Public folder share is always writable despite being view only

Emi71 · June 4, 2026, 4:40pm

Support intro

Sorry to hear you’re facing problems.

The community help forum (help.nextcloud.com) is for home and non-enterprise users. Support is provided by other community members on a best effort / “as available” basis. All of those responding are volunteering their time to help you.

If you’re using Nextcloud in a business/critical setting, paid and SLA-based support services can be accessed via portal.nextcloud.com where Nextcloud engineers can help ensure your business keeps running smoothly.

Getting help

In order to help you as efficiently (and quickly!) as possible, please fill in as much of the below requested information as you can.

Before clicking submit: Please check if your query is already addressed via the following resources:

Official documentation (searchable and regularly updated)
How to topics and FAQs
Forum search

(Utilizing these existing resources is typically faster. It also helps reduce the load on our generous volunteers while elevating the signal to noise ratio of the forums otherwise arising from the same queries being posted repeatedly).

Some or all of the below information will be requested if it isn’t supplied; for fastest response please provide as much as you can.

The Basics

Nextcloud Server version (e.g., 29.x.x):
- 33.0.5.1
Operating system and version (e.g., Ubuntu 24.04):
- Debian 13
Web server and version (e.g, Apache 2.4.25):
- nginx 1.26.3
Reverse proxy and version _(e.g. nginx 1.27.2)
- replace me
PHP version (e.g, 8.3):
- 8.4
Is this the first time you’ve seen this error? (Yes / No):
- yes
When did this problem seem to first start?
- first time creating public share
Installation method (e.g. AlO, NCP, Bare Metal/Archive, etc.)
- Baremetal
Are you using CloudfIare, mod_security, or similar? (Yes / No)
- No

Summary of the issue you are facing:

Public folder shares allow file and folder creation and file uploads despite “Allow file Uploads” unchecked in admin settings shares.

Steps to replicate it (hint: details matter!):

click share option on folder
unclick password protect
create share

Log entries

Nextcloud

Please provide the log entries from your Nextcloud log that are generated during the time of problem (via the Copy raw option from Administration settings->Logging screen or from your nextcloud.log located in your data directory). Feel free to use a pastebin/gist service if necessary.

