecretService {
 	 * @param LinkShareService $linkShareService The link share service (cascade delete)
 	 * @param LoggerInterface $logger The logger interface
 	 * @param IDBConnection $db The transaction an update's version lock runs in
+	 * @param ViewOnlyCopyGuard $viewOnlyCopies Refuses a value change of a copy its holder may not write
 	 * @param SecretRequestService|null $secretRequestService The secret-request service
 	 * @param ShareService|null $shareService The share service
 	 * @param GroupShareMapper|null $groupShareMapper The group-share mapper
@@ -170,6 +171,7 @@ public function __construct(
 		private LinkShareService $linkShareService,
 		private LoggerInterface $logger,
 		private IDBConnection $db,
+		private ViewOnlyCopyGuard $viewOnlyCopies,
 		private ?SecretRequestService $secretRequestService = null,
 		private ?ShareService $shareService = null,
 		private ?GroupShareMapper $groupShareMapper = null,
@@ -906,7 +908,7 @@ private function requireFolderOwnedBy(?string $folderId, string $userId): void {
 	 * @return Secret
 	 *
 	 * @throws NotFoundException When the secret does not exist
-	 * @throws ForbiddenException When the secret belongs to another user
+	 * @throws ForbiddenException When the secret belongs to another user, or its value changes on a copy its holder may only view
 	 * @throws WriteLockedException When a compromise-recovery migration is in progress
 	 * @throws InvalidArgumentException When a provided field is invalid
 	 * @throws StaleWriteException When `baseUpdatedAt` names an older version, or the row moved on after it was read
@@ -926,6 +928,11 @@ private function requireFolderOwnedBy(?string $folderId, string $userId): void {
 	 */
 	public function update(string $id, array $data, string $userId, ?DateTime $savedAt = null): Secret {
 		$secret = $this->loadForUpdate(id: $id, fields: array_keys($data), userId: $userId);
+		$this->viewOnlyCopies->assertMayChangeValue(
+			row: $secret,
+			fields: $this->changedValueFields(secret: $secret, data: $data),
+			userId: $userId
+		);
 
 		// The write is locked against the version just read, whether or not
 		// the client named one; the check below compares a named one. A
@@ -1531,6 +1538,42 @@ public function loadForUpdate(string $id, array $fields, string $userId): Secret
 		return $this->loadOwned(id: $id, userId: $userId)->assertEditableByHolder(fields: $fields);
 	}//end loadForUpdate()
 
+	/**
+	 * The value fields an update writes with a value other than the stored
+	 * one, compared as update() stores them. Resending the stored ciphertext
+	 * changes nothing, so it does not count.
+	 *
+	 * @param Secret $secret The row as loaded
+	 * @param array<string,mixed> $data The update data
+	 *
+	 * @return string[]
+	 */
+	private function changedValueFields(Secret $secret, array $data): array {
+		$stored = [
+			'key' => $secret->getKey(),
+			'login' => $secret->getLogin(),
+			'additionalFields' => $secret->getAdditionalFields(),
+		];
+
+		$changed = [];
+		foreach ($stored as $field => $value) {
+			if (array_key_exists($field, $data) === false) {
+				continue;
+			}
+
+			$new = $this->nullableString(value: $data[$field]);
+			if ($field === 'key') {
+				$new = (string)$data[$field];
+			}
+
+			if ($new !== $value) {
+				$changed[] = $field;
+			}
+		}
+
+		return $changed;
+	}//end changedValueFields()
+
 	/**
 	 * Assert the user has an active encryption suite, or block.
 	 *
diff --git a/lib/Service/SecretVersionService.php b/lib/Service/SecretVersionService.php
index 883acfc83..06482ad4a 100644
--- a/lib/Service/SecretVersionService.php
+++ b/lib/Service/SecretVersionService.php
@@ -7,8 +7,8 @@
  * pre-update snapshots (ciphertext copied verbatim — never decrypted),
  * metadata listing, blob reads gated exactly like head reads, and restore
  * (snapshot the current head first, then set the head to the selected
- * version). restore() changes one row only; the web app restores through
- * share-save and calls it only for a copy holder without a write grade.
+ * version). restore() changes one row only and refuses a copy its holder
+ * may only view; the web app restores through share-save.
  *
  * @category Service
  * @package  OCA\Keepiq\Service
@@ -63,6 +63,7 @@ class SecretVersionService {
 	 * @param SecretVersionAccessGuard $accessGuard The read-authorization guard
 	 * @param LoggerInterface $logger The logger
 	 * @param IDBConnection $db The restore's transaction
+	 * @param ViewOnlyCopyGuard $viewOnlyCopies Refuses a restore of a copy its holder may not write
 	 * @param IEventDispatcher|null $eventDispatcher The audit event dispatcher
 	 * @param AuditEventFactory $auditEvents The audit-event factory
 	 * @param OfflineEditGuard $editGuard Refuses a restore over a head that moved on
@@ -75,6 +76,7 @@ public function __construct(
 		private SecretVersionAccessGuard $accessGuard,
 		private LoggerInterface $logger,
 		private IDBConnection $db,
+		private ViewOnlyCopyGuard $viewOnlyCopies,
 		private ?IEventDispatcher $eventDispatcher = null,
 		private AuditEventFactory $auditEvents = new AuditEventFactory(),
 		private OfflineEditGuard $editGuard = new OfflineEditGuard(),
@@ -212,6 +214,8 @@ public function getVersion(string $versionId, string $userId): SecretVersion {
 	 * @return Secret The updated head
 	 *
 	 * @throws \InvalidArgumentException On not found / not owned / suite blocked / a malformed base
+	 * @throws \OCA\Keepiq\Exception\ForbiddenException When the head is a copy its holder may only view
+	 * @throws \OCA\Keepiq\Exception\NotFoundException When the head is a copy whose source cannot be resolved
 	 * @throws StaleWriteException When the head moved on from `$baseUpdatedAt`, or from the version read
 	 *
 	 * @spec openspec/specs/secret-version-history/spec.md#requirement-list-view-and-restore-versions
@@ -220,6 +224,11 @@ public function getVersion(string $versionId, string $userId): SecretVersion {
 	public function restore(string $versionId, string $userId, ?string $baseUpdatedAt = null): Secret {
 		$version = $this->getVersion(versionId: $versionId, userId: $userId);
 		$secret = $this->reload(id: $version->getSecretId());
+		$this->viewOnlyCopies->assertMayChangeValue(
+			row: $secret,
+			fields: ViewOnlyCopyGuard::VALUE_FIELDS,
+			userId: $userId
+		);
 		$this->editGuard->assertUnchangedSince(secret: $secret, baseUpdatedAt: $baseUpdatedAt);
 
 		$restored = $this->atomic(
diff --git a/lib/Service/ShareSyncService.php b/lib/Service/ShareSyncService.php
index 4653e7792..7723e531f 100644
--- a/lib/Service/ShareSyncService.php
+++ b/lib/Service/ShareSyncService.php
@@ -34,14 +34,20 @@
 use OCA\Keepiq\Db\Secret;
 use OCA\Keepiq\Db\SecretMapper;
 use OCA\Keepiq\Db\ShareTargetMapper;
+use OCA\Keepiq\Exception\ForbiddenException;
 use OCA\Keepiq\Service\ShareSync\ShareSyncGuards;
 use OCA\Keepiq\Service\ShareSync\ShareWriteContext;
 use OCP\AppFramework\Db\DoesNotExistException;
+use OCP\AppFramework\Db\MultipleObjectsReturnedException;
 use OCP\AppFramework\Db\TTransactional;
 use OCP\IDBConnection;
 
 /**
  * Pushes an updated encrypted blob to every recipient of a secret.
+ *
+ * @SuppressWarnings(PHPMD.CouplingBetweenObjects) 14 against a threshold of 13:
+ * telling a source from a received copy takes both outcomes of the share-row
+ * lookup and a refusal of its own.
  */
 class ShareSyncService {
 	use TTransactional;
@@ -120,8 +126,10 @@ public function __construct(
 	 * @return int Number of recipient copies updated.
 	 *
 	 * @throws InvalidArgumentException When validation or optimistic-lock check fails
+	 * @throws ForbiddenException When the secret is a read-only copy or a received copy
 	 *
 	 * @spec openspec/specs/user-sharing/spec.md#requirement-sync-on-update
+	 * @spec openspec/specs/user-sharing/spec.md#requirement-view-only-copies
 	 * @spec openspec/specs/use-only-shares/spec.md#requirement-the-server-refuses-what-it-can-enforce
 	 * @spec openspec/specs/folder-permission-grades/spec.md#requirement-grade-changes-and-non-owner-writes-are-audited
 	 */
@@ -133,6 +141,7 @@ public function syncUpdate(
 	): int {
 		$source = $this->auth->loadSecret(secretId: $secretId);
 		$this->guards->assertWritable(source: $source);
+		$this->assertNotACopy(secret: $source);
 
 		$writesOn = $this->resolveSyncWriter(source: $source, userId: $userId);
 		$this->guards->assertBaseNamed(writesOn: $writesOn, expectedUpdatedAt: $expectedUpdatedAt);
@@ -170,6 +179,31 @@ public function syncUpdate(
 		);
 	}//end syncUpdate()
 
+	/**
+	 * Refuse a sync that starts from a received copy. A copy is owned by its
+	 * holder, so the owner check would pass and the sync would write that copy
+	 * alone, whether or not the holder may write its source.
+	 *
+	 * @param Secret $secret The secret the sync names
+	 *
+	 * @return void
+	 *
+	 * @throws ForbiddenException When the secret is a received copy
+	 *
+	 * @spec openspec/specs/user-sharing/spec.md#requirement-view-only-copies
+	 */
+	private function assertNotACopy(Secret $secret): void {
+		try {
+			$this->mapper->findByRecipientSecret(recipientSecretId: $secret->getId());
+		} catch (DoesNotExistException) {
+			return;
+		} catch (MultipleObjectsReturnedException) {
+			// More than one share row: still a copy.
+		}
+
+		throw new ForbiddenException(message: 'A sync starts from the source secret, not from a copy');
+	}//end assertNotACopy()
+
 	/**
 	 * Attribute a sync by anyone but the owner to the writer on the source
 	 * (§3.3), as a share-save through a copy is: a team writer as
diff --git a/lib/Service/ViewOnlyCopyGuard.php b/lib/Service/ViewOnlyCopyGuard.php
new file mode 100644
index 000000000..843af6ce1
--- /dev/null
+++ b/lib/Service/ViewOnlyCopyGuard.php
@@ -0,0 +1,109 @@
+<?php
+
+/**
+ * Keepiq View-Only Copy Guard
+ *
+ * Refuses a change of the value of a received copy whose holder may not
+ * write its source. Such a change would reach that copy alone and split it
+ * from the source and every other copy (keepiq#1287).
+ *
+ * @category Service
+ * @package  OCA\Keepiq\Service
+ *
+ * @author    Conduction Development Team <dev@conductio.nl>
+ * @copyright 2026 Conduction B.V.
+ * @license   EUPL-1.2 https://joinup.ec.europa.eu/collection/eupl/eupl-text-eupl-12
+ *
+ * @version GIT: <git-id>
+ *
+ * @link https://conduction.nl
+ */
+
+declare(strict_types=1);
+
+namespace OCA\Keepiq\Service;
+
+use OCA\Keepiq\Db\Secret;
+use OCA\Keepiq\Db\SecretMapper;
+use OCA\Keepiq\Db\ShareTargetMapper;
+use OCA\Keepiq\Exception\NotFoundException;
+use OCA\Keepiq\Exception\ViewOnlyCopyException;
+use OCA\Keepiq\Service\ShareSync\ShareWriteContext;
+use OCP\AppFramework\Db\DoesNotExistException;
+use OCP\AppFramework\Db\MultipleObjectsReturnedException;
+
+/**
+ * A copy is view-only for its holder unless they write its source for every
+ * copy, as ShareWriteContext::standingOn() decides it: as its owner or a
+ * delegate, on a team-folder write or manage grade, or as a member of a group
+ * it is shared with in full. This is the rule a sync is authorized on.
+ */
+class ViewOnlyCopyGuard {
+	/**
+	 * The fields that hold a secret's value.
+	 *
+	 * @var string[]
+	 */
+	public const VALUE_FIELDS = ['key', 'login', 'additionalFields'];
+
+	/**
+	 * Constructor.
+	 *
+	 * @param ShareTargetMapper $targets The share targets (copy to source)
+	 * @param SecretMapper $secrets The secrets
+	 * @param ShareWriteContext $contexts The holder's standing on the source
+	 *
+	 * @return void
+	 *
+	 * @spec exclude Constructor wiring only.
+	 */
+	public function __construct(
+		private ShareTargetMapper $targets,
+		private SecretMapper $secrets,
+		private ShareWriteContext $contexts,
+	) {
+	}//end __construct()
+
+	/**
+	 * Refuse a change of the value of a copy its holder may not write.
+	 * A change that leaves the value alone, and a row that is not a copy,
+	 * pass.
+	 *
+	 * @param Secret $row The holder's row, already checked to be theirs
+	 * @param string[] $fields The fields the change writes
+	 * @param string $userId The holder
+	 *
+	 * @return void
+	 *
+	 * @throws NotFoundException When the copy's share row or source cannot be resolved
+	 * @throws ViewOnlyCopyException When the holder may not write the copy's source
+	 *
+	 * @spec openspec/specs/user-sharing/spec.md#requirement-view-only-copies
+	 */
+	public function assertMayChangeValue(Secret $row, array $fields, string $userId): void {
+		if (array_intersect(self::VALUE_FIELDS, $fields) === []) {
+			return;
+		}
+
+		try {
+			$target = $this->targets->findByRecipientSecret(recipientSecretId: $row->getId());
+		} catch (DoesNotExistException) {
+			return;
+		} catch (MultipleObjectsReturnedException) {
+			throw new NotFoundException(message: 'Secret not found');
+		}
+
+		try {
+			$source = $this->secrets->findById($target->getSourceSecretId());
+		} catch (DoesNotExistException|MultipleObjectsReturnedException) {
+			throw new NotFoundException(message: 'Secret not found');
+		}
+
+		// Not through resolveSyncWriter(): the services this guards must not
+		// depend on the sync.
+		$standing = $this->contexts->standingOn(source: $source, userId: $userId);
+		if ($this->contexts->writesForEveryone(standing: $standing) === false) {
+			throw new ViewOnlyCopyException();
+		}
+	}//end assertMayChangeValue()
+}//end class
diff --git a/openspec/changes/sharing-atomic-share-save/design.md b/openspec/changes/sharing-atomic-share-save/design.md
index 4213ab923..f07ea8b84 100644
--- a/openspec/changes/sharing-atomic-share-save/design.md
+++ b/openspec/changes/sharing-atomic-share-save/design.md
@@ -5,7 +5,7 @@
 At development `94ad83fa`:
 
 - `PUT /api/v1/secrets/{id}` (`SecretUpdateController`) saves the caller's own row and checks an optional `baseUpdatedAt`.
-- `PUT /api/v1/secrets/{sourceSecretId}/sync` (`ShareSyncService::syncUpdate`) writes recipient copies in its own transaction; the caller is the owner, a delegate or a write-grade member (`resolveSyncWriter`).
+- `PUT /api/v1/secrets/{sourceSecretId}/sync` (`ShareSyncService::syncUpdate`) writes recipient copies in its own transaction; the caller is the owner, a delegate or a write-grade member (`resolveSyncWriter`), and a sync that names a received copy instead of the source is refused (#1287).
 - `PUT /api/v1/federated-shares/{id}` (`FederatedShareService::update`) writes one partner share's ciphertext without a version check and notifies the partner through `FederatedNotificationDelivery`.
 - `POST /api/v1/shares/recipient-certificates` returns certificates for at most 100 users per call; `POST /api/v1/federation/recipient-certificate` returns a partner certificate that the browser verifies against the pinned root.
 
@@ -22,7 +22,7 @@ At development `94ad83fa`:
 
 ## Decisions
 
-**D1. `{id}` is always the caller's own row.** On the owner path it is the source; on the copy-editor path it is the caller's recipient copy, and the caller must be the owner, a delegate or hold a write or manage grade on the source. A copy holder without one keeps using `PUT /api/v1/secrets/{id}` for their own copy only.
+**D1. `{id}` is always the caller's own row.** On the owner path it is the source; on the copy-editor path it is the caller's recipient copy, and the caller must be the owner, a delegate or hold a write or manage grade on the source. A copy holder without one holds a view-only copy (keepiq#1287): the browser refuses their share-save before sending anything, and `PUT /api/v1/secrets/{id}` refuses a value change of that copy with 428 `view_only`, so a view-only copy can't drift from its source.
 
 **D2. Compare-and-set inside the transaction.** The server advances `updated_at` with `UPDATE … WHERE id = :id AND updated_at = :base` and treats 0 affected rows as stale. On the copy-editor path the source is advanced first, so an owner save and a copy save of one secret queue up instead of deadlocking. The completeness check runs again under that lock. The new version is at least the base plus one second, because `updated_at` is stored in whole seconds.
 
@@ -34,7 +34,7 @@ At development `94ad83fa`:
 
 **D6. Notify after commit, queued in the row.** Writing a partner share stores `SHARE_UPDATED` as its pending notification inside the transaction; after the commit the server delivers it, and `RetryFederatedNotificationsJob` picks up whatever a crash left behind. The stored notification is leased for 60 seconds, so the retry job doesn't send it again while the first send is still running. A share revoked meanwhile is never overwritten.
 
-**D7. A restore is a share-save.** The browser decrypts the version and sends it as a full-value patch with `restoredFrom`, so the restored value reaches every copy in the same transaction, and the server records the restore audit event there. A copy holder without a write grade can only change their own copy, so they restore through `POST /api/v1/versions/{id}/restore`, which also records the restore and now takes an optional `baseUpdatedAt`.
+**D7. A restore is a share-save.** The browser decrypts the version and sends it as a full-value patch with `restoredFrom`, so the restored value reaches every copy in the same transaction, and the server records the restore audit event there. A copy holder without a write grade can't restore: the web app offers no Restore on a view-only copy, and `POST /api/v1/versions/{id}/restore` refuses it with 428 `view_only`. That route changes one row only, records the restore and takes an optional `baseUpdatedAt`; the web app doesn't use it.
 
 ## Security and zero-knowledge
 
diff --git a/openspec/changes/sharing-atomic-share-save/specs/folder-permission-grades/spec.md b/openspec/changes/sharing-atomic-share-save/specs/folder-permission-grades/spec.md
index 868cfc1c0..535302a00 100644
--- a/openspec/changes/sharing-atomic-share-save/specs/folder-permission-grades/spec.md
+++ b/openspec/changes/sharing-atomic-share-save/specs/folder-permission-grades/spec.md
@@ -1,7 +1,7 @@
 ## MODIFIED Requirements
 
 ### Requirement: A write-grade member may update a folder secret for all recipients
-The system MUST allow a `write`-grade member to update a folder secret such that the change reaches the source and every local recipient in one share-save on the copy-editor path. The value MUST be re-encrypted under each holder's public certificate by the writer's client; the server MUST NOT decrypt, re-encrypt, or hold plaintext. Partner shares stay with the owner's next save.
+The system MUST allow a `write`-grade member to update a folder secret such that the change reaches the source and every local recipient in one share-save on the copy-editor path. The value MUST be re-encrypted under each holder's public certificate by the writer's client; the server MUST NOT decrypt, re-encrypt, or hold plaintext. Partner shares stay with the owner's next save. A member whose effective grade is `read` holds a view-only copy (user-sharing, "View-Only Copies"): they MUST NOT change its value, neither for every holder nor for their own copy alone.
 
