Permissions for Group Folders gone

Nextcloud version (eg, 29.0.5): 29.0.4
Operating system and version (eg, Ubuntu 24.04): Ubuntu 22.04.1 LTS
Apache or nginx version (eg, Apache 2.4.25): Apache 2.4.52 (Ubuntu)
PHP version (eg, 8.3): 8.1

The issue you are facing:
We are using the Group Folders feature. This is working pretty fine for us. We have a Group Folder (“old-folder”), where all users of the group “sharegroup” have permissions to write, to delete and to share.
Some days ago, though, people told us that they are not able to upload files to that folder anymore. I added a new user account to the group “sharegroup” and checked that behaviour using this newly added user. And indeed, this user is not allowed to upload files to that folder. According to the guys who were using that folder before, this was possible some time ago.
I then re-checked the permissions of the group “sharegroup” and they are still set correctly. I already removed the permission and re-added them. I also removed the whole group from this Group Folder and re-added it, but people are still not able to add files to that folder.

As a workaround, I created a new group folder (“new-folder”) and granted permission to the same group. There, uploading files is working perfectly fine. I checked different settings and also the file system permissions. I did not find any differences between both Group Folders.

I know that the original Group Folder was created using a previous version of Nextcloud, but I am not sure, which version that was. Maybe the loss of permissions was caused by an update?

Is this the first time you’ve seen this error? (Y/N): Y

Steps to replicate it:

  1. Create Group Folder and grant permissions to write, delete and share files to a group using a fairly old NC version.
  2. Make sure uploading files is working.
  3. Update to newest version (or wait some time?)
  4. Try to upload files. Files cannot be uploaded anymore.
    (We are not able to reproduce this issue here on any other system, the repro steps have not been verified on our side.)

The output of your Nextcloud log in Admin > Logging:

see https://pastebin.com/j9uT5kGt

The output of your config.php file in /path/to/nextcloud (make sure you remove any identifiable information!):

<?php
$CONFIG = array (
  'passwordsalt' => '***************************',
  'secret' => '***************************',
  'trusted_domains' =>
  array (
    0 => 'localhost',
    1 => 'xxx.xxx.xx',
    2 => 'xxx.xxx.xxx.xx',
  ),
  'datadirectory' => '/mnt/xxxx/xxx',
  'dbtype' => 'pgsql',
  'version' => '29.0.4.1',
  'overwrite.cli.url' => 'https://xxxx.xxxxxxxxx.xx/',
  'dbname' => 'nextcloud_db',
  'dbhost' => 'localhost',
  'dbport' => '',
  'dbtableprefix' => 'oc_',
  'dbuser' => 'ncadmin',
  'dbpassword' => '*****************************',
  'installed' => true,
  'instanceid' => '**************',
  'log_type' => 'file',
  'logfile' => '/var/log/nextcloud/nextcloud.log',
  'loglevel' => 0,
  'mail_smtpmode' => 'smtp',
  'remember_login_cookie_lifetime' => '7200',
  'log_rotate_size' => '10485760',
  'trashbin_retention_obligation' => 'auto, 180',
  'versions_retention_obligation' => 'auto, 365',
  'simpleSignUpLink.shown' => 'false',
  'filelocking.enabled' => true,
  'memcache.distributed' => '\\OC\\Memcache\\Redis',
  'memcache.locking' => '\\OC\\Memcache\\Redis',
  'redis' =>
  array (
    'host' => '/var/run/redis/redis-server.sock',
    'port' => 0,
    'timeout' => 0.5,
    'dbindex' => 0,
    'password' => '************************',
  ),
  'logtimezone' => 'Europe/Berlin',
  'htaccess.RewriteBase' => '/',
  'share_folder' => '/Shared',
  'enable_previews' => true,
  'enabledPreviewProviders' =>
  array (
    11 => 'OC\\Preview\\PNG',
    12 => 'OC\\Preview\\JPEG',
    13 => 'OC\\Preview\\GIF',
    14 => 'OC\\Preview\\BMP',
    15 => 'OC\\Preview\\MarkDown',
    16 => 'OC\\Preview\\MP3',
    17 => 'OC\\Preview\\TXT',
   18 => 'OC\\Preview\\Movie',
  ),
  'preview_max_x' => '2048',
  'preview_max_y' => '2048',
  'jpeg_quality' => '60',
  'ldapIgnoreNamingRules' => false,
  'ldapProviderFactory' => 'OCA\\User_LDAP\\LDAPProviderFactory',
  'maintenance' => false,
  'mail_from_address' => 'cloud',
  'mail_sendmailmode' => 'smtp',
  'mail_domain' => '******************',
  'mail_smtphost' => '*******************',
  'mail_smtpport' => '25',
  'default_language' => 'de_DE',
  'default_locale' => 'de_DE',
  'default_phone_region' => 'DE',
  'app_install_overwrite' =>
  array (
    0 => 'twofactor_yubikey',
    1 => 'circles',
    2 => 'files_downloadactivity',
    3 => 'fulltextsearch',
    4 => 'fulltextsearch_elasticsearch',
    5 => 'files_fulltextsearch',
    6 => 'files_fulltextsearch_tesseract',
    7 => 'quota_warning',
    8 => 'twofactor_u2f',
    9 => 'twofactor_nextcloud_notification',
    10 => 'announcementcenter',
    11 => 'twofactor_gateway',
  ),
  'encryption.legacy_format_support' => false,
  'encryption.key_storage_migrated' => false,
  'memcache.local' => '\\OC\\Memcache\\Redis',
  'updater.release.channel' => 'stable',
  'twofactor_enforced' => 'true',
  'twofactor_enforced_groups' =>
  array (
    0 => '2FA',
  ),
  'twofactor_enforced_excluded_groups' =>
  array (
  ),
  'theme' => '',
  'maintenance_window_start' => 1,
);

Output errors in nextcloud.log in /var/www/ or as admin user in top right menu, filtering for errors. Use a pastebin service if necessary.

https://pastebin.com/j9uT5kGt
1 Like

What is the actual error/etc that you or your users see when uploading?

Are you uploading via the Web UI or one of the other clients?

Is your log from the time window you tried to reproduce the problem? If so, what transactions? (e.g. the filename or folder or time window)

Update to newest version

For what it’s worth, the latest maintenance release of v29 is 29.0.8.

What version of Groupfolders do you have installed?

Since updates are deployed by you rather than automatically, are you able to pinpoint when this behavior likely changed?

I have same problem here.

I can upload a file to groupfolder, but when I try to upload a file to a subfolder under that groupfolder, the “+New” button is grayed out. It doesn’t happen to all the groupfolders or subfolders, but seems to happen to subfolders containing big amout of files (like 1TB in total size).

When I check oc_group_folders_acl table in database, permissions are corret, but if I try to get nc:acl-list by API, the permissions are gone.
before update looked like this:
<nc:acl-permissions>17</nc:acl-permissions>

after update turns out to be 0:
<nc:acl-permissions>0</nc:acl-permissions>

I updated manually from NC28.0.6 to NC29.0.5. Also tried using updater from NC28.0.6 to NC29.0.8 but the same result.

GroupFolder Version is 17.0.2 on NC29.0.5, 17.0.5 on NC29.0.8

This topic was automatically closed 90 days after the last reply. New replies are no longer allowed.