{"reqId":"v2C6gplmyV6EzHU00xz4","level":3,"time":"2026-06-04T16:09:15+00:00","remoteAddr":"***.***.***.***","user":"--","app":"no app in context","method":"DELETE","url":"/nextcloud/public.php/dav/files/oq6bCptFEHCXEKg/public_folder_creation","scriptName":"/nextcloud/public.php","message":"Exception thrown: Sabre\\DAV\\Exception\\NotFound","userAgent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:151.0) Gecko/20100101 Firefox/151.0","version":"33.0.5.1","exception":{"Exception":"Sabre\\DAV\\Exception\\NotFound","Message":"","Code":0,"Trace":[{"file":"/var/www/html/nextcloud/apps/dav/lib/Connector/Sabre/PublicAuth.php","line":82,"function":"checkToken","class":"OCA\\DAV\\Connector\\Sabre\\PublicAuth","type":"->"},{"file":"/var/www/html/nextcloud/3rdparty/sabre/dav/lib/DAV/Auth/Plugin.php","line":179,"function":"check","class":"OCA\\DAV\\Connector\\Sabre\\PublicAuth","type":"->"},{"file":"/var/www/html/nextcloud/3rdparty/sabre/dav/lib/DAV/Auth/Plugin.php","line":135,"function":"check","class":"Sabre\\DAV\\Auth\\Plugin","type":"->"},{"file":"/var/www/html/nextcloud/3rdparty/sabre/event/lib/WildcardEmitterTrait.php","line":89,"function":"beforeMethod","class":"Sabre\\DAV\\Auth\\Plugin","type":"->"},{"file":"/var/www/html/nextcloud/3rdparty/sabre/dav/lib/DAV/Server.php","line":456,"function":"emit","class":"Sabre\\DAV\\Server","type":"->"},{"file":"/var/www/html/nextcloud/apps/dav/lib/Connector/Sabre/Server.php","line":212,"function":"invokeMethod","class":"Sabre\\DAV\\Server","type":"->"},{"file":"/var/www/html/nextcloud/apps/dav/appinfo/v2/publicremote.php","line":168,"function":"start","class":"OCA\\DAV\\Connector\\Sabre\\Server","type":"->"},{"file":"/var/www/html/nextcloud/public.php","line":90,"args":["/var/www/html/nextcloud/apps/dav/appinfo/v2/publicremote.php"],"function":"require_once"}],"File":"/var/www/html/nextcloud/apps/dav/lib/Connector/Sabre/PublicAuth.php","Line":133,"message":"","exception":"{\"class\":\"Sabre\\DAV\\Exception\\NotFound\",\"message\":\"\",\"code\":0,\"file\":\"/var/www/html/nextcloud/apps/dav/lib/Connector/Sabre/PublicAuth.php:133\",\"trace\":\"#0 /var/www/html/nextcloud/apps/dav/lib/Connector/Sabre/PublicAuth.php(82): OCA\\DAV\\Connector\\Sabre\\PublicAuth->checkToken()\\n#1 /var/www/html/nextcloud/3rdparty/sabre/dav/lib/DAV/Auth/Plugin.php(179): OCA\\DAV\\Connector\\Sabre\\PublicAuth->check()\\n#2 /var/www/html/nextcloud/3rdparty/sabre/dav/lib/DAV/Auth/Plugin.php(135): Sabre\\DAV\\Auth\\Plugin->check()\\n#3 /var/www/html/nextcloud/3rdparty/sabre/event/lib/WildcardEmitterTrait.php(89): Sabre\\DAV\\Auth\\Plugin->beforeMethod()\\n#4 /var/www/html/nextcloud/3rdparty/sabre/dav/lib/DAV/Server.php(456): Sabre\\DAV\\Server->emit()\\n#5 /var/www/html/nextcloud/apps/dav/lib/Connector/Sabre/Server.php(212): Sabre\\DAV\\Server->invokeMethod()\\n#6 /var/www/html/nextcloud/apps/dav/appinfo/v2/publicremote.php(168): OCA\\DAV\\Connector\\Sabre\\Server->start()\\n#7 /var/www/html/nextcloud/public.php(90): require_once('...')\\n#8 {main}\"}","CustomMessage":"Exception thrown: Sabre\\DAV\\Exception\\NotFound"}}
{"reqId":"v2C6gplmyV6EzHU00xz4","level":3,"time":"2026-06-04T16:09:15+00:00","remoteAddr":"***.***.***.***","user":"--","app":"webdav","method":"DELETE","url":"/nextcloud/public.php/dav/files/oq6bCptFEHCXEKg/public_folder_creation","scriptName":"/nextcloud/public.php","message":"Sabre\\DAV\\Exception\\NotFound: ","userAgent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:151.0) Gecko/20100101 Firefox/151.0","version":"33.0.5.1","exception":{"Exception":"Sabre\\DAV\\Exception\\ServiceUnavailable","Message":"Sabre\\DAV\\Exception\\NotFound: ","Code":0,"Trace":[{"file":"/var/www/html/nextcloud/3rdparty/sabre/dav/lib/DAV/Auth/Plugin.php","line":179,"function":"check","class":"OCA\\DAV\\Connector\\Sabre\\PublicAuth","type":"->"},{"file":"/var/www/html/nextcloud/3rdparty/sabre/dav/lib/DAV/Auth/Plugin.php","line":135,"function":"check","class":"Sabre\\DAV\\Auth\\Plugin","type":"->"},{"file":"/var/www/html/nextcloud/3rdparty/sabre/event/lib/WildcardEmitterTrait.php","line":89,"function":"beforeMethod","class":"Sabre\\DAV\\Auth\\Plugin","type":"->"},{"file":"/var/www/html/nextcloud/3rdparty/sabre/dav/lib/DAV/Server.php","line":456,"function":"emit","class":"Sabre\\DAV\\Server","type":"->"},{"file":"/var/www/html/nextcloud/apps/dav/lib/Connector/Sabre/Server.php","line":212,"function":"invokeMethod","class":"Sabre\\DAV\\Server","type":"->"},{"file":"/var/www/html/nextcloud/apps/dav/appinfo/v2/publicremote.php","line":168,"function":"start","class":"OCA\\DAV\\Connector\\Sabre\\Server","type":"->"},{"file":"/var/www/html/nextcloud/public.php","line":90,"args":["/var/www/html/nextcloud/apps/dav/appinfo/v2/publicremote.php"],"function":"require_once"}],"File":"/var/www/html/nextcloud/apps/dav/lib/Connector/Sabre/PublicAuth.php","Line":99,"message":"Sabre\\DAV\\Exception\\NotFound: ","exception":"{\"class\":\"Sabre\\DAV\\Exception\\ServiceUnavailable\",\"message\":\"Sabre\\DAV\\Exception\\NotFound: \",\"code\":0,\"file\":\"/var/www/html/nextcloud/apps/dav/lib/Connector/Sabre/PublicAuth.php:99\",\"trace\":\"#0 /var/www/html/nextcloud/3rdparty/sabre/dav/lib/DAV/Auth/Plugin.php(179): OCA\\DAV\\Connector\\Sabre\\PublicAuth->check()\\n#1 /var/www/html/nextcloud/3rdparty/sabre/dav/lib/DAV/Auth/Plugin.php(135): Sabre\\DAV\\Auth\\Plugin->check()\\n#2 /var/www/html/nextcloud/3rdparty/sabre/event/lib/WildcardEmitterTrait.php(89): Sabre\\DAV\\Auth\\Plugin->beforeMethod()\\n#3 /var/www/html/nextcloud/3rdparty/sabre/dav/lib/DAV/Server.php(456): Sabre\\DAV\\Server->emit()\\n#4 /var/www/html/nextcloud/apps/dav/lib/Connector/Sabre/Server.php(212): Sabre\\DAV\\Server->invokeMethod()\\n#5 /var/www/html/nextcloud/apps/dav/appinfo/v2/publicremote.php(168): OCA\\DAV\\Connector\\Sabre\\Server->start()\\n#6 /var/www/html/nextcloud/public.php(90): require_once('...')\\n#7 {main}\"}","CustomMessage":"Sabre\\DAV\\Exception\\NotFound: "}}
{"reqId":"CMRQO6Iuu6G4LLZEXw25","level":3,"time":"2026-06-04T16:09:18+00:00","remoteAddr":"***.***.***.***","user":"--","app":"no app in context","method":"PROPFIND","url":"/nextcloud/public.php/dav/files/oq6bCptFEHCXEKg/public_folder_creation/","scriptName":"/nextcloud/public.php","message":"Exception thrown: Sabre\\DAV\\Exception\\NotFound","userAgent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:151.0) Gecko/20100101 