 #### Scenario: Write-grade member rotates a shared credential
 - GIVEN user W holds a `write` grade on a folder containing secret S shared to recipients R
@@ -12,3 +12,8 @@ The system MUST allow a `write`-grade member to update a folder secret such that
 - GIVEN user V holds a `read` grade on a folder containing secret S
 - WHEN V attempts a value update that would propagate to recipients
 - THEN the system MUST reject the request and change no recipient's copy
+
+#### Scenario: Read-grade member cannot change their own copy
+- GIVEN user V holds a `read` grade on a folder containing secret S
+- WHEN V sends `PUT /api/v1/secrets/{id}` for their copy of S with a new value
+- THEN the system MUST answer 428 with `error` `view_only` and leave V's copy unchanged
diff --git a/openspec/changes/sharing-atomic-share-save/specs/offline-edit-queue/spec.md b/openspec/changes/sharing-atomic-share-save/specs/offline-edit-queue/spec.md
index 45e9f94ed..8bb01ac66 100644
--- a/openspec/changes/sharing-atomic-share-save/specs/offline-edit-queue/spec.md
+++ b/openspec/changes/sharing-atomic-share-save/specs/offline-edit-queue/spec.md
@@ -25,13 +25,14 @@ When the administrator setting `offline_edits_enabled` is true and the vault is
 
 ### Requirement: Failed entries are kept, never dropped silently
 
-A replay answered with 403 or 404, a share-save refused with 400, or a share-save stopped by an unreachable partner or by the partner lookup limit MUST move the entry to a failed list where the user can copy their values (decrypted in the browser) or discard the entry, with the reason shown next to it, also after a reload. An entry stopped by an unreachable partner or the lookup limit MUST also offer to try again. A 423 or a network error MUST keep the entry queued. A failed entry MUST NOT stop the replay of the entries after it.
+A replay answered with 403 or 404, a share-save refused with 400, a share-save stopped by an unreachable partner or by the partner lookup limit, or a share-save of a copy the user may only view (user-sharing, "View-Only Copies") MUST move the entry to a failed list where the user can copy their values (decrypted in the browser) or discard the entry, with the reason shown next to it, also after a reload. Offline the web app doesn't know a copy's grade, so it lets the user edit any copy; the replay MUST refuse a value change of a view-only copy in the browser, before anything is sent. An entry stopped by an unreachable partner or the lookup limit MUST also offer to try again; one refused as view-only MUST NOT, as no retry can save it. A 423 or a network error MUST keep the entry queued. A failed entry MUST NOT stop the replay of the entries after it.
 
 #### Scenario: Write grade removed while offline
 
 - **GIVEN** a team-folder member who edited a folder secret offline, and whose grade was lowered to read meanwhile
 - **WHEN** the replay runs
-- **THEN** the replay MUST save the change to the member's own copy only, since the queue doesn't know the grade the edit was made under, and MUST NOT write the source or any other copy
+- **THEN** the replay MUST send nothing for the entry and write neither the member's copy, the source nor any other copy
+- **AND** the entry MUST move to the failed list with the reason that the secret is shared with the member to view only, with copy and discard actions and without one to try again
 
 #### Scenario: A refused share-save is kept
 
@@ -94,7 +95,7 @@ A queued update that changes a value, login or additional fields MUST be replaye
 - **GIVEN** a queued edit of a copy whose replay was refused with 409 `stale`, because the owner saved the secret meanwhile
 - **WHEN** the user keeps their change, before or after a reload
 - **THEN** the replay MUST send the copy version and the source version that 409 named, and save when neither has moved again
-- **AND** when the copy was written after its source, such as by a plain update of the copy, the 409 names the source version the edit was made from, so keeping the change MAY first be refused with 409 `stale_source` and cost the user one more choice before it saves
+- **AND** when the copy was written after its source, such as by a change of only its folder, the 409 names the source version the edit was made from, so keeping the change MAY first be refused with 409 `stale_source` and cost the user one more choice before it saves
 
 #### Scenario: A pending sync from before the change is finished
 
diff --git a/openspec/changes/sharing-atomic-share-save/specs/secret-version-history/spec.md b/openspec/changes/sharing-atomic-share-save/specs/secret-version-history/spec.md
index 0ba2b3991..0a8396efe 100644
--- a/openspec/changes/sharing-atomic-share-save/specs/secret-version-history/spec.md
+++ b/openspec/changes/sharing-atomic-share-save/specs/secret-version-history/spec.md
@@ -1,17 +1,22 @@
 ## MODIFIED Requirements
 
 ### Requirement: List, view, and restore versions
-The system MUST let a user list versions newest-first (metadata only), view a version via client-side decryption identical to a head read, and restore a version — creating a new head version and reaching every copy in the same share-save.
+The system MUST let a user list versions newest-first (metadata only), view a version via client-side decryption identical to a head read, and restore a version — creating a new head version and reaching every copy in the same share-save. The holder of a view-only copy (user-sharing, "View-Only Copies") MAY list and view its versions but MUST NOT restore one: the web app MUST NOT offer Restore on it, and `POST /api/v1/versions/{id}/restore` MUST answer 428 with `error` `view_only` and change nothing.
 
 #### Scenario: Restore becomes a new head and syncs
 - GIVEN a secret shared with a recipient and a prior version `V`
 - WHEN the owner restores `V`
 - THEN the current head MUST first be snapshotted, the head MUST become `V`'s values, and the recipient's copy MUST hold `V`'s values in the same transaction
 
+#### Scenario: A view-only holder cannot restore
+- GIVEN a secret shared directly with Bob, whose copy has a prior version `V`
+- WHEN Bob sends `POST /api/v1/versions/{id}/restore` for `V`
+- THEN the system MUST answer 428 with `error` `view_only`, and Bob's copy and its version list MUST stay as they were
+
 ## ADDED Requirements
 
 ### Requirement: A restore is one share-save of the version
-The web app MUST restore a version by decrypting it in the browser and sending it as one share-save with `restoredFrom` and the version's whole value, based on the head's `updatedAt`. A refused or failed share-save MUST leave the head, every copy and the version history unchanged and MUST show an error. A copy holder without a write grade restores only their own copy, through the version restore route, which records the restore too. That route MUST accept an optional `baseUpdatedAt` and, when it differs from the row's `updatedAt`, change nothing and answer 409 as a stale update does. With or without a base, a save that changes the row between the route's read and its write MUST make the route change nothing and answer 409 too.
+The web app MUST restore a version by decrypting it in the browser and sending it as one share-save with `restoredFrom` and the version's whole value, based on the head's `updatedAt`. A refused or failed share-save MUST leave the head, every copy and the version history unchanged and MUST show an error. The version restore route, `POST /api/v1/versions/{id}/restore`, changes one row only and records the restore too; the web app doesn't use it. That route MUST accept an optional `baseUpdatedAt` and, when it differs from the row's `updatedAt`, change nothing and answer 409 as a stale update does. With or without a base, a save that changes the row between the route's read and its write MUST make the route change nothing and answer 409 too.
 
 #### Scenario: A failed restore changes nothing
 - GIVEN a shared secret whose head changed in another browser after this one opened it
diff --git a/openspec/changes/sharing-atomic-share-save/specs/user-sharing/spec.md b/openspec/changes/sharing-atomic-share-save/specs/user-sharing/spec.md
index 3bfc92c9e..70f2732d6 100644
--- a/openspec/changes/sharing-atomic-share-save/specs/user-sharing/spec.md
+++ b/openspec/changes/sharing-atomic-share-save/specs/user-sharing/spec.md
@@ -1,7 +1,7 @@
 ## MODIFIED Requirements
 
 ### Requirement: Sync on Update
-When the owner, or a recipient allowed to write the source, updates the value, login or additional fields of a shared secret, the change MUST reach every copy in the same request, through `PUT /api/v1/secrets/{id}/share-save`. The browser MUST encrypt the change for each holder's certificate; the server MUST NOT decrypt or re-encrypt anything.
+When the owner, or a recipient allowed to write the source, updates the value, login or additional fields of a shared secret, the change MUST reach every copy in the same request, through `PUT /api/v1/secrets/{id}/share-save`. The browser MUST encrypt the change for each holder's certificate; the server MUST NOT decrypt or re-encrypt anything. Any other recipient's copy is view-only (see "View-Only Copies").
 
 #### Scenario: Owner updates shared secret
 - GIVEN a secret is shared with one or more users
@@ -14,7 +14,7 @@ When the owner, or a recipient allowed to write the source, updates the value, l
 - GIVEN a secret has been shared with user B, who holds a write grade on it: a `write` or `manage` team-folder grade, or membership of a group the secret is shared with in full (not use-only)
 - WHEN user B updates their copy of the secret
 - THEN the browser MUST encrypt the updated value for the original owner and all other recipients and send it in one share-save
-- AND a recipient who holds the secret through a direct share only, without a write grade, MUST change only their own copy
+- AND a recipient without a write grade MUST NOT be able to change the value of their copy (see "View-Only Copies")
 
 #### Scenario: Only the changed fields reach the copies
 - GIVEN a shared secret with a login and additional fields
diff --git a/openspec/parity/capabilities.json b/openspec/parity/capabilities.json
index 688298e69..202e7e769 100644
--- a/openspec/parity/capabilities.json
+++ b/openspec/parity/capabilities.json
@@ -1513,7 +1513,7 @@
       "nextcloud-passwords": "yes",
       "built": {
         "state": "built",
-        "evidence": "lib/Service/SecretService.php:892 versionService->snapshot on every user update; src/components/SecretDetailSidebar.vue:781 VersionHistoryPanel -> src/store/modules/secretVersion.js:42 GET /api/v1/secrets/{secretId}/versions, :68 view, :108 POST /api/v1/versions/{id}/restore (appinfo/routes.php:330-332) -> lib/Controller/SecretVersionController.php:139; src/components/VersionHistoryPanel.vue:155 restore after VersionRestoreDialog confirm",
+        "evidence": "lib/Service/SecretService.php:1075 versionService->snapshot on every user update; src/components/SecretDetailSidebar.vue:907 VersionHistoryPanel -> src/store/modules/secretVersion.js:51 GET /api/v1/secrets/{secretId}/versions, :78 view, :114 restore as saveShared with restoredFrom -> PUT /api/v1/secrets/{id}/share-save (appinfo/routes.php:184) -> lib/Controller/ShareSaveController.php:90; src/components/VersionHistoryPanel.vue:156 restore after VersionRestoreDialog confirm",
         "owner": "ConductionNL/keepiq",
         "reachedOn": "SecretList page (/secrets/:id) -> detail sidebar -> Version history panel -> View / Restore",
         "note": "Each update snapshots the prior value; the owner can view an earlier version decrypted in session and restore it after a confirm, with the current value kept as a new version.",
diff --git a/openspec/specs/folder-permission-grades/spec.md b/openspec/specs/folder-permission-grades/spec.md
index bbb88f5b4..0ba3d9b0a 100644
--- a/openspec/specs/folder-permission-grades/spec.md
+++ b/openspec/specs/folder-permission-grades/spec.md
@@ -39,7 +39,7 @@ The system MUST record a `read` (default), `write` or `manage` grade on every te
 - **THEN** Bob's grade MUST become `write`
 
 ### Requirement: A write-grade member may update a folder secret for all recipients
-The system MUST allow a `write`-grade member to update a folder secret such that the change propagates to every recipient. The value MUST be re-encrypted under each recipient's public certificate by the writer's client; the server MUST NOT decrypt, re-encrypt, or hold plaintext.
+The system MUST allow a `write`-grade member to update a folder secret such that the change propagates to every recipient. The value MUST be re-encrypted under each recipient's public certificate by the writer's client; the server MUST NOT decrypt, re-encrypt, or hold plaintext. A member whose effective grade is `read` holds a view-only copy (user-sharing, "View-Only Copies"): they MUST NOT change its value, neither for every holder nor for their own copy alone.
 
 #### Scenario: Write-grade member rotates a shared credential
 - GIVEN user W holds a `write` grade on a folder containing secret S shared to recipients R
@@ -52,6 +52,11 @@ The system MUST allow a `write`-grade member to update a folder secret such that
 - WHEN V attempts a value update that would propagate to recipients
 - THEN the system MUST reject the request and change no recipient's copy
 
+#### Scenario: Read-grade member cannot change their own copy
+- GIVEN user V holds a `read` grade on a folder containing secret S
+- WHEN V sends `PUT /api/v1/secrets/{id}` for their copy of S with a new value
+- THEN the system MUST answer 428 with `error` `view_only` and leave V's copy unchanged
+
 ### Requirement: Effective grade is the highest grade along the ancestor folder chain
 
 The system MUST compute a member's effective grade for a secret or a team folder as the highest grade granted by any ancestor team folder, with `manage` above `write` above `read`. A subfolder MAY raise the grade; it MUST NOT lower it below any ancestor's grade.
diff --git a/openspec/specs/offline-edit-queue/spec.md b/openspec/specs/offline-edit-queue/spec.md
index 0a89c212d..9dd9534be 100644
--- a/openspec/specs/offline-edit-queue/spec.md
+++ b/openspec/specs/offline-edit-queue/spec.md
@@ -67,13 +67,14 @@ When the browser is online and the vault is unlocked, the web app MUST replay qu
 
 ### Requirement: Failed entries are kept, never dropped silently
 
-A replay answered with 403 or 404 MUST move the entry to a failed list where the user can copy their values (decrypted in the browser) or discard the entry. A 423 or a network error MUST keep the entry queued. An entry whose owner row saved but whose recipient sync failed MUST retry only the sync step.
+A replay answered with 403 or 404, or a value change of a copy the user may only view (user-sharing, "View-Only Copies"), MUST move the entry to a failed list where the user can copy their values (decrypted in the browser) or discard the entry. A 423 or a network error MUST keep the entry queued. An entry whose owner row saved but whose recipient sync failed MUST retry only the sync step.
 
 #### Scenario: Write grade removed while offline
 
 - **GIVEN** a team-folder member who edited a folder secret offline, and whose grade was lowered to read meanwhile
-- **WHEN** the replay's sync request is refused with 403
-- **THEN** the entry MUST appear under "Changes that could not sync" with copy and discard actions
+- **WHEN** the replay runs
+- **THEN** the replay MUST send nothing for the entry, since the copy is now view-only
+- **AND** the entry MUST appear under "Changes that could not sync" with copy and discard actions
 
 ### Requirement: Pending changes block logout and rotation
 
diff --git a/openspec/specs/secret-requests/spec.md b/openspec/specs/secret-requests/spec.md
index 9e5f7d465..df0972d92 100644
--- a/openspec/specs/secret-requests/spec.md
+++ b/openspec/specs/secret-requests/spec.md
@@ -145,6 +145,13 @@ Anyone with the fill-in link MUST be able to submit values for the requested fie
 - THEN the SecretRequest MUST remain `pending` so the link can be used again
 - AND it MUST NOT be reported as `fulfilled`
 
+#### Scenario: A fill onto a secret its owner may not change is refused
+
+- GIVEN a pending request whose linked Secret is a copy its owner may not change: shared with them to view only (user-sharing, "View-Only Copies"), use-only, a read-only copy from another organisation, or a copy whose source can no longer be found
+- WHEN an external party submits values via the token link
+- THEN the system MUST store nothing and answer 428 with `error` `forbidden` and the message "The secret this request writes to cannot be changed", which says nothing about the owner's access
+- AND the SecretRequest MUST remain `pending`
+
 #### Scenario: Requester cannot read after submission
 - GIVEN a SecretRequest has been fulfilled
 - WHEN the requester retrieves the linked Secret
diff --git a/openspec/specs/secret-version-history/spec.md b/openspec/specs/secret-version-history/spec.md
index 1755b7431..27bab850d 100644
--- a/openspec/specs/secret-version-history/spec.md
+++ b/openspec/specs/secret-version-history/spec.md
@@ -20,13 +20,18 @@ The system MUST snapshot a secret's pre-update state as an immutable version whe
 - THEN a version row MUST retain `C0` with the actor and prior encryption_suite_id, and the head MUST hold `C1`
 
 ### Requirement: List, view, and restore versions
-The system MUST let a user list versions newest-first (metadata only), view a version via client-side decryption identical to a head read, and restore a version — creating a new head version and propagating via sync-on-update.
+The system MUST let a user list versions newest-first (metadata only), view a version via client-side decryption identical to a head read, and restore a version — creating a new head version and propagating via sync-on-update. The holder of a view-only copy (user-sharing, "View-Only Copies") MAY list and view its versions but MUST NOT restore one: the web app MUST NOT offer Restore on it, and `POST /api/v1/versions/{id}/restore` MUST answer 428 with `error` `view_only` and change nothing.
 
 #### Scenario: Restore becomes a new head and syncs
 - GIVEN a secret shared with a recipient and a prior version `V`
 - WHEN the owner restores `V`
 - THEN the current head MUST first be snapshotted, the head MUST become `V`'s values, and the change MUST propagate to the recipient's copy
 
+#### Scenario: A view-only holder cannot restore
+- GIVEN a secret shared directly with Bob, whose copy has a prior version `V`
+- WHEN Bob sends `POST /api/v1/versions/{id}/restore` for `V`
+- THEN the system MUST answer 428 with `error` `view_only`, and Bob's copy and its version list MUST stay as they were
+
 ### Requirement: Admin-configurable retention and pruning
 The system MUST bound retention by count and/or age (defaults 20 versions / 365 days, 0 = unlimited), administrator-configurable, pruned in bounded batches by a background job that never touches the head.
 
diff --git a/openspec/specs/secrets-write-ui/spec.md b/openspec/specs/secrets-write-ui/spec.md
index 85179c377..21369ec66 100644
--- a/openspec/specs/secrets-write-ui/spec.md
+++ b/openspec/specs/secrets-write-ui/spec.md
@@ -80,6 +80,13 @@ Until this requirement, the only writers were the write-for-application dialog,
 import, and an external recipient filling a secret request — so obtaining one on
 your own secret meant asking a stranger to submit it.
 
+On a copy shared with the user to view only (user-sharing, "View-Only Copies"), the detail view MUST NOT offer Edit and MUST say "Shared with you to view only. Ask its owner for edit rights to change it."; when the edit dialog learns from the write-context that the copy is view-only, it MUST show the same note and keep Save disabled. Offline the copy's grade is not known, so Edit stays available there and the replay refuses the change (offline-edit-queue).
+
+#### Scenario: A view-only copy offers no Edit
+- **GIVEN** a secret shared directly with the user
+- **WHEN** the user opens their copy online
+- **THEN** the detail view MUST NOT show Edit and MUST say that it is shared with them to view only
+
 #### Scenario: Edit a secret's value
 - **WHEN** the user edits a secret, changes the value, and saves
 - **THEN** the browser MUST RSA-encrypt the new value and PUT it
diff --git a/openspec/specs/secrets/spec.md b/openspec/specs/secrets/spec.md
index 37fd570f5..e5f7c7f91 100644
--- a/openspec/specs/secrets/spec.md
+++ b/openspec/specs/secrets/spec.md
@@ -121,7 +121,7 @@ The system MUST decrypt and return secret fields when the user has their master
 - THEN the app MUST send them to the lock screen, keeping the requested route as the return address
 
 ### Requirement: Update Secret
-The system MUST allow a user to update any field of a secret they own, including moving it to a different folder. Updated encrypted fields MUST be re-encrypted before storage.
+The system MUST allow a user to update any field of a secret they own, including moving it to a different folder. Updated encrypted fields MUST be re-encrypted before storage. On a copy shared with the user to view only (user-sharing, "View-Only Copies"), `PUT /api/v1/secrets/{id}` MUST refuse a change of `key`, `login` or `additionalFields` with HTTP 428 and `error` `view_only`, and change nothing; a field sent with the value already stored is not a change, and an update that changes only other fields MUST still save.
 
 #### Scenario: Owner updates a secret
 - GIVEN a user owns a secret
@@ -129,6 +129,12 @@ The system MUST allow a user to update any field of a secret they own, including
 - THEN the system MUST persist the change
 - AND any updated encrypted fields MUST be re-encrypted before storage
 
+#### Scenario: A new value for a view-only copy is refused
+- GIVEN a copy shared with Bob to view only
+- WHEN Bob sends `PUT /api/v1/secrets/{id}` with a new `key` and a new `folderId`
+- THEN the system MUST answer 428 with `code` and `error` `view_only` and the message "Shared with you to view only. Ask its owner for edit rights to change it."
+- AND neither the value nor the folder MUST change
+
 ### Requirement: Delete Secret
 The system MUST allow a user to delete a secret they own. Deletion MUST cascade to any SecretShares derived from this secret and any SecretRequests linked to it.
 
diff --git a/openspec/specs/sharing-group/spec.md b/openspec/specs/sharing-group/spec.md
index 2b9002747..54769773a 100644
--- a/openspec/specs/sharing-group/spec.md
+++ b/openspec/specs/sharing-group/spec.md
@@ -90,13 +90,14 @@ The e2e test keeps the copy through a direct share, which leaving the group does
 - **THEN** Alice MUST be notified that Dan can now change the secret for everyone, with nothing to approve, and no second share MUST be created for Dan
 - **AND** the write context of Dan's copy MUST answer `effectiveGrade: 'write'` at once, before Alice answers
 
-#### Scenario: A direct-share recipient changes only their own copy
+#### Scenario: A direct-share recipient cannot change their copy
 
 @e2e tests/e2e/workflows/share-save.spec.ts
 
 - **GIVEN** Alice also shared the secret directly with Dan, who is in no group it is shared with
-- **WHEN** Dan saves a change to his copy
+- **WHEN** Dan tries to save a change to his copy
 - **THEN** the write context MUST NOT answer `write` for Dan, and a share-save for every copy MUST be refused
+- **AND** his copy MUST be view-only, so a change of its value through `PUT /api/v1/secrets/{id}` MUST be refused with 428 `view_only` (see `user-sharing`)
 
 #### Scenario: Knowing a copy's id reveals nothing
 
diff --git a/openspec/specs/user-sharing/spec.md b/openspec/specs/user-sharing/spec.md
index 591def78e..c9daeb5e7 100644
--- a/openspec/specs/user-sharing/spec.md
+++ b/openspec/specs/user-sharing/spec.md
@@ -9,7 +9,7 @@
 
 @e2e exclude No user-sharing UI is built in v0.1; all sharing scenarios require the encrypted secret CRUD surface (itself unbuilt) — covered by integration tests, not Playwright UI flows.
 
