Groupfolder Extended Permissions (ACLs) missing after migration

ℹ️ Support
, ,
1

NC Version: 28.0.9
OS: Ubuntu 24.04.1 LTS
PHP Version: 8.3.6
Web server: Apache 2.4.58
Setup: LDAP for user authorization,
PhpMyAdmin for DB administration

Issue:
After migrating my Nextcloud instance, extended permissions (ACLs) for main group folders and subfolders are no longer visible or active. Individual permissions for users are not applied, even though the ACL data exists in the database (oc_groupfolders_acl table).

Manual Workaround:

Create a new ACL for any main group folder via the admin interface for a user (e.g., user123).
Find user123’s UID in the oc_accounts table and match it to ACL entries in oc_groupfolders_acl (use mapping_id when mapping_type is “user”).
In oc_filecache, locate the subfolder path with the new ACL and find the old and newly created ACLs.
Copy the fileid of the new ACL from oc_filecache.
Update the oc_groupfolders_acl table for the affected folder, replacing the old fileid with the new one.
This restores visibility of old permissions as long as they use the new fileid.
Problem:
Why is this happening, and how can I resolve it without manually fixing ~100 group folders with 1000+ permissions? There are no errors in the Nextcloud logs.

Thank you!

2

Is this only happening for pre-existing folders? Are completely new folders fine?

After migrating my Nextcloud instance,

How specifically did you migrate?

I ask because your workaround suggests some of your fields changed.

NC Version: 28.0.9

v28 basically end of life. And you’re a few maintenance releases behind within v28 itself (28.0.14 was the last).

3

Thank you very much for the reply jtr!

Is this only happening for pre-existing folders? Are completely new folders fine?

It applies only to preexisting folders. The ACLs could be added to the newly created groupfolders without any issues.

How specifically did you migrate?

Strictly according to the official manual:

https://docs.nextcloud.com/server/latest/admin_manual/maintenance/migrating.html

The difference in two servers might be that the partitions on the new VM are different. i.e. mountpoints are different, which causes the different paths, despite the data directories are identical.

v28 basically end of life
I do not upgrade the NC version, since i would like to solve the issue with ACLs first without causing new errors. On the source server the ACLs work fine with NC 28.0.9

Thanks once again!

4

Did the path to your datadirectory change when you moved to the new environment?

5

Did the path to your datadirectory change when you moved to the new environment?

Yes, the data directory has changed. I renamed and remounted the directory as it is in source environment and the existing ACLs are visible and active again . So thank you very much for the hint. It really helped!

1 Like
6

This topic was automatically closed 90 days after the last reply. New replies are no longer allowed.