Firefox/151.0","version":"33.0.5.1","exception":{"Exception":"Sabre\\DAV\\Exception\\NotFound","Message":"","Code":0,"Trace":[{"file":"/var/www/html/nextcloud/apps/dav/lib/Connector/Sabre/PublicAuth.php","line":82,"function":"checkToken","class":"OCA\\DAV\\Connector\\Sabre\\PublicAuth","type":"->"},{"file":"/var/www/html/nextcloud/3rdparty/sabre/dav/lib/DAV/Auth/Plugin.php","line":179,"function":"check","class":"OCA\\DAV\\Connector\\Sabre\\PublicAuth","type":"->"},{"file":"/var/www/html/nextcloud/3rdparty/sabre/dav/lib/DAV/Auth/Plugin.php","line":135,"function":"check","class":"Sabre\\DAV\\Auth\\Plugin","type":"->"},{"file":"/var/www/html/nextcloud/3rdparty/sabre/event/lib/WildcardEmitterTrait.php","line":89,"function":"beforeMethod","class":"Sabre\\DAV\\Auth\\Plugin","type":"->"},{"file":"/var/www/html/nextcloud/3rdparty/sabre/dav/lib/DAV/Server.php","line":456,"function":"emit","class":"Sabre\\DAV\\Server","type":"->"},{"file":"/var/www/html/nextcloud/apps/dav/lib/Connector/Sabre/Server.php","line":212,"function":"invokeMethod","class":"Sabre\\DAV\\Server","type":"->"},{"file":"/var/www/html/nextcloud/apps/dav/appinfo/v2/publicremote.php","line":168,"function":"start","class":"OCA\\DAV\\Connector\\Sabre\\Server","type":"->"},{"file":"/var/www/html/nextcloud/public.php","line":90,"args":["/var/www/html/nextcloud/apps/dav/appinfo/v2/publicremote.php"],"function":"require_once"}],"File":"/var/www/html/nextcloud/apps/dav/lib/Connector/Sabre/PublicAuth.php","Line":133,"message":"","exception":"{\"class\":\"Sabre\\DAV\\Exception\\NotFound\",\"message\":\"\",\"code\":0,\"file\":\"/var/www/html/nextcloud/apps/dav/lib/Connector/Sabre/PublicAuth.php:133\",\"trace\":\"#0 /var/www/html/nextcloud/apps/dav/lib/Connector/Sabre/PublicAuth.php(82): OCA\\DAV\\Connector\\Sabre\\PublicAuth->checkToken()\\n#1 /var/www/html/nextcloud/3rdparty/sabre/dav/lib/DAV/Auth/Plugin.php(179): OCA\\DAV\\Connector\\Sabre\\PublicAuth->check()\\n#2 /var/www/html/nextcloud/3rdparty/sabre/dav/lib/DAV/Auth/Plugin.php(135): Sabre\\DAV\\Auth\\Plugin->check()\\n#3 /var/www/html/nextcloud/3rdparty/sabre/event/lib/WildcardEmitterTrait.php(89): Sabre\\DAV\\Auth\\Plugin->beforeMethod()\\n#4 /var/www/html/nextcloud/3rdparty/sabre/dav/lib/DAV/Server.php(456): Sabre\\DAV\\Server->emit()\\n#5 /var/www/html/nextcloud/apps/dav/lib/Connector/Sabre/Server.php(212): Sabre\\DAV\\Server->invokeMethod()\\n#6 /var/www/html/nextcloud/apps/dav/appinfo/v2/publicremote.php(168): OCA\\DAV\\Connector\\Sabre\\Server->start()\\n#7 /var/www/html/nextcloud/public.php(90): require_once('...')\\n#8 {main}\"}","CustomMessage":"Exception thrown: Sabre\\DAV\\Exception\\NotFound"}}
{"reqId":"CMRQO6Iuu6G4LLZEXw25","level":3,"time":"2026-06-04T16:09:18+00:00","remoteAddr":"***.***.***.***","user":"--","app":"webdav","method":"PROPFIND","url":"/nextcloud/public.php/dav/files/oq6bCptFEHCXEKg/public_folder_creation/","scriptName":"/nextcloud/public.php","message":"Sabre\\DAV\\Exception\\NotFound: ","userAgent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:151.0) Gecko/20100101 Firefox/151.0","version":"33.0.5.1","exception":{"Exception":"Sabre\\DAV\\Exception\\ServiceUnavailable","Message":"Sabre\\DAV\\Exception\\NotFound: ","Code":0,"Trace":[{"file":"/var/www/html/nextcloud/3rdparty/sabre/dav/lib/DAV/Auth/Plugin.php","line":179,"function":"check","class":"OCA\\DAV\\Connector\\Sabre\\PublicAuth","type":"->"},{"file":"/var/www/html/nextcloud/3rdparty/sabre/dav/lib/DAV/Auth/Plugin.php","line":135,"function":"check","class":"Sabre\\DAV\\Auth\\Plugin","type":"->"},{"file":"/var/www/html/nextcloud/3rdparty/sabre/event/lib/WildcardEmitterTrait.php","line":89,"function":"beforeMethod","class":"Sabre\\DAV\\Auth\\Plugin","type":"->"},{"file":"/var/www/html/nextcloud/3rdparty/sabre/dav/lib/DAV/Server.php","line":456,"function":"emit","class":"Sabre\\DAV\\Server","type":"->"},{"file":"/var/www/html/nextcloud/apps/dav/lib/Connector/Sabre/Server.php","line":212,"function":"invokeMethod","class":"Sabre\\DAV\\Server","type":"->"},{"file":"/var/www/html/nextcloud/apps/dav/appinfo/v2/publicremote.php","line":168,"function":"start","class":"OCA\\DAV\\Connector\\Sabre\\Server","type":"->"},{"file":"/var/www/html/nextcloud/public.php","line":90,"args":["/var/www/html/nextcloud/apps/dav/appinfo/v2/publicremote.php"],"function":"require_once"}],"File":"/var/www/html/nextcloud/apps/dav/lib/Connector/Sabre/PublicAuth.php","Line":99,"message":"Sabre\\DAV\\Exception\\NotFound: ","exception":"{\"class\":\"Sabre\\DAV\\Exception\\ServiceUnavailable\",\"message\":\"Sabre\\DAV\\Exception\\NotFound: \",\"code\":0,\"file\":\"/var/www/html/nextcloud/apps/dav/lib/Connector/Sabre/PublicAuth.php:99\",\"trace\":\"#0 /var/www/html/nextcloud/3rdparty/sabre/dav/lib/DAV/Auth/Plugin.php(179): OCA\\DAV\\Connector\\Sabre\\PublicAuth->check()\\n#1 /var/www/html/nextcloud/3rdparty/sabre/dav/lib/DAV/Auth/Plugin.php(135): Sabre\\DAV\\Auth\\Plugin->check()\\n#2 /var/www/html/nextcloud/3rdparty/sabre/event/lib/WildcardEmitterTrait.php(89): Sabre\\DAV\\Auth\\Plugin->beforeMethod()\\n#3 /var/www/html/nextcloud/3rdparty/sabre/dav/lib/DAV/Server.php(456): Sabre\\DAV\\Server->emit()\\n#4 /var/www/html/nextcloud/apps/dav/lib/Connector/Sabre/Server.php(212): Sabre\\DAV\\Server->invokeMethod()\\n#5 /var/www/html/nextcloud/apps/dav/appinfo/v2/publicremote.php(168): OCA\\DAV\\Connector\\Sabre\\Server->start()\\n#6 /var/www/html/nextcloud/public.php(90): require_once('...')\\n#7 {main}\"}","CustomMessage":"Sabre\\DAV\\Exception\\NotFound: "}}
{"reqId":"r2tVscDY1akcWtr5I4NI","level":3,"time":"2026-06-04T16:09:22+00:00","remoteAddr":"***.***.***.***","user":"--","app":"no app in context","method":"DELETE","url":"/nextcloud/public.php/dav/files/oq6bCptFEHCXEKg/public_folder_creation","scriptName":"/nextcloud/public.php","message":"Exception thrown: Sabre\\DAV\\Exception\\NotFound","userAgent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:151.0) Gecko/20100101 Firefox/151.0","version":"33.0.5.1","exception":{"Exception":"Sabre\\DAV\\Exception\\NotFound","Message":"","Code":0,"Trace":[{"file":"/var/www/html/nextcloud/apps/dav/lib/Connector/Sabre/PublicAuth.php","line":82,"function":"checkToken","class":"OCA\\DAV\\Connector\\Sabre\\PublicAuth","type":"->"},{"file":"/var/www/html/nextcloud/3rdparty/sabre/dav/lib/DAV/Auth/Plugin.php","line":179,"function":"check","class":"OCA\\DAV\\Connector\\Sabre\\PublicAuth","type":"->"},{"file":"/var/www/html/nextcloud/3rdparty/sabre/dav/lib/DAV/Auth/Plugin.php","line":135,"function":"check","class":"Sabre\\DAV\\Auth\\Plugin","type":"->"},{"file":"/var/www/html/nextcloud/3rdparty/sabre/event/lib/WildcardEmitterTrait.php","line":89,"function":"beforeMethod","class":"Sabre\\DAV\\Auth\\Plugin","type":"->"},{"file":"/var/www/html/nextcloud/3rdparty/sabre/dav/lib/DAV/Server.php","line":456,"function":"emit","class":"Sabre\\DAV\\Server","type":"->"},{"file":"/var/www/html/nextcloud/apps/dav/lib/Connector/Sabre/Server.php","line":212,"function":"invokeMethod","class":"Sabre\\DAV\\Server","type":"->"},{"file":"/var/www/html/nextcloud/apps/dav/appinfo/v2/publicremote.php","line":168,"function":"start","class":"OCA\\DAV\\Connector\\Sabre\\Server","type":"->"},{"file":"/var/www/html/nextcloud/public.php","line":90,"args":["/var/www/html/nextcloud/apps/dav/appinfo/v2/publicremote.php"],"function":"require_once"}],"File":"/var/www/html/nextcloud/apps/dav/lib/Connector/Sabre/PublicAuth.php","Line":133,"message":"","exception":"{\"class\":\"Sabre\\DAV\\Exception\\NotFound\",\"message\":\"\",\"code\":0,\"file\":\"/var/www/html/nextcloud/apps/dav/lib/Connector/Sabre/PublicAuth.php:133\",\"trace\":\"#0 /var/www/html/nextcloud/apps/dav/lib/Connector/Sabre/PublicAuth.php(82): OCA\\DAV\\Connector\\Sabre\\PublicAuth->checkToken()\\n#1 /var/www/html/nextcloud/3rdparty/sabre/dav/lib/DAV/Auth/Plugin.php(179): OCA\\DAV\\Connector\\Sabre\\PublicAuth->check()\\n#2 /var/www/html/nextcloud/3rdparty/sabre/dav/lib/DAV/Auth/Plugin.php(135): Sabre\\DAV\\Auth\\Plugin->check()\\n#3 /var/www/html/nextcloud/3rdparty/sabre/event/lib/WildcardEmitterTrait.php(89): Sabre\\DAV\\Auth\\Plugin->beforeMethod()\\n#4 /var/www/html/nextcloud/3rdparty/sabre/dav/lib/DAV/Server.php(456): Sabre\\DAV\\Server->emit()\\n#5 /var/www/html/nextcloud/apps/dav/lib/Connector/Sabre/Server.php(212): Sabre\\DAV\\Server->invokeMethod()\\n#6 /var/www/html/nextcloud/apps/dav/appinfo/v2/publicremote.php(168): OCA\\DAV\\Connector\\Sabre\\Server->start()\\n#7 /var/www/html/nextcloud/public.php(90): require_once('...')\\n#8 {main}\"}","CustomMessage":"Exception thrown: Sabre\\DAV\\Exception\\NotFound"}}