-A user can share a secret with another Nextcloud user or with a Nextcloud user group. Because encryption is asymmetric, sharing works by creating an encrypted copy of the secret using the recipient's public certificate. Both the original and all shared copies stay in sync: when the owner, a delegate or a recipient who holds a write grade on it updates the secret, the change is written back to all copies.
+A user can share a secret with another Nextcloud user or with a Nextcloud user group. Because encryption is asymmetric, sharing works by creating an encrypted copy of the secret using the recipient's public certificate. Both the original and all shared copies stay in sync: when the owner, a delegate or a recipient who holds a write grade on it updates the secret, the change is written back to all copies. Any other recipient's copy is view-only.
 
 Group sharing expands statically to individual shares at share time. When new members join a group, the owner is notified and asked to approve adding those who don't hold a copy yet. When members leave a group, their group-derived shares are automatically revoked. A direct share is never created or removed by a change in group membership. What its holder may do with their copy does follow membership, though: a holder who is in a group the secret is shared with in full saves for everyone, also when they joined that group after their copy was made. The owner is then told, with nothing to approve (see `sharing-group`).
 
@@ -191,7 +191,7 @@ The marks MUST come from an endpoint that takes the search term and the user ids
 - WHEN it reaches the endpoint
 - THEN the system MUST refuse it with 400
 ### Requirement: Sync on Update
-When the owner, a delegate, or a recipient who holds a write grade on it updates a shared secret, the change MUST be propagated to all copies.
+When the owner, a delegate, or a recipient who holds a write grade on it updates a shared secret, the change MUST be propagated to all copies. Any other recipient's copy is view-only (see "View-Only Copies"). A sync names the source secret; one that names a received copy MUST be refused.
 
 #### Scenario: Owner updates shared secret
 - GIVEN a secret is shared with one or more users
@@ -203,7 +203,28 @@ When the owner, a delegate, or a recipient who holds a write grade on it updates
 - GIVEN a secret has been shared with user B, who holds a write grade on it: a `write` or `manage` team-folder grade, or membership of a group the secret is shared with in full (not use-only)
 - WHEN user B updates their copy of the secret
 - THEN the system MUST re-encrypt the updated value for the original owner and all other recipients
-- AND a recipient who holds the secret through a direct share only, without a write grade, MUST change only their own copy
+- AND a recipient without a write grade MUST NOT be able to change the value of their copy (see "View-Only Copies")
+
+### Requirement: View-Only Copies
+A received copy is view-only for its holder unless they may write its source: as its owner or a delegate, with an effective `write` or `manage` grade on a team folder that holds it, or as a member of a group the source is shared with through a full group share that has not expired (see `sharing-group`). A team-folder Viewer (`read`), a recipient of a direct share only, and a member of a group whose share is use-only or expired hold view-only copies. The system MUST refuse a change of the value, login or additional fields of a view-only copy and change nothing, whether it comes through `PUT /api/v1/secrets/{id}`, `POST /api/v1/versions/{id}/restore`, `PUT /api/v1/secrets/{id}/sync` or a fill of a secret request for that copy. A field sent with the value already stored is not a change. The update and the restore MUST answer HTTP 428 with `code` and `error` set to `view_only` and the message "Shared with you to view only. Ask its owner for edit rights to change it." A sync starts from the source, so a sync that names any received copy MUST answer 428 with `error` `forbidden`, whatever the holder's grade. A change of any other field, such as the folder, MUST still save. A suite migration re-seals the copy under its holder's new key with values encrypted in their browser; the server can't tell a re-seal from a new value, so it doesn't check it.
+
+The web app MUST read the copy's write-context to tell a view-only copy apart. On a view-only copy it MUST NOT offer Edit, a version restore or asking for new values, MUST say "Shared with you to view only. Ask its owner for edit rights to change it.", and MUST keep moving it to a folder, starring, archiving, tagging and deleting it. Its edit dialog MUST NOT save, so the web app offers no way to change its name or URL either, as on a read-only copy from another organisation. A share-save of a view-only copy MUST be refused in the browser before anything is sent.
+
+#### Scenario: A direct-share recipient cannot change the value
+- GIVEN a secret Alice shared directly with Bob
+- WHEN Bob sends `PUT /api/v1/secrets/{id}` for his copy with a new value
+- THEN the system MUST answer 428 with `error` `view_only` and leave Bob's copy, Alice's secret and every other copy unchanged
+
+#### Scenario: A view-only holder still files their copy
+- GIVEN a secret Alice shared directly with Bob, and a folder of Bob's
+- WHEN Bob moves his copy to that folder and archives it
+- THEN the system MUST store the new folder and the archive, and the value MUST stay as Alice saved it
+
+#### Scenario: A team-folder Viewer sees no Edit
+- GIVEN user V holds a `read` grade on a team folder containing secret S
+- WHEN V opens their copy of S
+- THEN the detail view MUST NOT show Edit, Restore or "Ask for new values"
+- AND it MUST say that the secret is shared with V to view only
 
 ### Requirement: Share with Group (Static Expansion)
 The system MUST allow a secret owner to share a secret with a Nextcloud user group. At the moment of sharing, the system MUST create an individual SecretShare (with `group_share_id` set) for each current member of the group who has an active EncryptionSuite. A GroupShare record MUST be created to track the relationship.
@@ -466,6 +487,7 @@ The system MUST allow the original owner to revoke a share, removing the recipie
 - [ ] The copy is encrypted with the recipient's public certificate — the sender cannot read it after sharing
 - [ ] The recipient receives a Nextcloud notification when a secret is shared with them
 - [ ] Updates by the owner, a delegate or a recipient who holds a write grade on it propagate to all copies of the shared secret
+- [ ] A recipient without a write grade cannot change the value of their copy
 - [ ] The original owner can revoke a share at any time
 - [ ] Revoking a share deletes the recipient's copy
 - [ ] Sharing fails with a clear error if the recipient has no EncryptionSuite
diff --git a/src/components/SecretDetailSidebar.vue b/src/components/SecretDetailSidebar.vue
index 1980dfc55..dca50e82f 100644
--- a/src/components/SecretDetailSidebar.vue
+++ b/src/components/SecretDetailSidebar.vue
@@ -77,6 +77,7 @@
 						(!offlineReadOnly || offlineEditable)
 						&& !useOnly
 						&& !federatedReadOnly
+						&& !viewOnlyCopy
 					"
 					variant="primary"
 					data-testid="secret-detail-edit"
@@ -220,6 +221,20 @@
 					)
 				}}
 			</NcNoteCard>
+			<!-- A copy without a write grade: its holder files, stars and
+			     archives it, but its value changes only through a writer.
+			     A use-only copy has its own note above. -->
+			<NcNoteCard
+				v-if="viewOnlyCopy && !useOnly"
+				type="info"
+				data-testid="secret-detail-view-only">
+				{{
+					t(
+						'keepiq',
+						'Shared with you to view only. Ask its owner for edit rights to change it.',
+					)
+				}}
+			</NcNoteCard>
 			<p
 				v-if="accessEndsOn"
 				class="secret-detail__team-badge"
@@ -826,7 +841,9 @@
 						{{ t('keepiq', 'Requests') }}
 					</h3>
 
-					<div class="secret-detail__requests-actions">
+					<div
+						v-if="!viewOnlyCopy"
+						class="secret-detail__requests-actions">
 						<!-- This action always targets THIS Secret, so the label
 					     says which of the two things it does. Asking for a
 					     credential you do not have yet starts from the vault,
@@ -890,7 +907,7 @@
 								<VersionHistoryPanel
 									v-if="!useOnly"
 									:secretId="secretId"
-									:canManage="isOwner"
+									:canManage="isOwner && !viewOnlyCopy"
 									@restored="load" />
 							</div>
 						</div>
@@ -994,6 +1011,7 @@ import { useFolderStore } from '../store/modules/folder.js'
 import { useOfflineStore } from '../store/modules/offline.js'
 import { useSecretStore } from '../store/modules/secret.js'
 import { useSecretTypeStore } from '../store/modules/secretType.js'
+import { isViewOnlyCopy } from '../utils/copyGrade.js'
 import { isRefusal } from '../utils/refusal.js'
 import { secretTypeLabel } from '../utils/secretTypes.js'
 import { isUseOnly } from '../utils/shareRestriction.js'
@@ -1090,6 +1108,8 @@ export default {
 			error: '',
 			requestDialogOpen: false,
 			teamWritable: false,
+			/** A copy without a write grade: no edit, restore or new request. */
+			viewOnlyCopy: false,
 			/** Per-field reveal state for the card rows (masked by default). */
 			cardRevealed: { number: false, cvv: false, pin: false },
 			/** Reveal state for the identity's BSN row (masked by default). */
@@ -1600,28 +1620,36 @@ export default {
 		 * @spec openspec/specs/secrets/spec.md#requirement-read-secret
 		 */
 		async load() {
+			const id = this.secretId
 			this.loading = true
 			this.error = ''
 			try {
-				this.secret = await useSecretStore().fetchSecret(this.secretId)
+				// Fetched together and applied together, so the flags below
+				// always describe the secret on show and a view-only copy
+				// never shows Edit while its write-context is on its way.
+				const [secret, context] = await Promise.all([
+					useSecretStore().fetchSecret(id),
+					this.fetchWriteContext(id),
+				])
+				// An answer for a secret the sidebar has left is dropped.
+				if (id !== this.secretId) {
+					return
+				}
+				this.secret = secret
 				// Retire the previous secret's decrypted plaintext with the
 				// secret it came from. See `secretLoadToken` in data().
 				this.secretLoadToken += 1
 				// Write-grade badge (folder-permission-grades §4.3) — a
-				// copy the user may team-write shows the sync warning.
-				try {
-					const { useShareStore } =
-						await import('../store/modules/share.js')
-					const context = await useShareStore().fetchWriteContext(
-						this.secretId,
-					)
-					this.teamWritable =
-						['write', 'manage'].includes(context.effectiveGrade)
-						&& context.sourceSecretId !== this.secretId
-				} catch {
-					this.teamWritable = false
-				}
+				// copy the user may team-write shows the sync warning; one
+				// without a write grade is view only.
+				this.teamWritable =
+					['write', 'manage'].includes(context?.effectiveGrade)
+					&& context.sourceSecretId !== id
+				this.viewOnlyCopy = isViewOnlyCopy(context, id)
 			} catch (e) {
+				if (id !== this.secretId) {
+					return
+				}
 				if (isRefusal(e)) {
 					this.error = t(
 						'keepiq',
@@ -1633,7 +1661,26 @@ export default {
 						|| t('keepiq', 'Failed to load secret')
 				}
 			} finally {
-				this.loading = false
+				if (id === this.secretId) {
+					this.loading = false
+				}
+			}
+		},
+
+		/**
+		 * The write-context of a secret, or null when it cannot be read: the
+		 * secret then loads without a write grade badge or view-only state.
+		 *
+		 * @param {string} id The secret.
+		 * @return {Promise<object|null>}
+		 * @spec openspec/specs/folder-permission-grades/spec.md#requirement-a-write-grade-member-may-update-a-folder-secret-for-all-recipients
+		 */
+		async fetchWriteContext(id) {
+			try {
+				const { useShareStore } = await import('../store/modules/share.js')
+				return await useShareStore().fetchWriteContext(id)
+			} catch {
+				return null
 			}
 		},
 
diff --git a/src/dialogs/SecretEditDialog.vue b/src/dialogs/SecretEditDialog.vue
index a36ead600..b0bccc094 100644
--- a/src/dialogs/SecretEditDialog.vue
+++ b/src/dialogs/SecretEditDialog.vue
@@ -28,6 +28,17 @@
 					{{ t('keepiq', 'Save without them') }}
 				</NcButton>
 			</NcNoteCard>
+			<NcNoteCard
+				v-if="viewOnly"
+				type="info"
+				data-testid="secret-edit-view-only">
+				{{
+					t(
+						'keepiq',
+						'Shared with you to view only. Ask its owner for edit rights to change it.',
+					)
+				}}
+			</NcNoteCard>
 			<NcNoteCard
 				v-if="saving && waitingForPartners"
 				type="info"
@@ -219,6 +230,7 @@ import { useSecretStore } from '../store/modules/secret.js'
 import { useSecretTypeStore } from '../store/modules/secretType.js'
 import { useShareStore } from '../store/modules/share.js'
 import { membersToObject, objectToMembers } from '../utils/additionalFields.js'
+import { isViewOnlyCopy } from '../utils/copyGrade.js'
 import { secretTypeLabel } from '../utils/secretTypes.js'
 import { sameTags } from '../utils/tags.js'
 import {
@@ -278,6 +290,8 @@ export default {
 			unreachablePartners: [],
 			original: null,
 			sourceBase: null,
+			// A copy without a write grade, known once the write-context answers.
+			viewOnly: false,
 			name: '',
 			typeId: null,
 			value: '',
@@ -399,6 +413,7 @@ export default {
 			return (
 				!this.loading
 				&& !this.saving
+				&& !this.viewOnly
 				&& this.name.trim() !== ''
 				&& this.policyVerdict.compliant
 			)
@@ -449,6 +464,7 @@ export default {
 			this.loading = true
 			this.error = ''
 			this.sourceBase = null
+			this.viewOnly = false
 			try {
 				const secret = await useSecretStore().fetchSecret(this.secretId)
 				this.original = secret
@@ -511,7 +527,8 @@ export default {
 		 * that failed leaves the version read on open. Null for an own secret
 		 * whose write-context was read; when that read fails, an own secret's
 		 * write-back that saved gives its version, which the owner's save
-		 * does not send.
+		 * does not send. A copy without a write grade marks the dialog view
+		 * only, so it cannot be saved.
 		 *
 		 * @return {Promise<string|null>}
 		 * @spec openspec/changes/sharing-atomic-share-save/specs/user-sharing/spec.md#requirement-a-shared-secret-and-every-copy-save-in-one-transaction
@@ -531,6 +548,7 @@ export default {
 					.catch(() => null),
 				useSecretStore().writeBackSettled(this.secretId),
 			])
+			this.viewOnly = isViewOnlyCopy(context, this.secretId)
 			if (context?.sourceSecretId === this.secretId) {
 				return null
 			}
diff --git a/src/services/shareSave.js b/src/services/shareSave.js
index e48ec85bb..0a2a68354 100644
--- a/src/services/shareSave.js
+++ b/src/services/shareSave.js
@@ -28,6 +28,7 @@ import {
 } from '../store/modules/federatedShare.js'
 import { onVaultLock, useSessionStore } from '../store/modules/session.js'
 import { useShareStore } from '../store/modules/share.js'
+import { isViewOnlyCopy } from '../utils/copyGrade.js'
 import { isRefusal } from '../utils/refusal.js'
 
 /** The encrypted value fields of a secret. */
@@ -42,9 +43,6 @@ export const SHARE_SAVE_BATCH = 100
 /** How many `incomplete` answers end a save, so a churning share list cannot loop. */
 export const MAX_INCOMPLETE_ROUNDS = 3
 
-/** Grades that let a copy holder save for every holder (TeamFolderMember::WRITE_GRADES plus owner). */
-const COPY_WRITER_GRADES = ['owner', 'write', 'manage']
-
 /**
  * Partner lookup refusals that mean the share is gone for good, so it is
  * suspended, each with the status this server answers it with; on another
@@ -141,8 +139,9 @@ function partnerGone(error) {
  *
  * `code` is `incomplete` (the share list kept changing), `stale` (the row moved
  * on before the partner value was built), `partner_lookup_limit` (the partner
- * lookup limit held for longer than the save waits) or `partner_unreachable` (`partners`
- * names them, each with its `reason`).
+ * lookup limit held for longer than the save waits), `view_only` (the caller's
+ * copy has no write grade) or `partner_unreachable` (`partners` names them,
+ * each with its `reason`).
  */
 export class ShareSaveError extends Error {
 	/**
@@ -262,9 +261,8 @@ function idsOf(list, key) {
  * Save a value change of `{id}` for every holder in one transaction.
  *
  * On the copy-editor path partner shares are never written; the answer's
- * `federated.ownerOnly` counts them. A copy holder without a write grade saves
- * only their own copy, through `PUT /secrets/{id}`, or restores it through
- * `POST /versions/{restoredFrom}/restore`.
+ * `federated.ownerOnly` counts them. A copy holder without a write grade is
+ * refused before anything is sent, for an edit and a restore alike.
  *
  * @param {object} options The save.
  * @param {string} options.id The caller's own row.
@@ -304,22 +302,8 @@ export async function saveShared({
 	// The source version the edit was made from; only an edit that recorded
 	// none (a queue entry from before it was recorded) takes this moment's.
 	const sourceBase = sourceBaseUpdatedAt ?? context.sourceUpdatedAt ?? ''
-	if (copyPath && !COPY_WRITER_GRADES.includes(context.effectiveGrade)) {
-		// A plain update would not record the restore; the version's own
-		// restore does, and touches only this copy.
-		const response =
-			restoredFrom === null
-				? await axios.put(generateUrl(`/apps/keepiq/api/v1/secrets/${id}`), {
-						...patch,
-						baseUpdatedAt,
-					})
-				: await axios.post(
-						generateUrl(
-							`/apps/keepiq/api/v1/versions/${restoredFrom}/restore`,
-						),
-						{ baseUpdatedAt },
-					)
-		return { secret: response.data }
+	if (isViewOnlyCopy(context, id)) {
+		throw new ShareSaveError('view_only')
 	}
 
