Can's upload or delete files since upgrade to 14

ℹ️ Support
1

Hi all!
I’m currently running Nextcloud 15.0.7 with PHP 7.2, but it’s since the upgrade to NC 14 that file uploading and removal does not work, both from the desktop client and from the web UI.

The desktop client says “403 FORBIDDEN” while the web UI just hangs on the operation: the progess bar stays at 100% forever – and the files are not uploaded or deleted.

I updated NC and PHP at the same time, so this might also be an issue with PHP itself; before I was using NC 13 and PHP 5.6, and all was working fine.

The logs are completely useless: I find only records like this:

{"reqId":"XLMY4n8AAQEAAHi-rbsAAAJ8","level":0,"time":"2019-04-14T11:26:38+00:00","remoteAddr":"2a00:1fa0:8278:e738:744a:c8d1:903b:476f","user":"ministro","app":"no app in context","method":"GET","url":"\/ne
xtcloud\/index.php\/apps\/files\/","message":"No cache entry found for \/appdata_oc7885861573\/theming\/images\/background (storage: local::\/siilo\/users\/mardy\/owncloud-data\/, internalPath: appdata_oc78
85861573\/theming\/images\/background)","userAgent":"Mozilla\/5.0 (X11; Linux x86_64) AppleWebKit\/537.36 (KHTML, like Gecko) Ubuntu Chromium\/73.0.3683.75 Chrome\/73.0.3683.75 Safari\/537.36","version":"15
.0.7.0"}

Whereas the server logs say

[Sun Apr 14 14:26:26.790085 2019] [access_compat:error] [pid 30911:tid 3841255098112] [client 2a00:1fa0:8278:e738:744a:c8d1:903b:476f:24722] AH01797: client denied by server configuration: /siilo/users/mard
y/sites/mardy-cloud.kapsi.fi/www/nextcloud/index.php

which seem to hint at some configuration issue, but is not that explicative either. Any ideas on how to debug the issue?

2

Answering myself; in some other forum I’ve found the suggestion to add these lines to the .htaccess file:

<Limit GET POST PUT DELETE OPTIONS PROPFIND PROPPATCH MKCOL COPY MOVE LOCK UNLOCK>
    order deny,allow 
    allow from all
</Limit>

These lines do the trick indeed. But I wonder, how is security affected by these?