{"reqId":"r2tVscDY1akcWtr5I4NI","level":3,"time":"2026-06-04T16:09:22+00:00","remoteAddr":"***.***.***.***","user":"--","app":"webdav","method":"DELETE","url":"/nextcloud/public.php/dav/files/oq6bCptFEHCXEKg/public_folder_creation","scriptName":"/nextcloud/public.php","message":"Sabre\\DAV\\Exception\\NotFound: ","userAgent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:151.0) Gecko/20100101 Firefox/151.0","version":"33.0.5.1","exception":{"Exception":"Sabre\\DAV\\Exception\\ServiceUnavailable","Message":"Sabre\\DAV\\Exception\\NotFound: ","Code":0,"Trace":[{"file":"/var/www/html/nextcloud/3rdparty/sabre/dav/lib/DAV/Auth/Plugin.php","line":179,"function":"check","class":"OCA\\DAV\\Connector\\Sabre\\PublicAuth","type":"->"},{"file":"/var/www/html/nextcloud/3rdparty/sabre/dav/lib/DAV/Auth/Plugin.php","line":135,"function":"check","class":"Sabre\\DAV\\Auth\\Plugin","type":"->"},{"file":"/var/www/html/nextcloud/3rdparty/sabre/event/lib/WildcardEmitterTrait.php","line":89,"function":"beforeMethod","class":"Sabre\\DAV\\Auth\\Plugin","type":"->"},{"file":"/var/www/html/nextcloud/3rdparty/sabre/dav/lib/DAV/Server.php","line":456,"function":"emit","class":"Sabre\\DAV\\Server","type":"->"},{"file":"/var/www/html/nextcloud/apps/dav/lib/Connector/Sabre/Server.php","line":212,"function":"invokeMethod","class":"Sabre\\DAV\\Server","type":"->"},{"file":"/var/www/html/nextcloud/apps/dav/appinfo/v2/publicremote.php","line":168,"function":"start","class":"OCA\\DAV\\Connector\\Sabre\\Server","type":"->"},{"file":"/var/www/html/nextcloud/public.php","line":90,"args":["/var/www/html/nextcloud/apps/dav/appinfo/v2/publicremote.php"],"function":"require_once"}],"File":"/var/www/html/nextcloud/apps/dav/lib/Connector/Sabre/PublicAuth.php","Line":99,"message":"Sabre\\DAV\\Exception\\NotFound: ","exception":"{\"class\":\"Sabre\\DAV\\Exception\\ServiceUnavailable\",\"message\":\"Sabre\\DAV\\Exception\\NotFound: \",\"code\":0,\"file\":\"/var/www/html/nextcloud/apps/dav/lib/Connector/Sabre/PublicAuth.php:99\",\"trace\":\"#0 /var/www/html/nextcloud/3rdparty/sabre/dav/lib/DAV/Auth/Plugin.php(179): OCA\\DAV\\Connector\\Sabre\\PublicAuth->check()\\n#1 /var/www/html/nextcloud/3rdparty/sabre/dav/lib/DAV/Auth/Plugin.php(135): Sabre\\DAV\\Auth\\Plugin->check()\\n#2 /var/www/html/nextcloud/3rdparty/sabre/event/lib/WildcardEmitterTrait.php(89): Sabre\\DAV\\Auth\\Plugin->beforeMethod()\\n#3 /var/www/html/nextcloud/3rdparty/sabre/dav/lib/DAV/Server.php(456): Sabre\\DAV\\Server->emit()\\n#4 /var/www/html/nextcloud/apps/dav/lib/Connector/Sabre/Server.php(212): Sabre\\DAV\\Server->invokeMethod()\\n#5 /var/www/html/nextcloud/apps/dav/appinfo/v2/publicremote.php(168): OCA\\DAV\\Connector\\Sabre\\Server->start()\\n#6 /var/www/html/nextcloud/public.php(90): require_once('...')\\n#7 {main}\"}","CustomMessage":"Sabre\\DAV\\Exception\\NotFound: "}}
{"reqId":"zrizcF2SrtUFLCtFGyQB","level":3,"time":"2026-06-04T16:09:24+00:00","remoteAddr":"***.***.***.***","user":"--","app":"no app in context","method":"DELETE","url":"/nextcloud/public.php/dav/files/oq6bCptFEHCXEKg/New%20folder","scriptName":"/nextcloud/public.php","message":"Exception thrown: Sabre\\DAV\\Exception\\NotFound","userAgent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:151.0) Gecko/20100101 Firefox/151.0","version":"33.0.5.1","exception":{"Exception":"Sabre\\DAV\\Exception\\NotFound","Message":"","Code":0,"Trace":[{"file":"/var/www/html/nextcloud/apps/dav/lib/Connector/Sabre/PublicAuth.php","line":82,"function":"checkToken","class":"OCA\\DAV\\Connector\\Sabre\\PublicAuth","type":"->"},{"file":"/var/www/html/nextcloud/3rdparty/sabre/dav/lib/DAV/Auth/Plugin.php","line":179,"function":"check","class":"OCA\\DAV\\Connector\\Sabre\\PublicAuth","type":"->"},{"file":"/var/www/html/nextcloud/3rdparty/sabre/dav/lib/DAV/Auth/Plugin.php","line":135,"function":"check","class":"Sabre\\DAV\\Auth\\Plugin","type":"->"},{"file":"/var/www/html/nextcloud/3rdparty/sabre/event/lib/WildcardEmitterTrait.php","line":89,"function":"beforeMethod","class":"Sabre\\DAV\\Auth\\Plugin","type":"->"},{"file":"/var/www/html/nextcloud/3rdparty/sabre/dav/lib/DAV/Server.php","line":456,"function":"emit","class":"Sabre\\DAV\\Server","type":"->"},{"file":"/var/www/html/nextcloud/apps/dav/lib/Connector/Sabre/Server.php","line":212,"function":"invokeMethod","class":"Sabre\\DAV\\Server","type":"->"},{"file":"/var/www/html/nextcloud/apps/dav/appinfo/v2/publicremote.php","line":168,"function":"start","class":"OCA\\DAV\\Connector\\Sabre\\Server","type":"->"},{"file":"/var/www/html/nextcloud/public.php","line":90,"args":["/var/www/html/nextcloud/apps/dav/appinfo/v2/publicremote.php"],"function":"require_once"}],"File":"/var/www/html/nextcloud/apps/dav/lib/Connector/Sabre/PublicAuth.php","Line":133,"message":"","exception":"{\"class\":\"Sabre\\DAV\\Exception\\NotFound\",\"message\":\"\",\"code\":0,\"file\":\"/var/www/html/nextcloud/apps/dav/lib/Connector/Sabre/PublicAuth.php:133\",\"trace\":\"#0 /var/www/html/nextcloud/apps/dav/lib/Connector/Sabre/PublicAuth.php(82): OCA\\DAV\\Connector\\Sabre\\PublicAuth->checkToken()\\n#1 /var/www/html/nextcloud/3rdparty/sabre/dav/lib/DAV/Auth/Plugin.php(179): OCA\\DAV\\Connector\\Sabre\\PublicAuth->check()\\n#2 /var/www/html/nextcloud/3rdparty/sabre/dav/lib/DAV/Auth/Plugin.php(135): Sabre\\DAV\\Auth\\Plugin->check()\\n#3 /var/www/html/nextcloud/3rdparty/sabre/event/lib/WildcardEmitterTrait.php(89): Sabre\\DAV\\Auth\\Plugin->beforeMethod()\\n#4 /var/www/html/nextcloud/3rdparty/sabre/dav/lib/DAV/Server.php(456): Sabre\\DAV\\Server->emit()\\n#5 /var/www/html/nextcloud/apps/dav/lib/Connector/Sabre/Server.php(212): Sabre\\DAV\\Server->invokeMethod()\\n#6 /var/www/html/nextcloud/apps/dav/appinfo/v2/publicremote.php(168): OCA\\DAV\\Connector\\Sabre\\Server->start()\\n#7 /var/www/html/nextcloud/public.php(90): require_once('...')\\n#8 {main}\"}","CustomMessage":"Exception thrown: Sabre\\DAV\\Exception\\NotFound"}}