 	const epoch = lockEpoch
@@ -697,6 +681,12 @@ export function shareSaveErrorText(error) {
 			'Too many partner lookups. Nothing was saved; try again in a minute.',
 		)
 	}
+	if (code === 'view_only') {
+		return t(
+			'keepiq',
+			'Shared with you to view only. Nothing was saved; ask its owner for edit rights to change it.',
+		)
+	}
 	if (code === 'partner_unreachable') {
 		return t(
 			'keepiq',
diff --git a/src/store/modules/offline.js b/src/store/modules/offline.js
index 7e172125d..4a25bb763 100644
--- a/src/store/modules/offline.js
+++ b/src/store/modules/offline.js
@@ -52,7 +52,7 @@ const SENSITIVE = ['key', 'login', 'additionalFields']
  * How a replay error settles its entry. A queued entry has no "save without
  * them", so an unreachable partner, a partner lookup limit that outlasted the
  * wait or a malformed share save fails the entry instead of holding up every
- * later one.
+ * later one. So does a copy without a write grade, which no retry can save.
  *
  * @param {Error|object} e The error.
  * @return {string} conflict, failed or retry.
@@ -66,6 +66,7 @@ function replayKind(e) {
 				stale: 'conflict',
 				partner_unreachable: 'failed',
 				partner_lookup_limit: 'failed',
+				view_only: 'failed',
 			}[e.code] ?? 'retry'
 		)
 	}
@@ -78,9 +79,8 @@ function replayKind(e) {
 /**
  * The source version keeping a change after a 409 replays on: the one a
  * share save of a copy names with its `stale` or `stale_source` answer. Null
- * for an own secret, a copy saved without a write grade (its plain update
- * names no source version) and any other 409; the replay then keeps the
- * source version the edit was made from.
+ * for an own secret and any other 409; the replay then keeps the source
+ * version the edit was made from.
  *
  * @param {object} [answer] The 409's body.
  * @return {string|null}
@@ -107,8 +107,11 @@ function failureOf(e) {
 			partners: e.partners.map((p) => p.recipientCloudId),
 		}
 	}
-	if (e instanceof ShareSaveError && e.code === 'partner_lookup_limit') {
-		return { code: 'partner_lookup_limit' }
+	if (
+		e instanceof ShareSaveError
+		&& ['partner_lookup_limit', 'view_only'].includes(e.code)
+	) {
+		return { code: e.code }
 	}
 	if (e?.fromShareSave === true && e.response?.status === 400) {
 		return { code: 'refused', reason: e.response.data?.error ?? '' }
@@ -136,7 +139,8 @@ export function failureText(failure) {
 				{ partners: failure.partners.join(', ') },
 			)
 		case 'partner_lookup_limit':
-			return shareSaveErrorText(new ShareSaveError('partner_lookup_limit'))
+		case 'view_only':
+			return shareSaveErrorText(new ShareSaveError(failure.code))
 		case 'refused':
 			// The server's code stays stored with the entry; the list shows
 			// words, never the code.
diff --git a/src/store/modules/secret.js b/src/store/modules/secret.js
index d6aaf9b03..f31fe5a27 100644
--- a/src/store/modules/secret.js
+++ b/src/store/modules/secret.js
@@ -739,7 +739,7 @@ export const useSecretStore = defineStore('secret', {
 		 * @param {Array<string>} [options.withoutUnreachable] The partner shares (ids) the user agreed to suspend when they cannot be reached.
 		 * @param {boolean} [options.writeBack] This is the merge write-back itself, so it does not wait for one.
 		 * @param {(ms: number) => void} [options.onWait] Called when the save waits on the partner lookup limit, its own or that of a merge write-back it is held behind.
-		 * @param {(sourceUpdatedAt: string|null) => void} [options.onSourceSaved] Called after a share save with the source version it wrote, null when it saved only the own copy.
+		 * @param {(sourceUpdatedAt: string|null) => void} [options.onSourceSaved] Called after a share save with the source version it wrote (on the owner path, the saved row's own version), null when its answer names none.
 		 * @return {Promise<object>} The updated secret row.
 		 * @spec openspec/specs/secrets/spec.md#requirement-update-secret
 		 * @spec openspec/specs/offline-edit-queue/spec.md#requirement-offline-changes-go-into-a-sealed-local-queue
diff --git a/src/utils/copyGrade.js b/src/utils/copyGrade.js
new file mode 100644
index 000000000..9532af90b
--- /dev/null
+++ b/src/utils/copyGrade.js
@@ -0,0 +1,30 @@
+/**
+ * SPDX-License-Identifier: EUPL-1.2
+ * SPDX-FileCopyrightText: 2026 Conduction B.V. <info@conduction.nl>
+ *
+ * Whether the holder of a copy may change its value, from the copy's
+ * write-context (`GET /secrets/{id}/write-context`). The browser extension
+ * applies the same rule.
+ */
+
+/** Grades that let a copy holder save for every holder (TeamFolderMember::WRITE_GRADES plus owner). */
+export const COPY_WRITER_GRADES = ['owner', 'write', 'manage']
+
+/**
+ * Whether a secret is a copy its holder may only view: its value changes only
+ * through a holder with a write grade.
+ *
+ * @param {object|null|undefined} context The write-context of the secret.
+ * @param {string} id The secret the context was read for.
+ * @return {boolean} False when the context is unknown or names no source.
+ * @spec openspec/specs/folder-permission-grades/spec.md#requirement-a-write-grade-member-may-update-a-folder-secret-for-all-recipients
+ */
+export function isViewOnlyCopy(context, id) {
+	if (!context?.sourceSecretId) {
+		return false
+	}
+	return (
+		context.sourceSecretId !== id
+		&& !COPY_WRITER_GRADES.includes(context.effectiveGrade)
+	)
+}
diff --git a/tests/Unit/Controller/SecretRequestFillControllerTest.php b/tests/Unit/Controller/SecretRequestFillControllerTest.php
index f954c52be..71d1efcff 100644
--- a/tests/Unit/Controller/SecretRequestFillControllerTest.php
+++ b/tests/Unit/Controller/SecretRequestFillControllerTest.php
@@ -24,13 +24,18 @@
 use OCA\Keepiq\Controller\SecretRequestFillController;
 use OCA\Keepiq\Db\EncryptionSuite;
 use OCA\Keepiq\Db\EncryptionSuiteMapper;
+use OCA\Keepiq\Db\Secret;
 use OCA\Keepiq\Db\SecretRequest;
 use OCA\Keepiq\Db\SecretRequestMapper;
+use OCA\Keepiq\Exception\ForbiddenException;
+use OCA\Keepiq\Exception\NotFoundException;
+use OCA\Keepiq\Exception\ViewOnlyCopyException;
 use OCA\Keepiq\Service\EncryptionSuiteService;
 use OCA\Keepiq\Service\SecretRequestPolicy;
 use OCA\Keepiq\Service\SecretRequestService;
 use OCP\AppFramework\Http;
 use OCP\IRequest;
+use PHPUnit\Framework\Attributes\DataProvider;
 use PHPUnit\Framework\MockObject\MockObject;
 use PHPUnit\Framework\TestCase;
 use RuntimeException;
@@ -268,6 +273,44 @@ public function testFillReturns500OnGenericFailure(): void {
 		$this->assertSame(expected: Http::STATUS_INTERNAL_SERVER_ERROR, actual: $response->getStatus());
 
 	}//end testFillReturns500OnGenericFailure()
+
+	/**
+	 * Refusals a fill can meet from the secret's holder side.
+	 *
+	 * @return array<string,array{RuntimeException}>
+	 */
+	public static function holderRefusals(): array {
+		return [
+			'a copy shared to view only' => [new ViewOnlyCopyException()],
+			'a copy from another organisation' => [new ForbiddenException(message: Secret::READ_ONLY_REFUSAL)],
+			'a copy whose source cannot be resolved' => [new NotFoundException(message: 'Secret not found')],
+		];
+	}//end holderRefusals()
+
+	/**
+	 * A fill the secret's holder may not take, such as one onto a copy shared
+	 * with them to view only, answers 403 without the holder-facing refusal
+	 * (keepiq#1287).
+	 *
+	 * @param RuntimeException $refusal The refusal the fill meets
+	 *
+	 * @return void
+	 */
+	#[DataProvider('holderRefusals')]
+	public function testFillReturns403WhenTheSecretMayNotBeChanged(RuntimeException $refusal): void {
+		$this->secretRequestService->expects($this->once())
+			->method('fill')
+			->willThrowException($refusal);
+
+		$response = $this->controller->fill(token: 'tok-1', encryptedFields: ['key' => 'B']);
+
+		$this->assertSame(expected: Http::STATUS_FORBIDDEN, actual: $response->getStatus());
+		$this->assertSame(
+			expected: ['message' => 'The secret this request writes to cannot be changed'],
+			actual: $response->getData()
+		);
+	}//end testFillReturns403WhenTheSecretMayNotBeChanged()
+
 	/**
 	 * The fill response never tells the recipient which fields already hold values.
 	 *
diff --git a/tests/Unit/Controller/SecretUpdateControllerTest.php b/tests/Unit/Controller/SecretUpdateControllerTest.php
index b880dfca8..3be71f396 100644
--- a/tests/Unit/Controller/SecretUpdateControllerTest.php
+++ b/tests/Unit/Controller/SecretUpdateControllerTest.php
@@ -22,12 +22,14 @@
 use OCA\Keepiq\Db\Secret;
 use OCA\Keepiq\Db\SecretMapper;
 use OCA\Keepiq\Exception\StaleWriteException;
+use OCA\Keepiq\Exception\ViewOnlyCopyException;
 use OCA\Keepiq\Exception\WriteLockedException;
 use OCA\Keepiq\Service\LinkShareService;
 use OCA\Keepiq\Service\MigrationService;
 use OCA\Keepiq\Service\SecretService;
 use OCA\Keepiq\Service\SecretTypeService;
 use OCA\Keepiq\Service\SecretVersionService;
+use OCA\Keepiq\Service\ViewOnlyCopyGuard;
 use OCP\AppFramework\Http;
 use OCP\IDBConnection;
 use OCP\IRequest;
@@ -148,6 +150,7 @@ public function testAnUpdateWithoutABaseRunsOnceMoreOnTheCurrentRow(): void {
 			logger: $this->createMock(LoggerInterface::class),
 			versionService: $versions,
 			db: $this->createMock(IDBConnection::class),
+			viewOnlyCopies: $this->createStub(ViewOnlyCopyGuard::class),
 		);
 
 		$response = $this->controller(['key' => 'NEW-CIPHERTEXT'], $service)->update('s-1');
@@ -187,4 +190,21 @@ public function testAWriteLockAnswers423(): void {
 
 		$this->assertSame(423, $controller->update('s-1')->getStatus());
 	}//end testAWriteLockAnswers423()
+
+	/**
+	 * A value change of a view-only copy answers 403 with the refusal and its
+	 * code `view_only`, and is not tried again (keepiq#1287).
+	 *
+	 * @return void
+	 */
+	public function testAValueChangeOfAViewOnlyCopyAnswers403(): void {
+		$controller = $this->controller(['key' => 'NEW']);
+		$this->secretService->expects($this->once())->method('update')
+			->willThrowException(new ViewOnlyCopyException());
+
+		$response = $controller->update('s-1');
+
+		$this->assertSame(Http::STATUS_FORBIDDEN, $response->getStatus());
+		$this->assertSame(['message' => Secret::VIEW_ONLY_REFUSAL, 'code' => 'view_only'], $response->getData());
+	}//end testAValueChangeOfAViewOnlyCopyAnswers403()
 }//end class
diff --git a/tests/Unit/Controller/SecretVersionControllerTest.php b/tests/Unit/Controller/SecretVersionControllerTest.php
index 206d0e30e..db442e676 100644
--- a/tests/Unit/Controller/SecretVersionControllerTest.php
+++ b/tests/Unit/Controller/SecretVersionControllerTest.php
@@ -19,7 +19,9 @@
 
 use OCA\Keepiq\Controller\SecretVersionController;
 use OCA\Keepiq\Db\Secret;
+use OCA\Keepiq\Exception\NotFoundException;
 use OCA\Keepiq\Exception\StaleWriteException;
+use OCA\Keepiq\Exception\ViewOnlyCopyException;
 use OCA\Keepiq\Service\SecretVersionService;
 use OCP\AppFramework\Http;
 use OCP\IRequest;
@@ -79,4 +81,24 @@ public function testWithoutABaseTheRestoreIsUnchecked(): void {
 
 		$this->assertSame(Http::STATUS_OK, $this->controller->restore(id: 'v-1')->getStatus());
 	}
+
+	public function testARestoreOfAViewOnlyCopyAnswers403(): void {
+		$this->versionService->method('restore')
+			->willThrowException(new ViewOnlyCopyException());
+
+		$response = $this->controller->restore(id: 'v-1');
+
+		$this->assertSame(Http::STATUS_FORBIDDEN, $response->getStatus());
+		$this->assertSame(['message' => Secret::VIEW_ONLY_REFUSAL, 'code' => 'view_only'], $response->getData());
+	}
+
+	public function testARestoreOfACopyWithoutASourceAnswers404(): void {
+		$this->versionService->method('restore')
+			->willThrowException(new NotFoundException(message: 'Secret not found'));
+
+		$response = $this->controller->restore(id: 'v-1');
+
+		$this->assertSame(Http::STATUS_NOT_FOUND, $response->getStatus());
+		$this->assertSame(['message' => 'Secret not found'], $response->getData());
+	}
 }
diff --git a/tests/Unit/Federation/FederatedSourceDetailsTest.php b/tests/Unit/Federation/FederatedSourceDetailsTest.php
index f1aaae9df..52eed15cb 100644
--- a/tests/Unit/Federation/FederatedSourceDetailsTest.php
+++ b/tests/Unit/Federation/FederatedSourceDetailsTest.php
@@ -46,6 +46,7 @@
 use OCA\Keepiq\Service\MigrationService;
 use OCA\Keepiq\Service\SecretService;
 use OCA\Keepiq\Service\SecretTypeService;
+use OCA\Keepiq\Service\ViewOnlyCopyGuard;
 use OCP\AppFramework\Http;
 use OCP\EventDispatcher\IEventDispatcher;
 use OCP\Federation\ICloudFederationFactory;
@@ -186,6 +187,7 @@ function (object $event): void {
 			linkShareService: $this->createMock(LinkShareService::class),
 			logger: $this->createMock(LoggerInterface::class),
 			db: $this->createMock(\OCP\IDBConnection::class),
+			viewOnlyCopies: $this->createStub(ViewOnlyCopyGuard::class),
 			federatedShares: $federated,
 		);
 
diff --git a/tests/Unit/Federation/ReadOnlyCopyFilingTest.php b/tests/Unit/Federation/ReadOnlyCopyFilingTest.php
index 9055fffce..05f3fffe5 100644
--- a/tests/Unit/Federation/ReadOnlyCopyFilingTest.php
+++ b/tests/Unit/Federation/ReadOnlyCopyFilingTest.php
@@ -35,6 +35,7 @@
 use OCA\Keepiq\Service\MigrationService;
 use OCA\Keepiq\Service\SecretService;
 use OCA\Keepiq\Service\SecretTypeService;
+use OCA\Keepiq\Service\ViewOnlyCopyGuard;
 use OCP\AppFramework\Http;
 use OCP\IRequest;
 use OCP\IUser;
@@ -90,6 +91,7 @@ function (Secret $secret): Secret {
 			linkShareService: $this->createMock(LinkShareService::class),
 			logger: $this->createMock(LoggerInterface::class),
 			db: $this->createMock(\OCP\IDBConnection::class),
+			viewOnlyCopies: $this->createStub(ViewOnlyCopyGuard::class),
 			folderOwnership: $folders,
 		);
 
diff --git a/tests/Unit/Federation/ReadOnlyFederatedCopyTest.php b/tests/Unit/Federation/ReadOnlyFederatedCopyTest.php
index 2e065dcb5..0cba2fc54 100644
--- a/tests/Unit/Federation/ReadOnlyFederatedCopyTest.php
+++ b/tests/Unit/Federation/ReadOnlyFederatedCopyTest.php
@@ -55,6 +55,7 @@
 use OCA\Keepiq\Service\ShareSync\ShareWriteContext;
 use OCA\Keepiq\Service\ShareSyncService;
 use OCA\Keepiq\Service\TeamFolderQueryService;
+use OCA\Keepiq\Service\ViewOnlyCopyGuard;
 use OCA\Keepiq\Service\WriteLockService;
 use OCP\AppFramework\Db\DoesNotExistException;
 use OCP\AppFramework\Http;
@@ -207,6 +208,7 @@ public function testUpdateIsForbidden(): void {
 			linkShareService: $this->createMock(LinkShareService::class),
 			logger: $this->createMock(LoggerInterface::class),
 			db: $this->createMock(IDBConnection::class),
+			viewOnlyCopies: $this->createStub(ViewOnlyCopyGuard::class),
 		);
 
 		$response = (new SecretUpdateController($request, $service, $this->session()))->update('copy');
diff --git a/tests/Unit/Service/SecretPendingFieldsTest.php b/tests/Unit/Service/SecretPendingFieldsTest.php
index 9e9ae92cf..48a803160 100644
--- a/tests/Unit/Service/SecretPendingFieldsTest.php
+++ b/tests/Unit/Service/SecretPendingFieldsTest.php
@@ -29,6 +29,7 @@
 use OCA\Keepiq\Service\MigrationService;
 use OCA\Keepiq\Service\SecretService;
 use OCA\Keepiq\Service\SecretTypeService;
+use OCA\Keepiq\Service\ViewOnlyCopyGuard;
 use OCP\IRequest;
 use OCP\IUser;
 use OCP\IUserSession;
@@ -100,6 +101,7 @@ protected function setUp(): void {
 			$this->createMock(LinkShareService::class),
 			$this->createMock(LoggerInterface::class),
 			$this->createMock(\OCP\IDBConnection::class),
+			$this->createStub(ViewOnlyCopyGuard::class),
 			null,
 			null,
 			null,
diff --git a/tests/Unit/Service/SecretRequestServiceTest.php b/tests/Unit/Service/SecretRequestServiceTest.php
index ab3b5b22f..c9eaa8181 100644
--- a/tests/Unit/Service/SecretRequestServiceTest.php
+++ b/tests/Unit/Service/SecretRequestServiceTest.php
@@ -31,6 +31,7 @@
 use OCA\Keepiq\Event\SuiteMigrationAbortedEvent;
 use OCA\Keepiq\Exception\ForbiddenException;
 use OCA\Keepiq\Exception\StaleWriteException;
+use OCA\Keepiq\Exception\ViewOnlyCopyException;
 use OCA\Keepiq\Listener\SuiteMigrationAbortedListener;
 use OCA\Keepiq\Service\NotificationService;
 use OCA\Keepiq\Service\SecretPlaceholderCleaner;
@@ -39,8 +40,10 @@
 use OCA\Keepiq\Service\SecretRequestService;
 use OCA\Keepiq\Service\SecretRequestSuiteLockService;
 use OCA\Keepiq\Service\SecretService;
+use OCA\Keepiq\Service\ViewOnlyCopyGuard;
 use OCA\Keepiq\Service\WriteLockService;
 use OCP\AppFramework\Db\DoesNotExistException;
+use PHPUnit\Framework\Attributes\DataProvider;
 use PHPUnit\Framework\MockObject\MockObject;
 use PHPUnit\Framework\TestCase;
 use Psr\Container\ContainerInterface;
@@ -120,6 +123,7 @@ protected function setUp(): void {
 			secretMapper: $this->secretMapper,
 			container: $this->container,
 			placeholderCleaner: $this->makeCleaner(),
+			viewOnlyCopies: $this->createStub(ViewOnlyCopyGuard::class),
 		);
 
 		$this->suiteLockService = new SecretRequestSuiteLockService(
@@ -439,6 +443,7 @@ public function testFillMarksFulfilledAndNotifies(): void {
 			secretMapper: $this->secretMapper,
 			container: $this->container,
 			placeholderCleaner: $this->makeCleaner(),
+			viewOnlyCopies: $this->createStub(ViewOnlyCopyGuard::class),
 		);
 
 		// The linked Secret, user-owned.
@@ -511,6 +516,7 @@ public function testFillOnAnApplicationOwnedSecretUsesTheApplicationPath(): void
 			secretMapper: $this->secretMapper,
 			container: $this->container,
 			placeholderCleaner: $this->makeCleaner(),
+			viewOnlyCopies: $this->createStub(ViewOnlyCopyGuard::class),
 		);
 
 		$result = $service->fill(token: 'tok-good', encryptedFields: ['key' => 'CIPHER']);
@@ -551,6 +557,7 @@ public function testFillRefusesAFieldThatCannotBeStored(): void {
 			secretMapper: $this->secretMapper,
 			container: $this->container,
 			placeholderCleaner: $this->makeCleaner(),
+			viewOnlyCopies: $this->createStub(ViewOnlyCopyGuard::class),
 		);
 
 		$this->expectException(InvalidArgumentException::class);
@@ -741,9 +748,11 @@ private function makeCleaner(): SecretPlaceholderCleaner {
 	/**
 	 * Build a service wired for the fill tests.
 	 *
+	 * @param ViewOnlyCopyGuard|null $viewOnlyCopies The view-only guard; a stub that lets every fill through when null
+	 *
 	 * @return SecretRequestService
 	 */
-	private function makeFillService(): SecretRequestService {
+	private function makeFillService(?ViewOnlyCopyGuard $viewOnlyCopies = null): SecretRequestService {
 		return new SecretRequestService(
 			mapper: $this->mapper,
 			policy: new SecretRequestPolicy(mapper: $this->mapper, suiteMapper: $this->activeSuites()),
@@ -753,9 +762,67 @@ private function makeFillService(): SecretRequestService {
 			secretMapper: $this->secretMapper,
 			container: $this->container,
 			placeholderCleaner: $this->makeCleaner(),
+			viewOnlyCopies: $viewOnlyCopies ?? $this->createStub(ViewOnlyCopyGuard::class),
 		);
 	}//end makeFillService()
 
