update attributes for share with user list, file should always have delete permissions, this means unshare in this context, and the overview page is always a root view