{"reqId":"zrizcF2SrtUFLCtFGyQB","level":3,"time":"2026-06-04T16:09:24+00:00","remoteAddr":"***.***.***.***","user":"--","app":"webdav","method":"DELETE","url":"/nextcloud/public.php/dav/files/oq6bCptFEHCXEKg/New%20folder","scriptName":"/nextcloud/public.php","message":"Sabre\\DAV\\Exception\\NotFound: ","userAgent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:151.0) Gecko/20100101 Firefox/151.0","version":"33.0.5.1","exception":{"Exception":"Sabre\\DAV\\Exception\\ServiceUnavailable","Message":"Sabre\\DAV\\Exception\\NotFound: ","Code":0,"Trace":[{"file":"/var/www/html/nextcloud/3rdparty/sabre/dav/lib/DAV/Auth/Plugin.php","line":179,"function":"check","class":"OCA\\DAV\\Connector\\Sabre\\PublicAuth","type":"->"},{"file":"/var/www/html/nextcloud/3rdparty/sabre/dav/lib/DAV/Auth/Plugin.php","line":135,"function":"check","class":"Sabre\\DAV\\Auth\\Plugin","type":"->"},{"file":"/var/www/html/nextcloud/3rdparty/sabre/event/lib/WildcardEmitterTrait.php","line":89,"function":"beforeMethod","class":"Sabre\\DAV\\Auth\\Plugin","type":"->"},{"file":"/var/www/html/nextcloud/3rdparty/sabre/dav/lib/DAV/Server.php","line":456,"function":"emit","class":"Sabre\\DAV\\Server","type":"->"},{"file":"/var/www/html/nextcloud/apps/dav/lib/Connector/Sabre/Server.php","line":212,"function":"invokeMethod","class":"Sabre\\DAV\\Server","type":"->"},{"file":"/var/www/html/nextcloud/apps/dav/appinfo/v2/publicremote.php","line":168,"function":"start","class":"OCA\\DAV\\Connector\\Sabre\\Server","type":"->"},{"file":"/var/www/html/nextcloud/public.php","line":90,"args":["/var/www/html/nextcloud/apps/dav/appinfo/v2/publicremote.php"],"function":"require_once"}],"File":"/var/www/html/nextcloud/apps/dav/lib/Connector/Sabre/PublicAuth.php","Line":99,"message":"Sabre\\DAV\\Exception\\NotFound: ","exception":"{\"class\":\"Sabre\\DAV\\Exception\\ServiceUnavailable\",\"message\":\"Sabre\\DAV\\Exception\\NotFound: \",\"code\":0,\"file\":\"/var/www/html/nextcloud/apps/dav/lib/Connector/Sabre/PublicAuth.php:99\",\"trace\":\"#0 /var/www/html/nextcloud/3rdparty/sabre/dav/lib/DAV/Auth/Plugin.php(179): OCA\\DAV\\Connector\\Sabre\\PublicAuth->check()\\n#1 /var/www/html/nextcloud/3rdparty/sabre/dav/lib/DAV/Auth/Plugin.php(135): Sabre\\DAV\\Auth\\Plugin->check()\\n#2 /var/www/html/nextcloud/3rdparty/sabre/event/lib/WildcardEmitterTrait.php(89): Sabre\\DAV\\Auth\\Plugin->beforeMethod()\\n#3 /var/www/html/nextcloud/3rdparty/sabre/dav/lib/DAV/Server.php(456): Sabre\\DAV\\Server->emit()\\n#4 /var/www/html/nextcloud/apps/dav/lib/Connector/Sabre/Server.php(212): Sabre\\DAV\\Server->invokeMethod()\\n#5 /var/www/html/nextcloud/apps/dav/appinfo/v2/publicremote.php(168): OCA\\DAV\\Connector\\Sabre\\Server->start()\\n#6 /var/www/html/nextcloud/public.php(90): require_once('...')\\n#7 {main}\"}","CustomMessage":"Sabre\\DAV\\Exception\\NotFound: "}}
{"reqId":"8ApDYJi9CLO3Z6WskZq0","level":3,"time":"2026-06-04T16:09:32+00:00","remoteAddr":"***.***.***.***","user":"--","app":"no app in context","method":"PROPFIND","url":"/nextcloud/public.php/dav/files/oq6bCptFEHCXEKg/","scriptName":"/nextcloud/public.php","message":"Exception thrown: Sabre\\DAV\\Exception\\NotFound","userAgent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:151.0) Gecko/20100101 Firefox/151.0","version":"33.0.5.1","exception":{"Exception":"Sabre\\DAV\\Exception\\NotFound","Message":"","Code":0,"Trace":[{"file":"/var/www/html/nextcloud/apps/dav/lib/Connector/Sabre/PublicAuth.php","line":82,"function":"checkToken","class":"OCA\\DAV\\Connector\\Sabre\\PublicAuth","type":"->"},{"file":"/var/www/html/nextcloud/3rdparty/sabre/dav/lib/DAV/Auth/Plugin.php","line":179,"function":"check","class":"OCA\\DAV\\Connector\\Sabre\\PublicAuth","type":"->"},{"file":"/var/www/html/nextcloud/3rdparty/sabre/dav/lib/DAV/Auth/Plugin.php","line":135,"function":"check","class":"Sabre\\DAV\\Auth\\Plugin","type":"->"},{"file":"/var/www/html/nextcloud/3rdparty/sabre/event/lib/WildcardEmitterTrait.php","line":89,"function":"beforeMethod","class":"Sabre\\DAV\\Auth\\Plugin","type":"->"},{"file":"/var/www/html/nextcloud/3rdparty/sabre/dav/lib/DAV/Server.php","line":456,"function":"emit","class":"Sabre\\DAV\\Server","type":"->"},{"file":"/var/www/html/nextcloud/apps/dav/lib/Connector/Sabre/Server.php","line":212,"function":"invokeMethod","class":"Sabre\\DAV\\Server","type":"->"},{"file":"/var/www/html/nextcloud/apps/dav/appinfo/v2/publicremote.php","line":168,"function":"start","class":"OCA\\DAV\\Connector\\Sabre\\Server","type":"->"},{"file":"/var/www/html/nextcloud/public.php","line":90,"args":["/var/www/html/nextcloud/apps/dav/appinfo/v2/publicremote.php"],"function":"require_once"}],"File":"/var/www/html/nextcloud/apps/dav/lib/Connector/Sabre/PublicAuth.php","Line":133,"message":"","exception":"{\"class\":\"Sabre\\DAV\\Exception\\NotFound\",\"message\":\"\",\"code\":0,\"file\":\"/var/www/html/nextcloud/apps/dav/lib/Connector/Sabre/PublicAuth.php:133\",\"trace\":\"#0 /var/www/html/nextcloud/apps/dav/lib/Connector/Sabre/PublicAuth.php(82): OCA\\DAV\\Connector\\Sabre\\PublicAuth->checkToken()\\n#1 /var/www/html/nextcloud/3rdparty/sabre/dav/lib/DAV/Auth/Plugin.php(179): OCA\\DAV\\Connector\\Sabre\\PublicAuth->check()\\n#2 /var/www/html/nextcloud/3rdparty/sabre/dav/lib/DAV/Auth/Plugin.php(135): Sabre\\DAV\\Auth\\Plugin->check()\\n#3 /var/www/html/nextcloud/3rdparty/sabre/event/lib/WildcardEmitterTrait.php(89): Sabre\\DAV\\Auth\\Plugin->beforeMethod()\\n#4 /var/www/html/nextcloud/3rdparty/sabre/dav/lib/DAV/Server.php(456): Sabre\\DAV\\Server->emit()\\n#5 /var/www/html/nextcloud/apps/dav/lib/Connector/Sabre/Server.php(212): Sabre\\DAV\\Server->invokeMethod()\\n#6 /var/www/html/nextcloud/apps/dav/appinfo/v2/publicremote.php(168): OCA\\DAV\\Connector\\Sabre\\Server->start()\\n#7 /var/www/html/nextcloud/public.php(90): require_once('...')\\n#8 {main}\"}","CustomMessage":"Exception thrown: Sabre\\DAV\\Exception\\NotFound"}}
{"reqId":"8ApDYJi9CLO3Z6WskZq0","level":3,"time":"2026-06-04T16:09:32+00:00","remoteAddr":"***.***.***.***","user":"--","app":"webdav","method":"PROPFIND","url":"/nextcloud/public.php/dav/files/oq6bCptFEHCXEKg/","scriptName":"/nextcloud/public.php","message":"Sabre\\DAV\\Exception\\NotFound: ","userAgent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:151.0) Gecko/20100101 Firefox/151.0","version":"33.0.5.1","exception":{"Exception":"Sabre\\DAV\\Exception\\ServiceUnavailable","Message":"Sabre\\DAV\\Exception\\NotFound: ","Code":0,"Trace":[{"file":"/var/www/html/nextcloud/3rdparty/sabre/dav/lib/DAV/Auth/Plugin.php","line":179,"function":"check","class":"OCA\\DAV\\Connector\\Sabre\\PublicAuth","type":"->"},{"file":"/var/www/html/nextcloud/3rdparty/sabre/dav/lib/DAV/Auth/Plugin.php","line":135,"function":"check","class":"Sabre\\DAV\\Auth\\Plugin","type":"->"},{"file":"/var/www/html/nextcloud/3rdparty/sabre/event/lib/WildcardEmitterTrait.php","line":89,"function":"beforeMethod","class":"Sabre\\DAV\\Auth\\Plugin","type":"->"},{"file":"/var/www/html/nextcloud/3rdparty/sabre/dav/lib/DAV/Server.php","line":456,"function":"emit","class":"Sabre\\DAV\\Server","type":"->"},{"file":"/var/www/html/nextcloud/apps/dav/lib/Connector/Sabre/Server.php","line":212,"function":"invokeMethod","class":"Sabre\\DAV\\Server","type":"->"},{"file":"/var/www/html/nextcloud/apps/dav/appinfo/v2/publicremote.php","line":168,"function":"start","class":"OCA\\DAV\\Connector\\Sabre\\Server","type":"->"},{"file":"/var/www/html/nextcloud/public.php","line":90,"args":["/var/www/html/nextcloud/apps/dav/appinfo/v2/publicremote.php"],"function":"require_once"}],"File":"/var/www/html/nextcloud/apps/dav/lib/Connector/Sabre/PublicAuth.php","Line":99,"message":"Sabre\\DAV\\Exception\\NotFound: ","exception":"{\"class\":\"Sabre\\DAV\\Exception\\ServiceUnavailable\",\"message\":\"Sabre\\DAV\\Exception\\NotFound: \",\"code\":0,\"file\":\"/var/www/html/nextcloud/apps/dav/lib/Connector/Sabre/PublicAuth.php:99\",\"trace\":\"#0 /var/www/html/nextcloud/3rdparty/sabre/dav/lib/DAV/Auth/Plugin.php(179): OCA\\DAV\\Connector\\Sabre\\PublicAuth->check()\\n#1 /var/www/html/nextcloud/3rdparty/sabre/dav/lib/DAV/Auth/Plugin.php(135): Sabre\\DAV\\Auth\\Plugin->check()\\n#2 /var/www/html/nextcloud/3rdparty/sabre/event/lib/WildcardEmitterTrait.php(89): Sabre\\DAV\\Auth\\Plugin->beforeMethod()\\n#3 /var/www/html/nextcloud/3rdparty/sabre/dav/lib/DAV/Server.php(456): Sabre\\DAV\\Server->emit()\\n#4 /var/www/html/nextcloud/apps/dav/lib/Connector/Sabre/Server.php(212): Sabre\\DAV\\Server->invokeMethod()\\n#5 /var/www/html/nextcloud/apps/dav/appinfo/v2/publicremote.php(168): OCA\\DAV\\Connector\\Sabre\\Server->start()\\n#6 /var/www/html/nextcloud/public.php(90): require_once('...')\\n#7 {main}\"}","CustomMessage":"Sabre\\DAV\\Exception\\NotFound: "}}
{"reqId":"ouCIMWJKMjBnUZthyLda","level":3,"time":"2026-06-04T16:09:36+00:00","remoteAddr":"***.***.***.***","user":"--","app":"no app in context","method":"DELETE","url":"/nextcloud/public.php/dav/files/oq6bCptFEHCXEKg/public_folder_creation","scriptName":"/nextcloud/public.php","message":"Exception thrown: Sabre\\DAV\\Exception\\NotFound","userAgent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:151.0) Gecko/20100101 Firefox/151.0","version":"33.0.5.1","exception":{"Exception":"Sabre\\DAV\\Exception\\NotFound","Message":"","Code":0,"Trace":[{"file":"/var/www/html/nextcloud/apps/dav/lib/Connector/Sabre/PublicAuth.php","line":82,"function":"checkToken","class":"OCA\\DAV\\Connector\\Sabre\\PublicAuth","type":"->"},{"file":"/var/www/html/nextcloud/3rdparty/sabre/dav/lib/DAV/Auth/Plugin.php","line":179,"function":"check","class":"OCA\\DAV\\Connector\\Sabre\\PublicAuth","type":"->"},{"file":"/var/www/html/nextcloud/3rdparty/sabre/dav/lib/DAV/Auth/Plugin.php","line":135,"function":"check","class":"Sabre\\DAV\\Auth\\Plugin","type":"->"},{"file":"/var/www/html/nextcloud/3rdparty/sabre/event/lib/WildcardEmitterTrait.php","line":89,"function":"beforeMethod","class":"Sabre\\DAV\\Auth\\Plugin","type":"->"},{"file":"/var/www/html/nextcloud/3rdparty/sabre/dav/lib/DAV/Server.php","line":456,"function":"emit","class":"Sabre\\DAV\\Server","type":"->"},{"file":"/var/www/html/nextcloud/apps/dav/lib/Connector/Sabre/Server.php","line":212,"function":"invokeMethod","class":"Sabre\\DAV\\Server","type":"->"},{"file":"/var/www/html/nextcloud/apps/dav/appinfo/v2/publicremote.php","line":168,"function":"start","class":"OCA\\DAV\\Connector\\Sabre\\Server","type":"->"},{"file":"/var/www/html/nextcloud/public.php","line":90,"args":["/var/www/html/nextcloud/apps/dav/appinfo/v2/publicremote.php"],"function":"require_once"}],"File":"/var/www/html/nextcloud/apps/dav/lib/Connector/Sabre/PublicAuth.php","Line":133,"message":"","exception":"{\"class\":\"Sabre\\DAV\\Exception\\NotFound\",\"message\":\"\",\"code\":0,\"file\":\"/var/www/html/nextcloud/apps/dav/lib/Connector/Sabre/PublicAuth.php:133\",\"trace\":\"#0 /var/www/html/nextcloud/apps/dav/lib/Connector/Sabre/PublicAuth.php(82): OCA\\DAV\\Connector\\Sabre\\PublicAuth->checkToken()\\n#1 /var/www/html/nextcloud/3rdparty/sabre/dav/lib/DAV/Auth/Plugin.php(179): OCA\\DAV\\Connector\\Sabre\\PublicAuth->check()\\n#2 /var/www/html/nextcloud/3rdparty/sabre/dav/lib/DAV/Auth/Plugin.php(135): Sabre\\DAV\\Auth\\Plugin->check()\\n#3 /var/www/html/nextcloud/3rdparty/sabre/event/lib/WildcardEmitterTrait.php(89): Sabre\\DAV\\Auth\\Plugin->beforeMethod()\\n#4 /var/www/html/nextcloud/3rdparty/sabre/dav/lib/DAV/Server.php(456): Sabre\\DAV\\Server->emit()\\n#5 /var/www/html/nextcloud/apps/dav/lib/Connector/Sabre/Server.php(212): Sabre\\DAV\\Server->invokeMethod()\\n#6 /var/www/html/nextcloud/apps/dav/appinfo/v2/publicremote.php(168): OCA\\DAV\\Connector\\Sabre\\Server->start()\\n#7 /var/www/html/nextcloud/public.php(90): require_once('...')\\n#8 {main}\"}","CustomMessage":"Exception thrown: Sabre\\DAV\\Exception\\NotFound"}}
{"reqId":"ouCIMWJKMjBnUZthyLda","level":3,"time":"2026-06-04T16:09:36+00:00","remoteAddr":"***.***.***.***","user":"--","app":"webdav","method":"DELETE","url":"/nextcloud/public.php/dav/files/oq6bCptFEHCXEKg/public_folder_creation","scriptName":"/nextcloud/public.php","message":"Sabre\\DAV\\Exception\\NotFound: ","userAgent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:151.0) Gecko/20100101 Firefox/151.0","version":"33.0.5.1","exception":{"Exception":"Sabre\\DAV\\Exception\\ServiceUnavailable","Message":"Sabre\\DAV\\Exception\\NotFound: ","Code":0,"Trace":[{"file":"/var/www/html/nextcloud/3rdparty/sabre/dav/lib/DAV/Auth/Plugin.php","line":179,"function":"check","class":"OCA\\DAV\\Connector\\Sabre\\PublicAuth","type":"->"},{"file":"/var/www/html/nextcloud/3rdparty/sabre/dav/lib/DAV/Auth/Plugin.php","line":135,"function":"check","class":"Sabre\\DAV\\Auth\\Plugin","type":"->"},{"file":"/var/www/html/nextcloud/3rdparty/sabre/event/lib/WildcardEmitterTrait.php","line":89,"function":"beforeMethod","class":"Sabre\\DAV\\Auth\\Plugin","type":"->"},{"file":"/var/www/html/nextcloud/3rdparty/sabre/dav/lib/DAV/Server.php","line":456,"function":"emit","class":"Sabre\\DAV\\Server","type":"->"},{"file":"/var/www/html/nextcloud/apps/dav/lib/Connector/Sabre/Server.php","line":212,"function":"invokeMethod","class":"Sabre\\DAV\\Server","type":"->"},{"file":"/var/www/html/nextcloud/apps/dav/appinfo/v2/publicremote.php","line":168,"function":"start","class":"OCA\\DAV\\Connector\\Sabre\\Server","type":"->"},{"file":"/var/www/html/nextcloud/public.php","line":90,"args":["/var/www/html/nextcloud/apps/dav/appinfo/v2/publicremote.php"],"function":"require_once"}],"File":"/var/www/html/nextcloud/apps/dav/lib/Connector/Sabre/PublicAuth.php","Line":99,"message":"Sabre\\DAV\\Exception\\NotFound: ","exception":"{\"class\":\"Sabre\\DAV\\Exception\\ServiceUnavailable\",\"message\":\"Sabre\\DAV\\Exception\\NotFound: \",\"code\":0,\"file\":\"/var/www/html/nextcloud/apps/dav/lib/Connector/Sabre/PublicAuth.php:99\",\"trace\":\"#0 /var/www/html/nextcloud/3rdparty/sabre/dav/lib/DAV/Auth/Plugin.php(179): OCA\\DAV\\Connector\\Sabre\\PublicAuth->check()\\n#1 /var/www/html/nextcloud/3rdparty/sabre/dav/lib/DAV/Auth/Plugin.php(135): Sabre\\DAV\\Auth\\Plugin->check()\\n#2 /var/www/html/nextcloud/3rdparty/sabre/event/lib/WildcardEmitterTrait.php(89): Sabre\\DAV\\Auth\\Plugin->beforeMethod()\\n#3 /var/www/html/nextcloud/3rdparty/sabre/dav/lib/DAV/Server.php(456): Sabre\\DAV\\Server->emit()\\n#4 /var/www/html/nextcloud/apps/dav/lib/Connector/Sabre/Server.php(212): Sabre\\DAV\\Server->invokeMethod()\\n#5 /var/www/html/nextcloud/apps/dav/appinfo/v2/publicremote.php(168): OCA\\DAV\\Connector\\Sabre\\Server->start()\\n#6 /var/www/html/nextcloud/public.php(90): require_once('...')\\n#7 {main}\"}","CustomMessage":"Sabre\\DAV\\Exception\\NotFound: "}}