+	/**
+	 * Fills of a view-only copy that carry an extra-field blob: with a key,
+	 * and the blob alone.
+	 *
+	 * @return array<string,array{string[],array<string,string>}>
+	 */
+	public static function viewOnlyFills(): array {
+		return [
+			'a key and extra fields' => [['key', 'api-interface-id'], ['key' => 'CIPHER_KEY', 'additionalFields' => 'CIPHER_BLOB']],
+			'extra fields only' => [['api-interface-id'], ['additionalFields' => 'CIPHER_BLOB']],
+		];
+	}//end viewOnlyFills()
+
+	/**
+	 * A fill onto a copy its holder may only view is refused before the
+	 * filled extra-field blob is held back, so nothing is stored and the
+	 * request stays pending (keepiq#1287).
+	 *
+	 * @param string[] $requested The requested fields
+	 * @param array<string,string> $filled The filled ciphertext
+	 *
+	 * @return void
+	 */
+	#[DataProvider('viewOnlyFills')]
+	public function testAFillOntoAViewOnlyCopyIsRefusedWithNothingStored(array $requested, array $filled): void {
+		$entity = $this->buildPending();
+		$entity->setRequestedFields(json_encode($requested));
+		$this->mapper->method('findByToken')->willReturn($entity);
+		$this->mapper->method('findById')->willReturn($entity);
+		$this->mapper->expects($this->never())->method('update');
+
+		$secret = new Secret();
+		$secret->setId('sec-1');
+		$secret->setOwnerType('user');
+		$secret->setOwnerId('requester');
+		$secret->setAdditionalFields('OWNERS_OWN_BLOB');
+		$this->secretMapper->method('findById')->willReturn($secret);
+		$this->secretMapper->expects($this->never())->method('update');
+		$this->secretService->expects($this->never())->method('update');
+
+		$guard = $this->createMock(ViewOnlyCopyGuard::class);
+		$guard->expects($this->once())->method('assertMayChangeValue')
+			->with($secret, array_keys($filled), 'requester')
+			->willThrowException(new ViewOnlyCopyException());
+
+		try {
+			$this->makeFillService(viewOnlyCopies: $guard)->fill(token: 'tok-good', encryptedFields: $filled);
+			$this->fail('A fill onto a view-only copy must be refused');
+		} catch (ViewOnlyCopyException) {
+			// Expected.
+		}
+
+		$this->assertSame([], $secret->pendingAdditionalFieldList());
+		$this->assertSame('OWNERS_OWN_BLOB', $secret->getAdditionalFields());
+		$this->assertSame(SecretRequest::STATUS_PENDING, $entity->getStatus());
+	}//end testAFillOntoAViewOnlyCopyIsRefusedWithNothingStored()
+
 	/**
 	 * A failed write leaves the request pending, not fulfilled and empty.
 	 *
@@ -794,6 +861,7 @@ public function testFillLeavesTheRequestPendingWhenTheWriteFails(): void {
 			secretMapper: $this->secretMapper,
 			container: $this->container,
 			placeholderCleaner: $this->makeCleaner(),
+			viewOnlyCopies: $this->createStub(ViewOnlyCopyGuard::class),
 		);
 
 		try {
@@ -1066,6 +1134,7 @@ public function testListBySecretReturnsRequestsForOwner(): void {
 			secretMapper: $this->secretMapper,
 			container: $this->container,
 			placeholderCleaner: $this->makeCleaner(),
+			viewOnlyCopies: $this->createStub(ViewOnlyCopyGuard::class),
 		);
 
 		$result = $service->listBySecret(secretId: 'sec-1', userId: 'owner');
@@ -1097,6 +1166,7 @@ public function testListBySecretRejectsNonOwner(): void {
 			secretMapper: $this->secretMapper,
 			container: $this->container,
 			placeholderCleaner: $this->makeCleaner(),
+			viewOnlyCopies: $this->createStub(ViewOnlyCopyGuard::class),
 		);
 
 		$this->expectException(InvalidArgumentException::class);
@@ -1124,6 +1194,7 @@ public function testListBySecretRejectsUnknownSecret(): void {
 			secretMapper: $this->secretMapper,
 			container: $this->container,
 			placeholderCleaner: $this->makeCleaner(),
+			viewOnlyCopies: $this->createStub(ViewOnlyCopyGuard::class),
 		);
 
 		$this->expectException(InvalidArgumentException::class);
@@ -1194,6 +1265,7 @@ public function testCreateForApplicationIsRefusedWhileWriteLocked(): void {
 			secretMapper: $this->secretMapper,
 			container: $this->container,
 			placeholderCleaner: $this->makeCleaner(),
+			viewOnlyCopies: $this->createStub(ViewOnlyCopyGuard::class),
 		);
 
 		$this->expectException(ForbiddenException::class);
@@ -1243,6 +1315,7 @@ public function testCreateReRequestIsRefusedWhileWriteLocked(): void {
 			secretMapper: $this->secretMapper,
 			container: $this->container,
 			placeholderCleaner: $this->makeCleaner(),
+			viewOnlyCopies: $this->createStub(ViewOnlyCopyGuard::class),
 		);
 
 		$this->expectException(ForbiddenException::class);
@@ -1294,6 +1367,7 @@ static function (SecretRequest $entity) use (&$captured) {
 			secretMapper: $this->secretMapper,
 			container: $this->container,
 			placeholderCleaner: $this->makeCleaner(),
+			viewOnlyCopies: $this->createStub(ViewOnlyCopyGuard::class),
 		);
 
 		$result = $service->createForApplication(
@@ -1335,6 +1409,7 @@ public function testCreateForApplicationRejectsMissingSuite(): void {
 			secretMapper: $this->secretMapper,
 			container: $this->container,
 			placeholderCleaner: $this->makeCleaner(),
+			viewOnlyCopies: $this->createStub(ViewOnlyCopyGuard::class),
 		);
 
 		$this->expectException(InvalidArgumentException::class);
@@ -1395,6 +1470,7 @@ static function (SecretRequest $entity) use (&$captured) {
 			secretMapper: $this->secretMapper,
 			container: $this->container,
 			placeholderCleaner: $this->makeCleaner(),
+			viewOnlyCopies: $this->createStub(ViewOnlyCopyGuard::class),
 		);
 
 		$result = $service->createReRequest(
@@ -1438,6 +1514,7 @@ public function testCreateReRequestRejectsNonOwner(): void {
 			secretMapper: $this->secretMapper,
 			container: $this->container,
 			placeholderCleaner: $this->makeCleaner(),
+			viewOnlyCopies: $this->createStub(ViewOnlyCopyGuard::class),
 		);
 
 		$this->expectException(InvalidArgumentException::class);
@@ -1487,6 +1564,7 @@ public function testCreateReRequestRejectsExistingPending(): void {
 			secretMapper: $this->secretMapper,
 			container: $this->container,
 			placeholderCleaner: $this->makeCleaner(),
+			viewOnlyCopies: $this->createStub(ViewOnlyCopyGuard::class),
 		);
 
 		$this->expectException(InvalidArgumentException::class);
@@ -2273,6 +2351,7 @@ static function (string $id) use ($oldSuite): EncryptionSuite {
 			secretMapper: $this->secretMapper,
 			container: $this->container,
 			placeholderCleaner: $this->makeCleaner(),
+			viewOnlyCopies: $this->createStub(ViewOnlyCopyGuard::class),
 		);
 
 		$this->assertSame(SecretRequestPolicy::REASON_UNAVAILABLE, $service->refusalReason(token: 'tok-good'));
diff --git a/tests/Unit/Service/SecretServiceApplicationVaultTest.php b/tests/Unit/Service/SecretServiceApplicationVaultTest.php
index 092deb82b..9c37d65ae 100644
--- a/tests/Unit/Service/SecretServiceApplicationVaultTest.php
+++ b/tests/Unit/Service/SecretServiceApplicationVaultTest.php
@@ -32,6 +32,7 @@
 use OCA\Keepiq\Service\SecretService;
 use OCA\Keepiq\Service\SecretTypeService;
 use OCA\Keepiq\Service\ShareService;
+use OCA\Keepiq\Service\ViewOnlyCopyGuard;
 use OCP\AppFramework\Db\DoesNotExistException;
 use OCP\EventDispatcher\IEventDispatcher;
 use PHPUnit\Framework\MockObject\MockObject;
@@ -149,6 +150,7 @@ function (AuditEvent $event): void {
 			linkShareService: $this->linkShareService,
 			logger: $this->logger,
 			db: $this->createMock(\OCP\IDBConnection::class),
+			viewOnlyCopies: $this->createStub(ViewOnlyCopyGuard::class),
 			secretRequestService: $this->secretRequestService,
 			shareService: $this->shareService,
 			groupShareMapper: $this->groupShareMapper,
diff --git a/tests/Unit/Service/SecretServiceAuditTest.php b/tests/Unit/Service/SecretServiceAuditTest.php
index 75fe1b2bc..232511cb9 100644
--- a/tests/Unit/Service/SecretServiceAuditTest.php
+++ b/tests/Unit/Service/SecretServiceAuditTest.php
@@ -29,6 +29,7 @@
 use OCA\Keepiq\Service\MigrationService;
 use OCA\Keepiq\Service\SecretService;
 use OCA\Keepiq\Service\SecretTypeService;
+use OCA\Keepiq\Service\ViewOnlyCopyGuard;
 use OCP\EventDispatcher\IEventDispatcher;
 use PHPUnit\Framework\MockObject\MockObject;
 use PHPUnit\Framework\TestCase;
@@ -92,6 +93,7 @@ protected function setUp(): void {
 			linkShareService: $linkShareService,
 			logger: $logger,
 			db: $this->createMock(\OCP\IDBConnection::class),
+			viewOnlyCopies: $this->createStub(ViewOnlyCopyGuard::class),
 			secretRequestService: null,
 			shareService: null,
 			groupShareMapper: null,
diff --git a/tests/Unit/Service/SecretServiceCrossAppAuditTest.php b/tests/Unit/Service/SecretServiceCrossAppAuditTest.php
index 63f4120c3..b7a16f74e 100644
--- a/tests/Unit/Service/SecretServiceCrossAppAuditTest.php
+++ b/tests/Unit/Service/SecretServiceCrossAppAuditTest.php
@@ -36,6 +36,7 @@
 use OCA\Keepiq\Service\SecretService;
 use OCA\Keepiq\Service\SecretTypeService;
 use OCA\Keepiq\Service\ShareService;
+use OCA\Keepiq\Service\ViewOnlyCopyGuard;
 use OCP\EventDispatcher\IEventDispatcher;
 use PHPUnit\Framework\MockObject\MockObject;
 use PHPUnit\Framework\TestCase;
@@ -146,6 +147,7 @@ function (AuditEntry $entry): AuditEntry {
 			linkShareService: $this->linkShareService,
 			logger: $this->createMock(LoggerInterface::class),
 			db: $this->createMock(\OCP\IDBConnection::class),
+			viewOnlyCopies: $this->createStub(ViewOnlyCopyGuard::class),
 			secretRequestService: $this->createMock(SecretRequestService::class),
 			shareService: $this->createMock(ShareService::class),
 			groupShareMapper: $this->createMock(GroupShareMapper::class),
diff --git a/tests/Unit/Service/SecretServiceFolderOwnershipTest.php b/tests/Unit/Service/SecretServiceFolderOwnershipTest.php
index d12b47127..aa302cd7d 100644
--- a/tests/Unit/Service/SecretServiceFolderOwnershipTest.php
+++ b/tests/Unit/Service/SecretServiceFolderOwnershipTest.php
@@ -41,6 +41,7 @@
 use OCA\Keepiq\Service\MigrationService;
 use OCA\Keepiq\Service\SecretService;
 use OCA\Keepiq\Service\SecretTypeService;
+use OCA\Keepiq\Service\ViewOnlyCopyGuard;
 use OCP\AppFramework\Db\DoesNotExistException;
 use PHPUnit\Framework\MockObject\MockObject;
 use PHPUnit\Framework\TestCase;
@@ -111,6 +112,7 @@ static function (string $id) use ($aliceFolder): Folder {
 			$this->createMock(LinkShareService::class),
 			$this->createMock(LoggerInterface::class),
 			$this->createMock(\OCP\IDBConnection::class),
+			$this->createStub(ViewOnlyCopyGuard::class),
 			null,
 			null,
 			null,
diff --git a/tests/Unit/Service/SecretServiceMachineWriteTest.php b/tests/Unit/Service/SecretServiceMachineWriteTest.php
index 48c14a6f3..504825b58 100644
--- a/tests/Unit/Service/SecretServiceMachineWriteTest.php
+++ b/tests/Unit/Service/SecretServiceMachineWriteTest.php
@@ -34,6 +34,7 @@
 use OCA\Keepiq\Service\SecretService;
 use OCA\Keepiq\Service\SecretVersionService;
 use OCA\Keepiq\Service\SecretTypeService;
+use OCA\Keepiq\Service\ViewOnlyCopyGuard;
 use OCP\AppFramework\Db\DoesNotExistException;
 use OCP\AppFramework\Db\MultipleObjectsReturnedException;
 use PHPUnit\Framework\TestCase;
@@ -71,6 +72,7 @@ protected function setUp(): void {
 			linkShareService: $this->createMock(LinkShareService::class),
 			logger: $this->createMock(LoggerInterface::class),
 			db: $this->createMock(\OCP\IDBConnection::class),
+			viewOnlyCopies: $this->createStub(ViewOnlyCopyGuard::class),
 		);
 
 		$this->typeService->method('resolveTypeForSecret')->willReturn('api_key');
@@ -310,6 +312,7 @@ function (Secret $preUpdate) use (&$snapshots) {
 			linkShareService: $this->createMock(LinkShareService::class),
 			logger: $this->createMock(LoggerInterface::class),
 			db: $this->createMock(\OCP\IDBConnection::class),
+			viewOnlyCopies: $this->createStub(ViewOnlyCopyGuard::class),
 			auditService: $auditService,
 			versionService: $versionService,
 		);
diff --git a/tests/Unit/Service/SecretServiceOrgOwnershipTest.php b/tests/Unit/Service/SecretServiceOrgOwnershipTest.php
index c5e679c46..05aa49883 100644
--- a/tests/Unit/Service/SecretServiceOrgOwnershipTest.php
+++ b/tests/Unit/Service/SecretServiceOrgOwnershipTest.php
@@ -46,6 +46,7 @@
 use OCA\Keepiq\Service\TeamFolderMembershipResolver;
 use OCA\Keepiq\Service\TeamFolderQueryService;
 use OCA\Keepiq\Service\VaultPolicyService;
+use OCA\Keepiq\Service\ViewOnlyCopyGuard;
 use OCP\AppFramework\Db\DoesNotExistException;
 use OCP\IGroupManager;
 use PHPUnit\Framework\MockObject\MockObject;
@@ -140,6 +141,7 @@ protected function setUp(): void {
 			linkShareService: $this->createMock(LinkShareService::class),
 			logger: $this->createMock(LoggerInterface::class),
 			db: $this->createMock(\OCP\IDBConnection::class),
+			viewOnlyCopies: $this->createStub(ViewOnlyCopyGuard::class),
 			auditEvents: new AuditEventFactory(),
 			folderOwnership: new FolderOwnershipGuard($folderMapper),
 			orgOwnership: new OrgOwnershipGuard(policies: $policies, teamFolders: $queries, typeMapper: $typeMapper),
diff --git a/tests/Unit/Service/SecretServiceOrganisationTest.php b/tests/Unit/Service/SecretServiceOrganisationTest.php
index c9d166671..74a4ee430 100644
--- a/tests/Unit/Service/SecretServiceOrganisationTest.php
+++ b/tests/Unit/Service/SecretServiceOrganisationTest.php
@@ -28,6 +28,7 @@
 use OCA\Keepiq\Service\MigrationService;
 use OCA\Keepiq\Service\SecretService;
 use OCA\Keepiq\Service\SecretTypeService;
+use OCA\Keepiq\Service\ViewOnlyCopyGuard;
 use PHPUnit\Framework\MockObject\MockObject;
 use PHPUnit\Framework\TestCase;
 use Psr\Log\LoggerInterface;
@@ -61,6 +62,7 @@ protected function setUp(): void {
 			linkShareService: $this->createMock(LinkShareService::class),
 			logger: $this->createMock(LoggerInterface::class),
 			db: $this->createMock(\OCP\IDBConnection::class),
+			viewOnlyCopies: $this->createStub(ViewOnlyCopyGuard::class),
 			tagMapper: $this->tags,
 		);
 
diff --git a/tests/Unit/Service/SecretServiceTest.php b/tests/Unit/Service/SecretServiceTest.php
index 6e6221b89..50274771d 100644
--- a/tests/Unit/Service/SecretServiceTest.php
+++ b/tests/Unit/Service/SecretServiceTest.php
@@ -29,6 +29,7 @@
 use OCA\Keepiq\Exception\ForbiddenException;
 use OCA\Keepiq\Exception\NotFoundException;
 use OCA\Keepiq\Exception\SuiteBlockedException;
+use OCA\Keepiq\Exception\ViewOnlyCopyException;
 use OCA\Keepiq\Exception\WriteLockedException;
 use OCA\Keepiq\Service\FolderOwnershipGuard;
 use OCA\Keepiq\Service\LinkShareService;
@@ -36,6 +37,7 @@
 use OCA\Keepiq\Service\SecretService;
 use OCA\Keepiq\Service\SecretTypeService;
 use OCA\Keepiq\Service\SecretVersionService;
+use OCA\Keepiq\Service\ViewOnlyCopyGuard;
 use OCP\AppFramework\Db\DoesNotExistException;
 use PHPUnit\Framework\TestCase;
 use Psr\Log\LoggerInterface;
@@ -75,6 +77,11 @@ class SecretServiceTest extends TestCase {
 	 */
 	private $linkShareService;
 
+	/**
+	 * @var FolderOwnershipGuard
+	 */
+	private FolderOwnershipGuard $folderOwnership;
+
 	/**
 	 * Set up fixtures.
 	 *
@@ -100,6 +107,7 @@ static function (string $id): Folder {
 				return $folder;
 			}
 		);
+		$this->folderOwnership = new FolderOwnershipGuard($folderMapper);
 
 		$this->service = new SecretService(
 			mapper: $this->mapper,
@@ -109,7 +117,8 @@ static function (string $id): Folder {
 			linkShareService: $this->linkShareService,
 			logger: $logger,
 			db: $this->createMock(\OCP\IDBConnection::class),
-			folderOwnership: new FolderOwnershipGuard($folderMapper),
+			viewOnlyCopies: $this->createStub(ViewOnlyCopyGuard::class),
+			folderOwnership: $this->folderOwnership,
 		);
 	}//end setUp()
 