Web Browser

If the problem is related to the Web interface, open your browser inspector Console and Network tabs while refreshing (reloading) and reproducing the problem. Provide any relevant output/errors here that appear.

PASTE

Web server / Reverse Proxy

The output of your Apache/nginx/system log in /var/log/____:

xxx.xxx.xxx.xxx - - [04/Jun/2026:15:52:04 +0000] "GET /nextcloud/apps/files/files/3212?dir=/Public&opendetails=true HTTP/2.0" 200 15365 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Safari/605.1.15"
xxx.xxx.xxx.xxx - - [04/Jun/2026:15:52:04 +0000] "GET /nextcloud/apps/theming/manifest/files?v=4b8dc7c8 HTTP/2.0" 200 280 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Safari/605.1.15"
xxx.xxx.xxx.xxx - - [04/Jun/2026:15:52:04 +0000] "REPORT /nextcloud/remote.php/dav/files/admin/ HTTP/2.0" 207 156 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Safari/605.1.15"
xxx.xxx.xxx.xxx - - [04/Jun/2026:15:52:04 +0000] "GET /nextcloud/ocs/v2.php/apps/guests/api/v1/groups HTTP/2.0" 200 167 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Safari/605.1.15"
xxx.xxx.xxx.xxx - - [04/Jun/2026:15:52:04 +0000] "PROPFIND /nextcloud/remote.php/dav/files/admin/Public/ HTTP/2.0" 207 831 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Safari/605.1.15"
xxx.xxx.xxx.xxx - - [04/Jun/2026:15:52:04 +0000] "GET /nextcloud/apps/onlyoffice/ajax/template HTTP/2.0" 200 160 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Safari/605.1.15"
xxx.xxx.xxx.xxx - - [04/Jun/2026:15:52:05 +0000] "GET /nextcloud/index.php/apps/files/preview-service-worker.js HTTP/2.0" 200 5359 "https://pithos.trans-matters.org.uk/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Safari/605.1.15"
xxx.xxx.xxx.xxx - - [04/Jun/2026:15:52:05 +0000] "GET /nextcloud/ocs/v2.php/apps/recommendations/api/v1/recommendations HTTP/2.0" 200 672 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Safari/605.1.15"
xxx.xxx.xxx.xxx - - [04/Jun/2026:15:52:05 +0000] "PUT /nextcloud/ocs/v2.php/apps/user_status/api/v1/heartbeat?format=json HTTP/2.0" 200 149 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Safari/605.1.15"
xxx.xxx.xxx.xxx - - [04/Jun/2026:15:52:05 +0000] "GET /nextcloud/avatar/admin/64?guestFallback=true?v=0 HTTP/2.0" 200 792 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Safari/605.1.15"
xxx.xxx.xxx.xxx - - [04/Jun/2026:15:52:05 +0000] "GET /nextcloud/ocs/v2.php/apps/user_status/api/v1/user_status HTTP/2.0" 200 149 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Safari/605.1.15"
xxx.xxx.xxx.xxx - - [04/Jun/2026:15:52:05 +0000] "GET /nextcloud/contactsmenu/teams HTTP/2.0" 200 22 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Safari/605.1.15"
xxx.xxx.xxx.xxx - - [04/Jun/2026:15:52:05 +0000] "GET /nextcloud/ocs/v2.php/apps/files_sharing/api/v1/shares?format=json&path=%2FPublic%2Ftest&reshares=true HTTP/2.0" 200 81 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Safari/605.1.15"
xxx.xxx.xxx.xxx - - [04/Jun/2026:15:52:05 +0000] "GET /nextcloud/ocs/v2.php/apps/files_sharing/api/v1/shares?format=json&path=%2FPublic%2Ftest&shared_with_me=true HTTP/2.0" 200 81 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Safari/605.1.15"
xxx.xxx.xxx.xxx - - [04/Jun/2026:15:52:05 +0000] "GET /nextcloud/ocs/v2.php/teams/resources/files/3212 HTTP/2.0" 200 88 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Safari/605.1.15"
xxx.xxx.xxx.xxx - - [04/Jun/2026:15:52:05 +0000] "GET /nextcloud/ocs/v2.php/apps/notifications/api/v2/notifications HTTP/2.0" 200 878 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Safari/605.1.15"
xxx.xxx.xxx.xxx - - [04/Jun/2026:15:52:05 +0000] "GET /nextcloud/ocs/v2.php/apps/files_sharing/api/v1/sharees_recommended?format=json&itemType=dir HTTP/2.0" 200 124 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Safari/605.1.15"
xxx.xxx.xxx.xxx - - [04/Jun/2026:15:52:05 +0000] "GET /nextcloud/ocs/v2.php/apps/related_resources/related/files?itemId=3212&resourceType=&limit=0&format=json HTTP/2.0" 200 81 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Safari/605.1.15"
xxx.xxx.xxx.xxx - - [04/Jun/2026:15:52:05 +0000] "PROPFIND /nextcloud/remote.php/dav/files/admin/Public/test HTTP/2.0" 207 312 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Safari/605.1.15"
xxx.xxx.xxx.xxx - - [04/Jun/2026:15:52:07 +0000] "GET /nextcloud/ocs/v2.php/apps/password_policy/api/v1/generate HTTP/2.0" 200 101 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Safari/605.1.15"
xxx.xxx.xxx.xxx - - [04/Jun/2026:15:52:11 +0000] "POST /nextcloud/ocs/v2.php/apps/files_sharing/api/v1/shares HTTP/2.0" 200 529 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Safari/605.1.15"
xxx.xxx.xxx.xxx - - [04/Jun/2026:15:52:11 +0000] "PROPFIND /nextcloud/remote.php/dav/files/admin/Public/test HTTP/2.0" 207 752 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Safari/605.1.15"
xxx.xxx.xxx.xxx - - [04/Jun/2026:15:52:12 +0000] "GET /nextcloud/ocs/v2.php/teams/resources/files/3212 HTTP/2.0" 200 88 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Safari/605.1.15"
xxx.xxx.xxx.xxx - - [04/Jun/2026:15:52:12 +0000] "PROPFIND /nextcloud/remote.php/dav/files/admin/Public/test HTTP/2.0" 207 312 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Safari/605.1.15"
xxx.xxx.xxx.xxx - - [04/Jun/2026:15:52:12 +0000] "GET /nextcloud/apps/files/api/v1/stats HTTP/2.0" 200 158 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Safari/605.1.15"
xxx.xxx.xxx.xxx - - [04/Jun/2026:15:52:12 +0000] "GET /nextcloud/ocs/v2.php/apps/related_resources/related/files?itemId=3212&resourceType=&limit=0&format=json HTTP/2.0" 200 81 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Safari/605.1.15"
xxx.xxx.xxx.xxx - - [04/Jun/2026:15:52:35 +0000] "GET /nextcloud/ocs/v2.php/apps/notifications/api/v2/notifications HTTP/2.0" 304 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Safari/605.1.15"
xxx.xxx.xxx.xxx - - [04/Jun/2026:15:53:05 +0000] "GET /nextcloud/ocs/v2.php/apps/notifications/api/v2/notifications HTTP/2.0" 304 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Safari/605.1.15"
xxx.xxx.xxx.xxx - - [04/Jun/2026:15:53:35 +0000] "GET /nextcloud/ocs/v2.php/apps/notifications/api/v2/notifications HTTP/2.0" 304 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Safari/605.1.15"
xxx.xxx.xxx.xxx - - [04/Jun/2026:15:53:45 +0000] "GET /nextcloud/s/oq6bCptFEHCXEKg HTTP/2.0" 200 12505 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:151.0) Gecko/20100101 Firefox/151.0"
xxx.xxx.xxx.xxx - - [04/Jun/2026:15:53:46 +0000] "GET /nextcloud/js/core/merged-template-prepend.js?v=9ed6ffab-0 HTTP/2.0" 200 3317 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:151.0) Gecko/20100101 Firefox/151.0"
xxx.xxx.xxx.xxx - - [04/Jun/2026:15:53:46 +0000] "GET /nextcloud/apps/theming/theme/default.css?plain=1&v=a9d16724 HTTP/2.0" 200 1437 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:151.0) Gecko/20100101 Firefox/151.0"
xxx.xxx.xxx.xxx - - [04/Jun/2026:15:53:46 +0000] "GET /nextcloud/apps/theming/theme/light.css?plain=1&v=a9d16724 HTTP/2.0" 200 1437 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:151.0) Gecko/20100101 Firefox/151.0"
xxx.xxx.xxx.xxx - - [04/Jun/2026:15:53:46 +0000] "GET /nextcloud/apps/theming/theme/dark.css?plain=0&v=a9d16724 HTTP/2.0" 200 1476 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:151.0) Gecko/20100101 Firefox/151.0"
xxx.xxx.xxx.xxx - - [04/Jun/2026:15:53:46 +0000] "GET /nextcloud/apps/theming/theme/light.css?plain=0&v=a9d16724 HTTP/2.0" 200 1448 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:151.0) Gecko/20100101 Firefox/151.0"
xxx.xxx.xxx.xxx - - [04/Jun/2026:15:53:46 +0000] "GET /nextcloud/apps/theming/theme/light-highcontrast.css?plain=0&v=a9d16724 HTTP/2.0" 200 1481 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:151.0) Gecko/20100101 Firefox/151.0"
xxx.xxx.xxx.xxx - - [04/Jun/2026:15:53:46 +0000] "GET /nextcloud/apps/theming/theme/dark-highcontrast.css?plain=0&v=a9d16724 HTTP/2.0" 200 1536 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:151.0) Gecko/20100101 Firefox/151.0"
xxx.xxx.xxx.xxx - - [04/Jun/2026:15:53:46 +0000] "GET /nextcloud/apps/theming/theme/opendyslexic.css?plain=0&v=a9d16724 HTTP/2.0" 200 330 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:151.0) Gecko/20100101 Firefox/151.0"
xxx.xxx.xxx.xxx - - [04/Jun/2026:15:53:46 +0000] "GET /nextcloud/apps/theming/theme/light-highcontrast.css?plain=1&v=a9d16724 HTTP/2.0" 200 1465 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:151.0) Gecko/20100101 Firefox/151.0"
xxx.xxx.xxx.xxx - - [04/Jun/2026:15:53:46 +0000] "GET /nextcloud/apps/theming/theme/dark.css?plain=1&v=a9d16724 HTTP/2.0" 200 1463 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:151.0) Gecko/20100101 Firefox/151.0"
xxx.xxx.xxx.xxx - - [04/Jun/2026:15:53:46 +0000] "GET /nextcloud/apps/theming/theme/dark-highcontrast.css?plain=1&v=a9d16724 HTTP/2.0" 200 1521 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:151.0) Gecko/20100101 Firefox/151.0"
xxx.xxx.xxx.xxx - - [04/Jun/2026:15:53:46 +0000] "GET /nextcloud/avatar/guest/%3F/512?guestFallback=true HTTP/2.0" 201 6076 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:151.0) Gecko/20100101 Firefox/151.0"
xxx.xxx.xxx.xxx - - [04/Jun/2026:15:53:47 +0000] "PROPFIND /nextcloud/public.php/dav/files/oq6bCptFEHCXEKg/ HTTP/2.0" 207 2866 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:151.0) Gecko/20100101 Firefox/151.0"
xxx.xxx.xxx.xxx - - [04/Jun/2026:15:53:47 +0000] "GET /nextcloud/apps/onlyoffice/ajax/template HTTP/2.0" 401 43 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:151.0) Gecko/20100101 Firefox/151.0"
xxx.xxx.xxx.xxx - - [04/Jun/2026:15:53:47 +0000] "GET /nextcloud/apps/theming/favicon/files?v=a9d16724 HTTP/2.0" 200 2665 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:151.0) Gecko/20100101 Firefox/151.0"
xxx.xxx.xxx.xxx - - [04/Jun/2026:15:53:47 +0000] "GET /nextcloud/apps/theming/icon/files?v=a9d16724 HTTP/2.0" 200 9414 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:151.0) Gecko/20100101 Firefox/151.0"
xxx.xxx.xxx.xxx - - [04/Jun/2026:15:54:05 +0000] "GET /nextcloud/ocs/v2.php/apps/notifications/api/v2/notifications HTTP/2.0" 304 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Safari/605.1.15"
xxx.xxx.xxx.xxx - - [04/Jun/2026:15:54:17 +0000] "MKCOL /nextcloud/public.php/dav/files/oq6bCptFEHCXEKg/public_folder_creation HTTP/2.0" 201 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:151.0) Gecko/20100101 Firefox/151.0"
xxx.xxx.xxx.xxx - - [04/Jun/2026:15:54:35 +0000] "GET /nextcloud/ocs/v2.php/apps/notifications/api/v2/notifications HTTP/2.0" 304 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Safari/605.1.15"