@@ -368,6 +377,7 @@ private function serviceWithVersions(SecretVersionService $versionService): Secr
 			linkShareService: $this->linkShareService,
 			logger: $this->createMock(LoggerInterface::class),
 			db: $this->createMock(\OCP\IDBConnection::class),
+			viewOnlyCopies: $this->createStub(ViewOnlyCopyGuard::class),
 			versionService: $versionService,
 		);
 	}//end serviceWithVersions()
@@ -733,6 +743,7 @@ public function testDeleteCascadesToGroupSharesAndDelegations(): void {
 			linkShareService: $this->linkShareService,
 			logger: $logger,
 			db: $this->createMock(\OCP\IDBConnection::class),
+			viewOnlyCopies: $this->createStub(ViewOnlyCopyGuard::class),
 			secretRequestService: null,
 			shareService: null,
 			groupShareMapper: $groupShareMapper,
@@ -1067,6 +1078,7 @@ public function testUpdateOverARowThatMovesAfterItsReadIsRefused(array $base): v
 			logger: $this->createMock(LoggerInterface::class),
 			versionService: $versions,
 			db: $db,
+			viewOnlyCopies: $this->createStub(ViewOnlyCopyGuard::class),
 		);
 
 		try {
@@ -1212,4 +1224,97 @@ public function testLoadForUpdateRefusesWhatUpdateRefuses(): void {
 			}
 		}
 	}//end testLoadForUpdateRefusesWhatUpdateRefuses()
+
+	/**
+	 * The service with a view-only guard that records the fields it is asked
+	 * about and refuses any value change.
+	 *
+	 * @param array<int,string[]> $asked Receives the fields of each call
+	 *
+	 * @return SecretService
+	 */
+	private function serviceWithViewOnlyGuard(array &$asked): SecretService {
+		$guard = $this->createMock(ViewOnlyCopyGuard::class);
+		$guard->method('assertMayChangeValue')->willReturnCallback(
+			static function (Secret $row, array $fields, string $userId) use (&$asked): void {
+				$asked[] = $fields;
+				if ($fields !== []) {
+					throw new ViewOnlyCopyException();
+				}
+			}
+		);
+
+		return new SecretService(
+			mapper: $this->mapper,
+			typeService: $this->typeService,
+			suiteMapper: $this->suiteMapper,
+			migrationService: $this->migrationService,
+			linkShareService: $this->linkShareService,
+			logger: $this->createMock(LoggerInterface::class),
+			db: $this->createMock(\OCP\IDBConnection::class),
+			folderOwnership: $this->folderOwnership,
+			viewOnlyCopies: $guard,
+		);
+	}//end serviceWithViewOnlyGuard()
+
+	/**
+	 * A new key, login or extra-field blob on a view-only copy is refused
+	 * before anything is written (keepiq#1287).
+	 *
+	 * @return void
+	 */
+	public function testAValueChangeOfAViewOnlyCopyIsRefusedBeforeAnyWrite(): void {
+		$this->migrationService->method('isWriteLocked')->willReturn(false);
+		$stored = $this->makeSecret();
+		$stored->setLogin('LOGIN');
+		$this->mapper->method('findById')->willReturn($stored);
+		$this->mapper->expects($this->never())->method('update');
+		$asked = [];
+		$service = $this->serviceWithViewOnlyGuard(asked: $asked);
+
+		$changes = [
+			['name' => 'Renamed', 'key' => 'NEW-CIPHERTEXT'],
+			['login' => null],
+			['additionalFields' => 'EXTRA'],
+		];
+		foreach ($changes as $data) {
+			try {
+				$service->update(id: 's-1', data: $data, userId: 'alice');
+				$this->fail('A value change of a view-only copy must be refused');
+			} catch (ViewOnlyCopyException $e) {
+				$this->assertSame(Secret::VIEW_ONLY_REFUSAL, $e->getMessage());
+			}
+		}
+
+		$this->assertSame([['key'], ['login'], ['additionalFields']], $asked);
+		$this->assertSame('GitHub', $stored->getName());
+		$this->assertSame('CIPHERTEXT', $stored->getKey());
+	}//end testAValueChangeOfAViewOnlyCopyIsRefusedBeforeAnyWrite()
+
+	/**
+	 * Filing and renaming a view-only copy still work, and so does an update
+	 * that resends the stored value unchanged (keepiq#1287).
+	 *
+	 * @return void
+	 */
+	public function testAViewOnlyCopyIsStillFiledRenamedAndResentUnchanged(): void {
+		$this->migrationService->method('isWriteLocked')->willReturn(false);
+		$stored = $this->makeSecret();
+		$this->mapper->method('findById')->willReturn($stored);
+		$this->mapper->method('advanceVersion')->willReturn(1);
+		$this->mapper->expects($this->exactly(2))->method('update')->willReturnArgument(0);
+		$asked = [];
+		$service = $this->serviceWithViewOnlyGuard(asked: $asked);
+
+		$service->update(id: 's-1', data: ['folderId' => 'f-1'], userId: 'alice');
+		$secret = $service->update(
+			id: 's-1',
+			data: ['name' => 'Renamed', 'key' => 'CIPHERTEXT', 'login' => '', 'additionalFields' => null],
+			userId: 'alice'
+		);
+
+		$this->assertSame([[], []], $asked);
+		$this->assertSame('f-1', $secret->getFolderId());
+		$this->assertSame('Renamed', $secret->getName());
+	}//end testAViewOnlyCopyIsStillFiledRenamedAndResentUnchanged()
 }//end class
diff --git a/tests/Unit/Service/SecretServiceTrashStateTest.php b/tests/Unit/Service/SecretServiceTrashStateTest.php
index e56152279..1f1ab2e86 100644
--- a/tests/Unit/Service/SecretServiceTrashStateTest.php
+++ b/tests/Unit/Service/SecretServiceTrashStateTest.php
@@ -29,6 +29,7 @@
 use OCA\Keepiq\Service\MigrationService;
 use OCA\Keepiq\Service\SecretService;
 use OCA\Keepiq\Service\SecretTypeService;
+use OCA\Keepiq\Service\ViewOnlyCopyGuard;
 use OCP\EventDispatcher\IEventDispatcher;
 use PHPUnit\Framework\MockObject\MockObject;
 use PHPUnit\Framework\TestCase;
@@ -68,6 +69,7 @@ function ($event): void {
 			linkShareService: $this->createMock(LinkShareService::class),
 			logger: $this->createMock(LoggerInterface::class),
 			db: $this->createMock(\OCP\IDBConnection::class),
+			viewOnlyCopies: $this->createStub(ViewOnlyCopyGuard::class),
 			eventDispatcher: $dispatcher,
 		);
 
diff --git a/tests/Unit/Service/SecretTrashServiceTest.php b/tests/Unit/Service/SecretTrashServiceTest.php
index 8709fb746..1e48fa4aa 100644
--- a/tests/Unit/Service/SecretTrashServiceTest.php
+++ b/tests/Unit/Service/SecretTrashServiceTest.php
@@ -35,6 +35,7 @@
 use OCA\Keepiq\Service\SecretSharingRevoker;
 use OCA\Keepiq\Service\SecretTrashService;
 use OCA\Keepiq\Service\ShareService;
+use OCA\Keepiq\Service\ViewOnlyCopyGuard;
 use PHPUnit\Framework\MockObject\MockObject;
 use PHPUnit\Framework\TestCase;
 use Psr\Log\LoggerInterface;
@@ -270,6 +271,7 @@ private function serviceOverRealSecretService(Secret $stored): SecretTrashServic
 			linkShareService: $this->linkShares,
 			logger: $this->createMock(LoggerInterface::class),
 			db: $this->createMock(\OCP\IDBConnection::class),
+			viewOnlyCopies: $this->createStub(ViewOnlyCopyGuard::class),
 		);
 
 		return new SecretTrashService(
diff --git a/tests/Unit/Service/SecretVersionServiceTest.php b/tests/Unit/Service/SecretVersionServiceTest.php
index 68328706b..001b02d56 100644
--- a/tests/Unit/Service/SecretVersionServiceTest.php
+++ b/tests/Unit/Service/SecretVersionServiceTest.php
@@ -28,8 +28,10 @@
 use OCA\Keepiq\Db\SecretVersion;
 use OCA\Keepiq\Db\SecretVersionMapper;
 use OCA\Keepiq\Exception\StaleWriteException;
+use OCA\Keepiq\Exception\ViewOnlyCopyException;
 use OCA\Keepiq\Service\SecretVersionAccessGuard;
 use OCA\Keepiq\Service\SecretVersionService;
+use OCA\Keepiq\Service\ViewOnlyCopyGuard;
 use OCP\AppFramework\Db\DoesNotExistException;
 use OCP\IDBConnection;
 use PHPUnit\Framework\MockObject\MockObject;
@@ -81,6 +83,7 @@ protected function setUp(): void {
 			),
 			logger: $this->logger,
 			db: $db,
+			viewOnlyCopies: $this->createStub(ViewOnlyCopyGuard::class),
 			eventDispatcher: null,
 		);
 	}//end setUp()
@@ -249,6 +252,40 @@ private function restorableHead(): Secret {
 		return $head;
 	}//end restorableHead()
 
+	/**
+	 * A restore of a copy its holder may only view is refused before the
+	 * head is snapshotted or written, whichever value fields the version
+	 * holds (keepiq#1287).
+	 *
+	 * @return void
+	 */
+	public function testARestoreOfAViewOnlyCopyIsRefusedUntouched(): void {
+		$head = $this->restorableHead();
+		$guard = $this->createMock(ViewOnlyCopyGuard::class);
+		$guard->expects($this->once())->method('assertMayChangeValue')
+			->with($head, ['key', 'login', 'additionalFields'], 'alice')
+			->willThrowException(new ViewOnlyCopyException());
+		$service = new SecretVersionService(
+			mapper: $this->mapper,
+			secretMapper: $this->secretMapper,
+			accessGuard: new SecretVersionAccessGuard(
+				mapper: $this->mapper,
+				secretMapper: $this->secretMapper,
+				suiteMapper: $this->suiteMapper,
+			),
+			logger: $this->logger,
+			db: $this->createMock(originalClassName: IDBConnection::class),
+			viewOnlyCopies: $guard,
+		);
+		$this->mapper->expects($this->never())->method('insert');
+		$this->secretMapper->expects($this->never())->method('advanceVersion');
+		$this->secretMapper->expects($this->never())->method('update');
+
+		$this->expectException(ViewOnlyCopyException::class);
+		$this->expectExceptionMessage(Secret::VIEW_ONLY_REFUSAL);
+		$service->restore(versionId: 'v-1', userId: 'alice');
+	}//end testARestoreOfAViewOnlyCopyIsRefusedUntouched()
+
 	/**
 	 * A restore chosen on an older head changes nothing.
 	 *
@@ -518,6 +555,7 @@ static function (\OCA\Keepiq\Event\Audit\AuditEvent $event) use (&$metadata): vo
 			accessGuard: $this->createMock(SecretVersionAccessGuard::class),
 			logger: $this->logger,
 			db: $this->createMock(IDBConnection::class),
+			viewOnlyCopies: $this->createStub(ViewOnlyCopyGuard::class),
 			eventDispatcher: $dispatcher,
 		);
 
diff --git a/tests/Unit/Service/ShareServiceTest.php b/tests/Unit/Service/ShareServiceTest.php
index 1ebbc272b..8df0cae68 100644
--- a/tests/Unit/Service/ShareServiceTest.php
+++ b/tests/Unit/Service/ShareServiceTest.php
@@ -31,6 +31,7 @@
 use OCA\Keepiq\Db\SecretMapper;
 use OCA\Keepiq\Db\ShareTarget;
 use OCA\Keepiq\Db\ShareTargetMapper;
+use OCA\Keepiq\Exception\ForbiddenException;
 use OCA\Keepiq\Service\DirectShareRegistrar;
 use OCA\Keepiq\Service\NotificationService;
 use OCA\Keepiq\Service\RecipientSecretCopyFactory;
@@ -118,6 +119,8 @@ class ShareServiceTest extends TestCase {
 	 */
 	protected function setUp(): void {
 		$this->mapper = $this->createMock(originalClassName: ShareTargetMapper::class);
+		// No secret is a received copy unless a test says so.
+		$this->mapper->method('findByRecipientSecret')->willThrowException(new DoesNotExistException('Not a copy'));
 		$this->secretMapper = $this->createMock(originalClassName: SecretMapper::class);
 		$this->suiteMapper = $this->createMock(originalClassName: EncryptionSuiteMapper::class);
 		$this->delegationMapper = $this->createMock(originalClassName: SecretDelegationMapper::class);
@@ -1309,4 +1312,36 @@ public function testSyncUpdateRejectsReadAndUngraded(): void {
 			}
 		}
 	}//end testSyncUpdateRejectsReadAndUngraded()
+
+	/**
+	 * Bob owns his copy of alice's secret, so the owner check passes on it. A
+	 * sync that names the copy is still refused and writes nothing, as it
+	 * would change his copy alone (keepiq#1287).
+	 *
+	 * @return void
+	 *
+	 * @spec openspec/specs/user-sharing/spec.md#requirement-view-only-copies
+	 */
+	public function testASyncThatNamesARecipientCopyIsRefused(): void {
+		$copy = $this->makeOwnerSecret('copy-1', 'bob');
+		$this->secretMapper->method('findById')->willReturn($copy);
+		$shareRow = new ShareTarget();
+		$shareRow->setSourceSecretId('src-1');
+		$shareRow->setTargetUserId('bob');
+		$shareRow->setSecretId('copy-1');
+		$this->mapper = $this->createMock(originalClassName: ShareTargetMapper::class);
+		$this->mapper->method('findByRecipientSecret')->with('copy-1')->willReturn($shareRow);
+		$this->service = $this->wireService();
+
+		$this->secretMapper->expects($this->never())->method('update');
+		$this->secretMapper->expects($this->never())->method('advanceVersion');
+
+		$this->expectException(ForbiddenException::class);
+		$this->service->syncUpdate(
+			secretId: 'copy-1',
+			updates: [['secretId' => 'copy-1', 'key' => 'OTHER_VALUE']],
+			expectedUpdatedAt: '',
+			userId: 'bob'
+		);
+	}//end testASyncThatNamesARecipientCopyIsRefused()
 }//end class
diff --git a/tests/Unit/Service/UseOnlyServerRefusalTest.php b/tests/Unit/Service/UseOnlyServerRefusalTest.php
index 44d3fd0f3..0166568d0 100644
--- a/tests/Unit/Service/UseOnlyServerRefusalTest.php
+++ b/tests/Unit/Service/UseOnlyServerRefusalTest.php
@@ -33,6 +33,7 @@
 use OCA\Keepiq\Service\TeamFolderMembershipResolver;
 use OCA\Keepiq\Service\ShareRestriction;
 use OCA\Keepiq\Service\ShareRevocationService;
+use OCA\Keepiq\Service\ViewOnlyCopyGuard;
 use OCA\Keepiq\Service\WriteLockService;
 use OCP\AppFramework\Db\DoesNotExistException;
 use OCP\IGroupManager;
@@ -75,6 +76,7 @@ private function secretService(): SecretService {
 			linkShareService: $this->createMock(LinkShareService::class),
 			logger: $this->createMock(LoggerInterface::class),
 			db: $this->createMock(\OCP\IDBConnection::class),
+			viewOnlyCopies: $this->createStub(ViewOnlyCopyGuard::class),
 		);
 	}
 
diff --git a/tests/Unit/Service/UserSharingIntegrationTest.php b/tests/Unit/Service/UserSharingIntegrationTest.php
index 11c852f3e..7d830270c 100644
--- a/tests/Unit/Service/UserSharingIntegrationTest.php
+++ b/tests/Unit/Service/UserSharingIntegrationTest.php
@@ -66,6 +66,7 @@
 use OCA\Keepiq\Service\ShareSync\ShareSyncGuards;
 use OCA\Keepiq\Service\ShareSync\ShareWriteContext;
 use OCA\Keepiq\Service\ShareSyncService;
+use OCA\Keepiq\Service\ViewOnlyCopyGuard;
 use OCP\AppFramework\Db\DoesNotExistException;
 use OCP\IDBConnection;
 use OCP\IGroupManager;
@@ -271,6 +272,7 @@ public function testDeleteSecretCascadesToAllSharingRows(): void {
 			linkShareService: $linkShareService,
 			logger: $this->createMock(LoggerInterface::class),
 			db: $this->createMock(IDBConnection::class),
+			viewOnlyCopies: $this->createStub(ViewOnlyCopyGuard::class),
 			secretRequestService: null,
 			shareService: $shareService,
 			groupShareMapper: $groupShareMapper,
diff --git a/tests/Unit/Service/ViewOnlyCopyGuardTest.php b/tests/Unit/Service/ViewOnlyCopyGuardTest.php
new file mode 100644
index 000000000..a68a7d807
--- /dev/null
+++ b/tests/Unit/Service/ViewOnlyCopyGuardTest.php
@@ -0,0 +1,325 @@
+<?php
+
+/**
+ * Unit tests for ViewOnlyCopyGuard.
+ *
+ * @category Test
+ * @package  OCA\Keepiq\Tests\Unit\Service
+ *
+ * @author    Conduction Development Team <dev@conductio.nl>
+ * @copyright 2026 Conduction B.V.
+ * @license   EUPL-1.2 https://joinup.ec.europa.eu/collection/eupl/eupl-text-eupl-12
+ *
+ * @version GIT: <git-id>
+ *
+ * @link https://conduction.nl
+ */
+
+declare(strict_types=1);
+
+namespace OCA\Keepiq\Tests\Unit\Service;
+
+use DateTime;
+use OCA\Keepiq\Db\EncryptionSuiteMapper;
+use OCA\Keepiq\Db\GroupShare;
+use OCA\Keepiq\Db\GroupShareMapper;
+use OCA\Keepiq\Db\Secret;
+use OCA\Keepiq\Db\SecretDelegation;
+use OCA\Keepiq\Db\SecretDelegationMapper;
+use OCA\Keepiq\Db\SecretMapper;
+use OCA\Keepiq\Db\ShareTarget;
+use OCA\Keepiq\Db\ShareTargetMapper;
+use OCA\Keepiq\Exception\NotFoundException;
+use OCA\Keepiq\Exception\ViewOnlyCopyException;
+use OCA\Keepiq\Service\ShareAuthorizationService;
+use OCA\Keepiq\Service\ShareSync\ShareWriteContext;
+use OCA\Keepiq\Service\TeamFolderService;
+use OCA\Keepiq\Service\ViewOnlyCopyGuard;
+use OCP\AppFramework\Db\DoesNotExistException;
+use OCP\AppFramework\Db\MultipleObjectsReturnedException;
+use OCP\IGroupManager;
+use PHPUnit\Framework\Attributes\DataProvider;
+use PHPUnit\Framework\MockObject\MockObject;
+use PHPUnit\Framework\TestCase;
+
+/**
+ * A copy's value is changed only by a holder who writes its source
+ * (keepiq#1287).
+ */
+class ViewOnlyCopyGuardTest extends TestCase {
+
+	private ShareTargetMapper&MockObject $targets;
+
+	private SecretMapper&MockObject $secrets;
+
+	private SecretDelegationMapper&MockObject $delegations;
+
+	private TeamFolderService&MockObject $teamFolders;
+
+	/** @var array<int,GroupShare> The group shares of `src`; bob is a member of `admin` */
+	private array $groupShares = [];
+
+	private ViewOnlyCopyGuard $guard;
+
+	/**
+	 * Bob holds copy `copy` of alice's `src`; he is no delegate and has no grade.
+	 *
+	 * @return void
+	 */
+	protected function setUp(): void {
+		parent::setUp();
+		$source = new Secret();
+		$source->setId('src');
+		$source->setOwnerType('user');
+		$source->setOwnerId('alice');
+
+		$target = new ShareTarget();
+		$target->setSourceSecretId('src');
+		$target->setSecretId('copy');
+		$target->setTargetUserId('bob');
+
+		$this->targets = $this->createMock(ShareTargetMapper::class);
+		$this->targets->method('findByRecipientSecret')->willReturn($target);
+		$this->targets->method('findBySourceSecretAndTargetUser')->willReturn($target);
+		$copy = $this->copy();
+		$this->secrets = $this->createMock(SecretMapper::class);
+		$this->secrets->method('findById')->willReturnCallback(
+			static fn (string $id): Secret => ($id === 'copy' ? $copy : $source)
+		);
+		$this->delegations = $this->createMock(SecretDelegationMapper::class);
+		$this->delegations->method('findActiveBySecretAndUser')->willThrowException(new DoesNotExistException(''));
+		$this->teamFolders = $this->createMock(TeamFolderService::class);
+		$this->buildGuard();
+	}//end setUp()
+
+	/**
+	 * Bob's row.
+	 *
+	 * @return Secret
+	 */
+	private function copy(): Secret {
+		$copy = new Secret();
+		$copy->setId('copy');
+		$copy->setOwnerType('user');
+		$copy->setOwnerId('bob');
+		return $copy;
+	}//end copy()
+
+	/**
+	 * Each value field on its own is refused for a holder who only views.
+	 *
+	 * @return array<string,array{0:string|null,1:string}>
+	 */
+	public static function viewOnlyChanges(): array {
+		return [
+			'a Viewer changes the key' => ['read', 'key'],
+			'a direct recipient changes the login' => [null, 'login'],
+			'a Viewer changes the extra fields' => ['read', 'additionalFields'],
+		];
+	}//end viewOnlyChanges()
+
+	/**
+	 * A holder without a write grade may not change the copy's value.
+	 *
+	 * @param string|null $grade The holder's team-folder grade, if any
+	 * @param string $field The value field changed
+	 *
+	 * @return void
+	 */
+	#[DataProvider('viewOnlyChanges')]
+	public function testAHolderWhoOnlyViewsMayNotChangeTheValue(?string $grade, string $field): void {
+		$this->teamFolders->method('resolveGrade')->willReturn($grade);
+
+		try {
+			$this->guard->assertMayChangeValue(row: $this->copy(), fields: ['name', $field], userId: 'bob');
+			$this->fail('A holder who only views must not change the value');
+		} catch (ViewOnlyCopyException $e) {
+			$this->assertSame(Secret::VIEW_ONLY_REFUSAL, $e->getMessage());
+			$this->assertSame('view_only', $e->policyCode());
+		}
+	}//end testAHolderWhoOnlyViewsMayNotChangeTheValue()
+
+	/**
+	 * Filing, renaming or retyping a copy leaves its value alone, so a holder
+	 * who only views may do it, and the sharing graph is not read.
+	 *
+	 * @return void
+	 */
+	public function testAChangeThatLeavesTheValueAlonePasses(): void {
+		$this->targets->expects($this->never())->method('findByRecipientSecret');
+
+		$this->guard->assertMayChangeValue(row: $this->copy(), fields: ['name', 'url', 'folderId', 'typeId'], userId: 'bob');
+		$this->guard->assertMayChangeValue(row: $this->copy(), fields: [], userId: 'bob');
+		$this->addToAssertionCount(1);
+	}//end testAChangeThatLeavesTheValueAlonePasses()
+
+	/**
+	 * Holders who write the source may change their copy's value.
+	 *
+	 * @return array<string,array{0:string|null}>
+	 */
+	public static function writerGrades(): array {
+		return [
+			'an Editor' => ['write'],
+			'a Manager' => ['manage'],
+		];
+	}//end writerGrades()
+
+	/**
+	 * A team-folder Editor or Manager writes the source.
+	 *
+	 * @param string $grade The holder's team-folder grade
+	 *
+	 * @return void
+	 */
+	#[DataProvider('writerGrades')]
+	public function testAWriteGradeHolderMayChangeTheValue(string $grade): void {
+		$this->teamFolders->method('resolveGrade')->willReturn($grade);
+
+		$this->guard->assertMayChangeValue(row: $this->copy(), fields: ['key', 'login', 'additionalFields'], userId: 'bob');
+		$this->addToAssertionCount(1);
+	}//end testAWriteGradeHolderMayChangeTheValue()
+
+	/**
+	 * A delegate of the source writes it as its owner does.
+	 *
+	 * @return void
+	 */
+	public function testADelegateMayChangeTheValue(): void {
+		$this->delegations = $this->createMock(SecretDelegationMapper::class);
+		$this->delegations->method('findActiveBySecretAndUser')->willReturn(new SecretDelegation());
+		$this->buildGuard();
+
+		$this->guard->assertMayChangeValue(row: $this->copy(), fields: ['key'], userId: 'bob');
+		$this->addToAssertionCount(1);
+	}//end testADelegateMayChangeTheValue()
+
+	/**
+	 * A member of a group the source is shared with in full writes it for
+	 * every copy (sharing-group).
+	 *
+	 * @return void
+	 */
+	public function testAMemberOfAFullLiveGroupShareMayChangeTheValue(): void {
+		$this->groupShares = [$this->groupShare()];
+
+		$this->guard->assertMayChangeValue(row: $this->copy(), fields: ['key'], userId: 'bob');
+		$this->addToAssertionCount(1);
+	}//end testAMemberOfAFullLiveGroupShareMayChangeTheValue()
+
+	/**
+	 * Group shares that give a member no write.
+	 *
+	 * @return array<string,array{0:bool,1:DateTime|null}>
+	 */
+	public static function groupSharesThatOnlyShow(): array {
+		return [
+			'a use-only group share' => [true, null],
+			'an expired group share' => [false, new DateTime('-1 hour')],
+		];
+	}//end groupSharesThatOnlyShow()
+
+	/**
+	 * A member of a use-only or expired group share holds a view-only copy.
+	 *
+	 * @param bool $useOnly Whether the group share is use-only
+	 * @param DateTime|null $expiresAt When the group share expires
+	 *
+	 * @return void
+	 */
+	#[DataProvider('groupSharesThatOnlyShow')]
+	public function testAMemberOfAGroupShareThatOnlyShowsMayNotChangeTheValue(bool $useOnly, ?DateTime $expiresAt): void {
+		$groupShare = $this->groupShare();
+		$groupShare->setUseOnly($useOnly);
+		$groupShare->setExpiresAt($expiresAt);
+		$this->groupShares = [$groupShare];
+
+		$this->expectException(ViewOnlyCopyException::class);
+		$this->guard->assertMayChangeValue(row: $this->copy(), fields: ['key'], userId: 'bob');
+	}//end testAMemberOfAGroupShareThatOnlyShowsMayNotChangeTheValue()
+
+	/**
+	 * A share of `src` with the group `admin`.
+	 *
+	 * @return GroupShare
+	 */
+	private function groupShare(): GroupShare {
+		$groupShare = new GroupShare();
+		$groupShare->setId('gs-admin');
+		$groupShare->setSecretId('src');
+		$groupShare->setGroupId('admin');
+		return $groupShare;
+	}//end groupShare()
+
+	/**
+	 * A row that is no copy is its owner's to change.
+	 *
+	 * @return void
+	 */
+	public function testARowThatIsNoCopyPasses(): void {
+		$this->targets = $this->createMock(ShareTargetMapper::class);
+		$this->targets->method('findByRecipientSecret')->willThrowException(new DoesNotExistException(''));
+		$this->buildGuard();
+		$this->secrets->expects($this->never())->method('findById');
+
+		$this->guard->assertMayChangeValue(row: $this->copy(), fields: ['key'], userId: 'bob');
+		$this->addToAssertionCount(1);
+	}//end testARowThatIsNoCopyPasses()
+
+	/**
+	 * A copy with more than one share row has no single source to judge it by.
+	 *
+	 * @return void
+	 */
+	public function testACopyWithTwoShareRowsIsNotFound(): void {
+		$this->targets = $this->createMock(ShareTargetMapper::class);
+		$this->targets->method('findByRecipientSecret')->willThrowException(new MultipleObjectsReturnedException(''));
+		$this->buildGuard();
+
+		$this->expectException(NotFoundException::class);
+		$this->guard->assertMayChangeValue(row: $this->copy(), fields: ['key'], userId: 'bob');
+	}//end testACopyWithTwoShareRowsIsNotFound()
+
+	/**
+	 * A copy whose source is gone is not found.
+	 *
+	 * @return void
+	 */
+	public function testACopyWhoseSourceIsGoneIsNotFound(): void {
+		$this->secrets = $this->createMock(SecretMapper::class);
+		$this->secrets->method('findById')->willThrowException(new DoesNotExistException(''));
+		$this->buildGuard();
+
+		$this->expectException(NotFoundException::class);
+		$this->guard->assertMayChangeValue(row: $this->copy(), fields: ['key'], userId: 'bob');
+	}//end testACopyWhoseSourceIsGoneIsNotFound()
+
+	/**
+	 * Rebuild the guard on the current mocks.
+	 *
+	 * @return void
+	 */
+	private function buildGuard(): void {
+		$groupShares = $this->createMock(GroupShareMapper::class);
+		$groupShares->method('findBySecret')->willReturnCallback(fn (): array => $this->groupShares);
+		$groups = $this->createMock(IGroupManager::class);
+		$groups->method('isInGroup')->willReturnCallback(
+			static fn (string $userId, string $groupId): bool => ($userId === 'bob' && $groupId === 'admin')
+		);
+		$suites = $this->createMock(EncryptionSuiteMapper::class);
+		$auth = new ShareAuthorizationService(
+			secretMapper: $this->secrets,
+			delegationMapper: $this->delegations,
+			suiteMapper: $suites,
+			teamFolderService: $this->teamFolders,
+			shareTargetMapper: $this->targets,
+			groupShareMapper: $groupShares,
+			groupManager: $groups,
+		);
+		$this->guard = new ViewOnlyCopyGuard(
+			targets: $this->targets,
+			secrets: $this->secrets,
+			contexts: new ShareWriteContext(targets: $this->targets, suites: $suites, auth: $auth),
+		);
+	}//end buildGuard()
+}//end class
diff --git a/tests/components/SecretDetailSidebar.viewOnlyCopy.spec.js b/tests/components/SecretDetailSidebar.viewOnlyCopy.spec.js
new file mode 100644
index 000000000..03efcc001
--- /dev/null
+++ b/tests/components/SecretDetailSidebar.viewOnlyCopy.spec.js
@@ -0,0 +1,274 @@
+/**
+ * SPDX-FileCopyrightText: 2026 Conduction B.V. <info@conduction.nl>
+ * SPDX-License-Identifier: EUPL-1.2
+ *
+ * A copy whose write-context gives no write grade in the secret sidebar
+ * (keepiq#1287): its holder cannot edit or restore it, and is told why, but
+ * still moves, stars and archives it.
+ *
+ * @spec openspec/specs/folder-permission-grades/spec.md#requirement-a-write-grade-member-may-update-a-folder-secret-for-all-recipients
+ */
+
+import axios from '@nextcloud/axios'
+import { mount } from '@vue/test-utils'
+import { createPinia, setActivePinia } from 'pinia'
+import { beforeEach, describe, expect, it, vi } from 'vitest'
+import SecretDetailSidebar from '../../src/components/SecretDetailSidebar.vue'
+import { useSecretStore } from '../../src/store/modules/secret.js'
+import { useSecretTypeStore } from '../../src/store/modules/secretType.js'
+
+const flush = () => new Promise((resolve) => setTimeout(resolve, 0))
+
+const button = {
+	props: ['disabled'],
+	emits: ['click'],
+	template:
+		'<button :disabled="disabled" @click="$emit(\'click\')"><slot /></button>',
+}
+const sidebarStubs = {
+	NcAppSidebar: { template: '<aside><slot name="description" /><slot /></aside>' },
+	NcActions: { template: '<div><slot /></div>' },
+	NcActionButton: { template: '<button><slot /></button>' },
+	NcButton: button,
+	NcEmptyContent: { template: '<div><slot /></div>' },
+	NcNoteCard: { template: '<div><slot /></div>' },
+	CopyButton: { template: '<button />' },
+	PasswordField: { template: '<input />' },
+	ShareList: true,
+	GroupShareList: true,
+	DelegationManager: true,
+	ShareRequestForm: true,
+	SecretRequestList: true,
+	SecretRequestCreateDialog: true,
+	SecretActivityTab: true,
+	AttachmentPanel: true,
+	RotationPanel: true,
+	HoneyPanel: true,
+	VersionHistoryPanel: {
+		props: ['canManage'],
+		template: '<div data-testid="versions" :data-manage="String(canManage)" />',
+	},
+}
+
+/**
+ * Answer the write-context of each secret from `contexts`, and every other GET
+ * with an empty list.
+ *
+ * @param {object} contexts Secret id to its write-context, or to a promise of it.
+ * @return {void}
+ */
+function serveWriteContexts(contexts) {
+	vi.spyOn(axios, 'get').mockImplementation(async (url) => {
+		const match = url.match(/secrets\/([^/]+)\/write-context$/)
+		return { data: match ? await contexts[match[1]] : [] }
+	})
+}
+
+/**
+ * Mount the sidebar over a secret Bob holds.
+ *
+ * @param {string} id The secret.
+ * @param {object} fields Extra fields of every secret served.
+ * @return {Promise<object>} The wrapper.
+ */
+async function mountHeld(id, fields = {}) {
+	window.OC = { currentUser: 'bob' }
+	useSecretStore().fetchSecret = vi.fn(async (secretId) => ({
+		id: secretId,
+		name: 'Supplier portal',
+		key: 'C',
+		ownerId: 'bob',
+		...fields,
+	}))
+	useSecretTypeStore().fetchTypes = vi.fn().mockResolvedValue([])
+	const wrapper = mount(SecretDetailSidebar, {
+		props: { secretId: id },
+		global: { stubs: sidebarStubs },
+	})
+	await flush()
+	await flush()
+	return wrapper
+}
+
+const has = (wrapper, id) => wrapper.find(`[data-testid="${id}"]`).exists()
+
+/**
+ * The write-context of a copy with this grade.
+ *
+ * @param {string} effectiveGrade The grade.
+ * @return {object}
+ */
+function copyWith(effectiveGrade) {
+	return {
+		sourceSecretId: 'src',
+		effectiveGrade,
+		ownerCertificate: null,
+		sourceUpdatedAt: null,
+	}
+}
+
+beforeEach(() => {
+	setActivePinia(createPinia())
+	vi.restoreAllMocks()
+})
+
+describe('a copy without a write grade', () => {
+	it.each(['read', 'none'])(
+		'with grade %s shows the note and no edit, restore or new request',
+		async (grade) => {
+			serveWriteContexts({ 'copy-1': copyWith(grade) })
+			const wrapper = await mountHeld('copy-1')
+
+			expect(
+				wrapper.find('[data-testid="secret-detail-view-only"]').text(),
+			).toBe(
+				'Shared with you to view only. Ask its owner for edit rights to change it.',
+			)
+			expect(has(wrapper, 'secret-detail-edit')).toBe(false)
+			expect(has(wrapper, 'secret-detail-request-create')).toBe(false)
+			expect(
+				wrapper.find('[data-testid="versions"]').attributes('data-manage'),
+			).toBe('false')
+		},
+	)
+
+	it("keeps the holder's own actions", async () => {
+		serveWriteContexts({ 'copy-1': copyWith('read') })
+		const wrapper = await mountHeld('copy-1')
+
+		expect(has(wrapper, 'secret-detail-move')).toBe(true)
+		expect(has(wrapper, 'secret-detail-star')).toBe(true)
+		expect(has(wrapper, 'secret-detail-archive')).toBe(true)
+		expect(has(wrapper, 'secret-detail-share')).toBe(true)
+		expect(has(wrapper, 'secret-detail-delete')).toBe(true)
+	})
+
+	it('does not carry its view-only state over to the next secret', async () => {
+		let answer
+		serveWriteContexts({
+			'copy-1': copyWith('read'),
+			'own-1': new Promise((resolve) => (answer = resolve)),
+		})
+		const wrapper = await mountHeld('copy-1')
+		expect(has(wrapper, 'secret-detail-view-only')).toBe(true)
+
+		await wrapper.setProps({ secretId: 'own-1' })
+		await flush()
+
+		// The copy stays on show, still view only, until the next secret
+		// and its write-context are both in: Edit never shows on the copy.
+		expect(wrapper.vm.secret.id).toBe('copy-1')
+		expect(has(wrapper, 'secret-detail-edit')).toBe(false)
+		answer({ sourceSecretId: 'own-1', effectiveGrade: 'owner' })
+		await flush()
+		expect(wrapper.vm.secret.id).toBe('own-1')
+		expect(has(wrapper, 'secret-detail-view-only')).toBe(false)
+		expect(has(wrapper, 'secret-detail-edit')).toBe(true)
+	})
+
+	it('drops a late answer for a secret the sidebar has left', async () => {
+		let answer
+		serveWriteContexts({
+			'copy-1': new Promise((resolve) => (answer = resolve)),
+			'own-1': { sourceSecretId: 'own-1', effectiveGrade: 'owner' },
+		})
+		const wrapper = await mountHeld('copy-1')
+
+		await wrapper.setProps({ secretId: 'own-1' })
+		await flush()
+		expect(has(wrapper, 'secret-detail-edit')).toBe(true)
+
+		answer(copyWith('read'))
+		await flush()
+		expect(wrapper.vm.secret.id).toBe('own-1')
+		expect(has(wrapper, 'secret-detail-view-only')).toBe(false)
+		expect(has(wrapper, 'secret-detail-edit')).toBe(true)
+	})
+
+	it('drops a late failure for a secret the sidebar has left', async () => {
+		serveWriteContexts({
+			'copy-1': copyWith('read'),
+			'copy-2': copyWith('read'),
+			'own-1': { sourceSecretId: 'own-1', effectiveGrade: 'owner' },
+		})
+		const wrapper = await mountHeld('copy-1')
+		let fail
+		let answer
+		useSecretStore().fetchSecret = vi.fn(
+			(secretId) =>
+				new Promise((resolve, reject) => {
+					if (secretId === 'copy-2') {
+						fail = reject
+					} else {
+						answer = () =>
+							resolve({
+								id: secretId,
+								name: 'Own',
+								key: 'C',
+								ownerId: 'bob',
+							})
+					}
+				}),
+		)
+
+		await wrapper.setProps({ secretId: 'copy-2' })
+		await wrapper.setProps({ secretId: 'own-1' })
+		fail(new Error('offline'))
+		await flush()
+		expect(wrapper.vm.error).toBe('')
+		expect(wrapper.vm.loading).toBe(true)
+
+		answer()
+		await flush()
+		expect(wrapper.vm.secret.id).toBe('own-1')
+		expect(wrapper.vm.error).toBe('')
+		expect(wrapper.vm.loading).toBe(false)
+		expect(has(wrapper, 'secret-detail-edit')).toBe(true)
+	})
+
+	it('loads without view-only state when its write-context fails', async () => {
+		vi.spyOn(axios, 'get').mockImplementation(async (url) => {
+			if (url.endsWith('/write-context')) {
+				throw new Error('offline')
+			}
+			return { data: [] }
+		})
+		const wrapper = await mountHeld('copy-1')
+
+		expect(wrapper.vm.secret.id).toBe('copy-1')
+		expect(has(wrapper, 'secret-detail-view-only')).toBe(false)
+		expect(has(wrapper, 'secret-detail-edit')).toBe(true)
+	})
+
+	it('shows only the use-only note on a use-only copy', async () => {
+		serveWriteContexts({ 'copy-1': copyWith('none') })
+		const wrapper = await mountHeld('copy-1', { useOnly: true })
+
+		expect(has(wrapper, 'secret-detail-use-only')).toBe(true)
+		expect(has(wrapper, 'secret-detail-view-only')).toBe(false)
+		expect(has(wrapper, 'secret-detail-edit')).toBe(false)
+	})
+})
+
+describe('a secret its holder may write', () => {
+	it.each([
+		['a copy with grade write', 'copy-1', copyWith('write')],
+		['a copy with grade manage', 'copy-1', copyWith('manage')],
+		['a copy with grade owner', 'copy-1', copyWith('owner')],
+		[
+			'their own secret',
+			'own-1',
+			{ sourceSecretId: 'own-1', effectiveGrade: 'owner' },
+		],
+	])('%s keeps edit and restore', async (_, id, context) => {
+		serveWriteContexts({ [id]: context })
+		const wrapper = await mountHeld(id)
+
+		expect(has(wrapper, 'secret-detail-view-only')).toBe(false)
+		expect(has(wrapper, 'secret-detail-edit')).toBe(true)
+		expect(has(wrapper, 'secret-detail-request-create')).toBe(true)
+		expect(
+			wrapper.find('[data-testid="versions"]').attributes('data-manage'),
+		).toBe('true')
+	})
+})
diff --git a/tests/dialogs/SecretEditDialog.shareSave.spec.js b/tests/dialogs/SecretEditDialog.shareSave.spec.js
index 662e76874..f4fe11823 100644
--- a/tests/dialogs/SecretEditDialog.shareSave.spec.js
+++ b/tests/dialogs/SecretEditDialog.shareSave.spec.js
@@ -107,8 +107,8 @@ const OPEN_WITH_PENDING = {
 
 /**
  * Mount the dialog over a copy whose open starts the merge write-back, like
- * the store's fetchSecret, against a server that refuses a stale copy or
- * source version, through the share save and the plain update alike.
+ * the store's fetchSecret, against a server whose share save refuses a stale
+ * copy or source version.
  *
  * @param {object} options The copy.
  * @param {string} options.grade The caller's grade on the source.
@@ -147,16 +147,10 @@ async function mountCopyWithWriteBack({
 	let arrive
 	const arrived = new Promise((resolve) => (arrive = resolve))
 	axios.put.mockImplementation(async (url, body) => {
-		if (hold && (body.patch ?? body).mergedPending) {
+		if (hold && body.patch?.mergedPending) {
 			arrive()
 			await hold
 		}
-		if (!url.endsWith('/share-save')) {
-			if (body.baseUpdatedAt !== server.copy) {
-				throw stale()
-			}
-			server.copy = SAVED_AT
-		}
 		return serve(url, body)
 	})
 	const store = useSecretStore()
@@ -216,11 +210,16 @@ describe('SecretEditDialog — share save', () => {
 	it('saves a copy from the source version it opened on, not the one at save time', async () => {
 		const opened = '2026-09-30T08:00:00+00:00'
 		const wrapper = await mountEdited({
-			context: { sourceSecretId: 'src', sourceUpdatedAt: opened },
+			context: {
+				sourceSecretId: 'src',
+				effectiveGrade: 'write',
+				sourceUpdatedAt: opened,
+			},
 		})
 		// The owner changed the source while the dialog was open.
 		useShareStore().fetchWriteContext.mockResolvedValue({
 			sourceSecretId: 'src',
+			effectiveGrade: 'write',
 			sourceUpdatedAt: '2026-10-01T09:00:00+00:00',
 		})
 		const update = vi
@@ -482,31 +481,39 @@ describe('SecretEditDialog — share save', () => {
 		expect(wrapper.emitted('saved')).toBeFalsy()
 	})
 
-	it('saves the own copy without a write grade held behind a merge write-back, not refused as stale against it', async () => {
-		let release
-		const hold = new Promise((resolve) => (release = resolve))
-		const { wrapper, log, writeBack, arrived } = await mountCopyWithWriteBack({
+	it('shows a copy without a write grade as view only and saves nothing, also not its merge write-back', async () => {
+		const { wrapper, log, writeBack } = await mountCopyWithWriteBack({
 			grade: 'read',
-			hold,
 		})
-
-		const saving = wrapper.vm.submit()
-		await arrived
-		release()
 		await writeBack()
-		await saving
+		await wrapper.vm.sourceBase
 		await wrapper.vm.$nextTick()
 
-		// Both go through the plain update, which moves only the copy.
+		expect(
+			wrapper.find('[data-testid="secret-edit-view-only"]').text(),
+		).toContain('Shared with you to view only')
+		const save = wrapper.findAll('button').find((b) => b.text() === 'Save')
+		expect(save.attributes('disabled')).toBeDefined()
+
+		await wrapper.vm.submit()
+
 		expect(log.saves).toHaveLength(0)
-		expect(log.plainPuts.map(([, body]) => body.baseUpdatedAt)).toEqual([
-			BASE,
-			SAVED_AT,
-		])
-		expect(wrapper.find('[data-testid="secret-edit-error"]').exists()).toBe(
+		expect(log.plainPuts).toHaveLength(0)
+		expect(wrapper.emitted('saved')).toBeFalsy()
+	})
+
+	it('keeps Save for a copy with a write grade', async () => {
+		const { wrapper, writeBack } = await mountCopyWithWriteBack({
+			grade: 'manage',
+		})
+		await writeBack()
+		await wrapper.vm.sourceBase
+		await wrapper.vm.$nextTick()
+
+		expect(wrapper.find('[data-testid="secret-edit-view-only"]').exists()).toBe(
 			false,
 		)
-		expect(wrapper.emitted('saved')).toBeTruthy()
+		expect(wrapper.vm.canSubmit).toBe(true)
 	})
 
 	it('shows a stale refusal as translated text and stays open', async () => {
diff --git a/tests/e2e/workflows/share-save.spec.ts b/tests/e2e/workflows/share-save.spec.ts
index 7debe60a1..e911718f0 100644
--- a/tests/e2e/workflows/share-save.spec.ts
+++ b/tests/e2e/workflows/share-save.spec.ts
@@ -711,6 +711,76 @@ test.describe('atomic share-save, end to end', () => {
 		await expectShows(bob, bobCopy, changed)
 	})
 
+	test('a direct-share recipient sees their copy as view only and still files and archives it', async () => {
+		const value = original('view')
+		const sourceId = await createSecret(
+			alice,
+			`View only ${alice.user.uid}`,
+			value,
+		)
+		const copies = await share(alice, sourceId, [bob])
+		const bobCopy = copies[bob.user.uid]
+		const folder = await api(bob.page, 'POST', '/folders', {
+			name: `Filed ${bob.user.uid}`,
+		})
+		expect(folder.status).toBe(201)
+
+		await openDetail(bob.page, bobCopy)
+		await expect(bob.page.getByTestId('secret-detail-view-only')).toHaveText(
+			'Shared with you to view only. Ask its owner for edit rights to change it.',
+			{ timeout: 20_000 },
+		)
+		await expect(bob.page.getByTestId('secret-detail-edit')).toHaveCount(0)
+
+		// Moving goes through the store the move dialog calls.
+		const watch = watchApi(bob.page)
+		await withStore(
+			bob.page,
+			'secret',
+			'async (store, data) => store.updateSecret(data.id, { folderId: data.folderId })',
+			{ id: bobCopy, folderId: folder.body.id },
+		)
+
+		// The server holds the same line: a new value is refused with
+		// `view_only`, filing the copy is not.
+		const certificate = await withStore<string>(
+			bob.page,
+			'session',
+			'async (store) => store.certificate',
+		)
+		const key = await withStore<string>(
+			bob.page,
+			'share',
+			'async (store, data) => (await store.encryptForRecipient({ key: data.key }, data.cert)).key',
+			{ key: 'Never-saved-view-1!', cert: certificate },
+		)
+		const refused = await api(bob.page, 'PUT', `/secrets/${bobCopy}`, { key })
+		expect(refused.status, JSON.stringify(refused.body)).toBe(428)
+		expect(refused.body.error).toBe('view_only')
+		const filed = await api(bob.page, 'PUT', `/secrets/${bobCopy}`, {
+			folderId: folder.body.id,
+		})
+		expect(filed.status, JSON.stringify(filed.body)).toBe(200)
+
+		await bob.page
+			.getByRole('button', { name: /Secret actions/i })
+			.evaluate((el: HTMLElement) => el.click())
+		await expect(bob.page.getByRole('menuitem', { name: 'Move' })).toBeVisible()
+		await bob.page.getByRole('menuitem', { name: 'Archive' }).click()
+		await expect
+			.poll(async () => Boolean((await row(bob.page, bobCopy)).archivedAt), {
+				timeout: 30_000,
+			})
+			.toBe(true)
+
+		expect((await row(bob.page, bobCopy)).folderId).toBe(folder.body.id)
+		expect(
+			(await watch.calls()).filter((c) => c.path.endsWith('/share-save')),
+		).toEqual([])
+		expect(await readValue(bob, bobCopy)).toEqual(value)
+		expect(await readValue(alice, sourceId)).toEqual(value)
+	})
+
 	test('a member of a group the secret is shared with saves for the owner and every other member', async () => {
 		// @e2e sharing-group::a-group-member-saves-for-everyone
 		// @e2e sharing-group::a-group-members-write-context-carries-the-write-grade
@@ -827,8 +897,8 @@ test.describe('atomic share-save, end to end', () => {
 		await expectShows(bob, bobCopy, changed)
 	})
 
-	test('a direct recipient in no group the secret is shared with changes only their own copy', async () => {
-		// @e2e sharing-group::a-direct-share-recipient-changes-only-their-own-copy
+	test('a direct recipient in no group the secret is shared with holds a view-only copy', async () => {
+		// @e2e sharing-group::a-direct-share-recipient-cannot-change-their-copy
 		// @e2e user-sharing::recipient-updates-shared-secret
 		const groupId = await newGroup([alice, bob, carol])
 		const value = original('eleven')
@@ -846,32 +916,28 @@ test.describe('atomic share-save, end to end', () => {
 		const refused = await shareSaveFrom(dave, daveCopy, 'Dave-everyone-11!')
 		expect([refused.status, refused.body.error]).toEqual([428, 'not_allowed'])
 
-		const watch = watchApi(dave.page)
-		await openEdit(dave.page, daveCopy)
-		watch.reset()
-		await fillLogin(dave.page, 'dave-wrote-this@example.test')
-		await savePassword(dave.page, 'Dave-wrote-this-11!')
-		await expect(dave.page.locator('.secret-form')).toHaveCount(0, {
-			timeout: 60_000,
+		// Without a write grade the copy is view-only (user-sharing).
+		await openDetail(dave.page, daveCopy)
+		await expect(dave.page.getByTestId('secret-detail-view-only')).toBeVisible({
+			timeout: 20_000,
 		})
-		const calls = await watch.calls()
-		expect(
-			calls.filter((c) => c.path.endsWith('/share-save')),
-			JSON.stringify(calls),
-		).toEqual([])
-		expect(
-			calls
-				.filter(
-					(c) => c.method === 'PUT' && c.path === `/secrets/${daveCopy}`,
-				)
-				.map((c) => c.status),
-		).toEqual([200])
+		await expect(dave.page.getByTestId('secret-detail-edit')).toHaveCount(0)
+		const certificate = await withStore<string>(
+			dave.page,
+			'session',
+			'async (store) => store.certificate',
+		)
+		const key = await withStore<string>(
+			dave.page,
+			'share',
+			'async (store, data) => (await store.encryptForRecipient({ key: data.key }, data.cert)).key',
+			{ key: 'Dave-wrote-this-11!', cert: certificate },
+		)
+		const ownCopy = await api(dave.page, 'PUT', `/secrets/${daveCopy}`, { key })
+		expect(ownCopy.status, JSON.stringify(ownCopy.body)).toBe(428)
+		expect(ownCopy.body.error).toBe('view_only')
 
-		await expectShows(dave, daveCopy, {
-			...value,
-			login: 'dave-wrote-this@example.test',
-			key: 'Dave-wrote-this-11!',
-		})
+		await expectShows(dave, daveCopy, value)
 		await expectShows(alice, sourceId, value)
 		await expectShows(bob, bobCopy, value)
 		await expectShows(carol, carolCopy, value)
diff --git a/tests/store/offlineQueue.spec.js b/tests/store/offlineQueue.spec.js
index 4171bed79..cfcc62faf 100644
--- a/tests/store/offlineQueue.spec.js
+++ b/tests/store/offlineQueue.spec.js
@@ -479,35 +479,35 @@ describe('replay', () => {
 			expect(stored.size).toBe(1)
 		})
 
-		it('"keep mine" on a stale copy saved without a write grade replays its plain update on the row version that 409 returned', async () => {
+		it('an edit of a copy without a write grade fails with its reason, sends nothing, is not retried, and the queue goes on', async () => {
 			await goOffline()
 			await secrets.updateSecret(
 				's1',
 				{ key: 'new' },
 				{ sourceBaseUpdatedAt: EDIT_SOURCE },
 			)
+			await secrets.createSecret({ name: 'B', key: 'v' })
 			goOnline()
 			const log = shareSaveServer({
 				id: 's1',
 				context: { ...context, effectiveGrade: 'read' },
-			})
-			const current = { id: 's1', updatedAt: '2026-10-02T09:00:00+00:00' }
-			// The plain update names no source version: it sends none either.
-			axios.put.mockRejectedValueOnce(
-				httpError(409, { message: 'This secret changed', current }),
-			)
-			await offline.replayQueue()
-			expect(writeContextReads()).toBe(1)
-			expect([...stored.values()][0]).toMatchObject({
-				conflictUpdatedAt: current.updatedAt,
-				conflictSourceUpdatedAt: null,
+				posts: { '/api/v1/secrets': { id: 'created' } },
 			})
 
-			await offline.resolveConflict(offline.conflictEntries[0].entryId, 'mine')
+			const result = await offline.replayQueue()
 
-			expect(log.plainPuts.at(-1)[1].baseUpdatedAt).toBe(current.updatedAt)
+			expect(result).toEqual({ synced: 1, stopped: false })
 			expect(log.saves).toHaveLength(0)
-			expect(stored.size).toBe(0)
+			expect(log.plainPuts).toHaveLength(0)
+			const [failed] = offline.failedEntries
+			expect(failed.secretId).toBe('s1')
+			expect(failed.failure).toEqual({ code: 'view_only' })
+			expect(failureText(failed.failure)).toContain('view only')
+
+			await offline.replayQueue()
+
+			expect(writeContextReads()).toBe(1)
+			expect(offline.failedEntries).toHaveLength(1)
 		})
 
 		it('an edit in the dialog of a copy opened from the cached snapshot replays on the source version the manifest carried', async () => {
diff --git a/tests/store/shareSave.spec.js b/tests/store/shareSave.spec.js
index 52d7cbaf4..ee2ae2caa 100644
--- a/tests/store/shareSave.spec.js
+++ b/tests/store/shareSave.spec.js
@@ -457,6 +457,10 @@ describe('saveShared on the owner path', () => {
 		expect(error.response.status).toBe(409)
 		expect(error.fromShareSave).toBe(true)
 		expect(shareSaveErrorText(error)).toContain('changed elsewhere')
+		// A plain update's 409 carries no code, only the current row.
+		expect(
+			shareSaveErrorText(httpError(409, { current: { id: 's1' } })),
+		).toContain('changed elsewhere')
 		expect(
 			shareSaveErrorText(httpError(409, { error: 'stale_source' })),
 		).toContain('original')
@@ -688,127 +692,78 @@ describe('saveShared on the copy-editor path', () => {
 		expect(log.saves.at(-1).copies).toEqual([{ secretId: 'src', login: null }])
 	})
 
-	it('saves only the own copy through the plain update without a write grade', async () => {
-		const log = shareSaveServer({
-			id: 'copy-me',
-			context: { ...context, effectiveGrade: 'none' },
-		})
+	it.each(['none', 'read'])(
+		'refuses an edit of a copy with grade %s before anything is sent',
+		async (grade) => {
+			const log = shareSaveServer({
+				id: 'copy-me',
+				context: { ...context, effectiveGrade: grade },
+			})
 
-		const result = await saveShared({
-			id: 'copy-me',
-			plainDiff: { key: 'k' },
-			patch: { key: 'K' },
-			baseUpdatedAt: BASE,
-		})
+			const error = await saveShared({
+				id: 'copy-me',
+				plainDiff: { key: 'k' },
+				patch: { key: 'K' },
+				baseUpdatedAt: BASE,
+			}).catch((e) => e)
 
-		expect(log.saves).toHaveLength(0)
-		expect(log.plainPuts[0][0]).toContain('/api/v1/secrets/copy-me')
-		expect(log.plainPuts[0][1]).toEqual({ key: 'K', baseUpdatedAt: BASE })
-		expect(result.secret.updatedAt).toBe(SAVED_AT)
-	})
+			expect(error).toBeInstanceOf(ShareSaveError)
+			expect(error.code).toBe('view_only')
+			expect(shareSaveErrorText(error)).toContain('view only')
+			expect(log.saves).toHaveLength(0)
+			expect(log.plainPuts).toHaveLength(0)
+		},
+	)
 
-	it('restores the own copy without a write grade through the version restore, which records it', async () => {
+	it('refuses a restore of a copy without a write grade, sends nothing and shows why', async () => {
 		const log = shareSaveServer({
 			id: 'copy-me',
 			context: { ...context, effectiveGrade: 'read' },
-			posts: {
-				'/api/v1/versions/v1/restore': {
-					id: 'copy-me',
-					updatedAt: SAVED_AT,
-				},
-			},
+			rows: { v1: { id: 'v1', name: 'Router', key: null, login: null } },
 		})
-		const whole = { key: 'k', login: null, additionalFields: null }
+		useSecretStore().currentSecret = { id: 'copy-me', updatedAt: BASE }
+		const store = useSecretVersionStore()
 
-		const result = await saveShared({
-			id: 'copy-me',
-			plainDiff: whole,
-			patch: { ...whole, key: 'K' },
-			baseUpdatedAt: BASE,
-			restoredFrom: 'v1',
-		})
+		await expect(store.restore('v1', 'copy-me')).rejects.toBeInstanceOf(
+			ShareSaveError,
+		)
 
 		expect(log.saves).toHaveLength(0)
 		expect(log.plainPuts).toHaveLength(0)
-		expect(axios.post).toHaveBeenCalledWith(
-			expect.stringContaining('/api/v1/versions/v1/restore'),
-			{ baseUpdatedAt: BASE },
-		)
-		expect(result.secret.updatedAt).toBe(SAVED_AT)
+		expect(axios.post).not.toHaveBeenCalled()
+		expect(store.error).toContain('Shared with you to view only')
 	})
 
-	it('shows a stale restore of the own copy like any stale save, and changes nothing', async () => {
-		const moved = '2026-10-01T10:30:00+00:00'
-		const restores = []
-		shareSaveServer({
+	it('saves a copy with grade manage through the share save', async () => {
+		const log = shareSaveServer({
 			id: 'copy-me',
-			context: { ...context, effectiveGrade: 'read' },
-			rows: { v1: { id: 'v1', name: 'Router', key: null, login: null } },
-			posts: {
-				'/api/v1/versions/v1/restore': (body) => {
-					restores.push(body)
-					if (body.baseUpdatedAt !== moved) {
-						throw httpError(409, {
-							error: 'stale',
-							message: 'Secret changed',
-							current: { id: 'copy-me', updatedAt: moved },
-						})
-					}
-					return { id: 'copy-me', updatedAt: SAVED_AT }
-				},
-			},
+			context: { ...context, effectiveGrade: 'manage' },
+			required: [{ secretId: 'src', holder: 'owner', targetUserId: null }],
 		})
-		useSecretStore().currentSecret = { id: 'copy-me', updatedAt: BASE }
-		const store = useSecretVersionStore()
-
-		await expect(store.restore('v1', 'copy-me')).rejects.toBeTruthy()
-
-		expect(restores).toEqual([{ baseUpdatedAt: BASE }])
-		expect(store.error).toContain('changed elsewhere')
-	})
 
-	it("shows the restore route's own 409, which carries no error code, as a stale restore", async () => {
-		shareSaveServer({
+		await saveShared({
 			id: 'copy-me',
-			context: { ...context, effectiveGrade: 'read' },
-			rows: { v1: { id: 'v1', name: 'Router', key: null, login: null } },
-			posts: {
-				// As SecretVersionController answers a StaleWriteException.
-				'/api/v1/versions/v1/restore': () => {
-					throw httpError(409, {
-						message: 'Secret changed',
-						current: { id: 'copy-me', updatedAt: SAVED_AT },
-					})
-				},
-			},
+			plainDiff: { key: 'k' },
+			patch: { key: 'K' },
+			baseUpdatedAt: BASE,
 		})
-		useSecretStore().currentSecret = { id: 'copy-me', updatedAt: BASE }
-		const store = useSecretVersionStore()
 
-		await expect(store.restore('v1', 'copy-me')).rejects.toBeTruthy()
-
-		expect(store.error).toContain('changed elsewhere')
+		expect(log.saves.at(-1).copies.map((c) => c.secretId)).toEqual(['src'])
+		expect(log.plainPuts).toHaveLength(0)
 	})
 
 	it('never sends a restore without a base', async () => {
-		const restores = []
-		shareSaveServer({
+		const log = shareSaveServer({
 			id: 'copy-me',
-			context: { ...context, effectiveGrade: 'read' },
+			context,
 			rows: { v1: { id: 'v1', name: 'Router', key: null, login: null } },
-			posts: {
-				'/api/v1/versions/v1/restore': (body) => {
-					restores.push(body)
-					return { id: 'copy-me', updatedAt: SAVED_AT }
-				},
-			},
 		})
 		const store = useSecretVersionStore()
 
 		await expect(store.restore('v1', 'copy-me')).rejects.toThrow(
 			'No base version',
 		)
-		expect(restores).toEqual([])
+		expect(log.saves).toEqual([])
 	})
 })
 
diff --git a/tests/vitest/copy-grade.spec.js b/tests/vitest/copy-grade.spec.js
new file mode 100644
index 000000000..46bb0d6e3
--- /dev/null
+++ b/tests/vitest/copy-grade.spec.js
@@ -0,0 +1,44 @@
+/**
+ * SPDX-FileCopyrightText: 2026 Conduction / Keepiq Contributors
+ * SPDX-License-Identifier: EUPL-1.2
+ *
+ * Which copies their holder may only view (keepiq#1287): the same rule the
+ * browser extension applies.
+ *
+ * @spec openspec/specs/folder-permission-grades/spec.md#requirement-a-write-grade-member-may-update-a-folder-secret-for-all-recipients
+ */
+
+import { describe, expect, it } from 'vitest'
+import { COPY_WRITER_GRADES, isViewOnlyCopy } from '../../src/utils/copyGrade.js'
+
+describe('isViewOnlyCopy', () => {
+	it.each(['read', 'none', undefined])(
+		'marks a copy with grade %s view only',
+		(effectiveGrade) => {
+			expect(
+				isViewOnlyCopy({ sourceSecretId: 'src', effectiveGrade }, 'copy-1'),
+			).toBe(true)
+		},
+	)
+
+	it.each(COPY_WRITER_GRADES)('lets a copy with grade %s be written', (grade) => {
+		expect(
+			isViewOnlyCopy(
+				{ sourceSecretId: 'src', effectiveGrade: grade },
+				'copy-1',
+			),
+		).toBe(false)
+	})
+
+	it('never marks the source itself view only', () => {
+		expect(
+			isViewOnlyCopy({ sourceSecretId: 's1', effectiveGrade: 'none' }, 's1'),
+		).toBe(false)
+	})
+
+	it('reads an unknown context as not view only', () => {
+		expect(isViewOnlyCopy(null, 'copy-1')).toBe(false)
+		expect(isViewOnlyCopy(undefined, 'copy-1')).toBe(false)
+		expect(isViewOnlyCopy({}, 'copy-1')).toBe(false)
+	})
+})