Configuration

Nextcloud

The output of occ config:list system or similar is best, but, if not possible, the contents of your config.php file from /path/to/nextcloud is fine (make sure to remove any identifiable information!):

{
    "system": {
        "instanceid": "***REMOVED SENSITIVE VALUE***",
        "passwordsalt": "***REMOVED SENSITIVE VALUE***",
        "secret": "***REMOVED SENSITIVE VALUE***",
        "trusted_domains": [
            "xxxx.xxxxxxxx.org.uk"
        ],
        "datadirectory": "***REMOVED SENSITIVE VALUE***",
        "dbtype": "mysql",
        "version": "33.0.5.1",
        "overwrite.cli.url": "https:\/\/xxxx.xxxxxxxx.org.uk\/nextcloud",
        "maintenance_window_start": 4,
        "dbname": "***REMOVED SENSITIVE VALUE***",
        "dbhost": "***REMOVED SENSITIVE VALUE***",
        "dbtableprefix": "oc_",
        "mysql.utf8mb4": true,
        "dbuser": "***REMOVED SENSITIVE VALUE***",
        "dbpassword": "***REMOVED SENSITIVE VALUE***",
        "installed": true,
        "integrity.check.disabled": false,
        "trashbin_retention_obligation": "auto, 17",
        "force_language": "en_GB",
        "force_locale": "en_GB",
        "default_phone_region": "GB",
        "loglevel": 2,
        "app_install_overwrite": [],
        "maintenance": false,
        "mail_smtppassword": "***REMOVED SENSITIVE VALUE***",
        "mail_smtpname": "***REMOVED SENSITIVE VALUE***",
        "mail_domain": "***REMOVED SENSITIVE VALUE***",
        "mail_from_address": "***REMOVED SENSITIVE VALUE***",
        "mail_smtpmode": "smtp",
        "mail_smtphost": "***REMOVED SENSITIVE VALUE***",
        "mail_smtpauth": true,
        "mail_smtpport": "587",
        "mail_sendmailmode": "smtp",
        "mail_smtpstreamoptions": {
            "ssl": {
                "allow_self_signed": false,
                "verify_peer": true,
                "verify_peer_name": true
            }
        },
        "config_preset": 7,
        "serverid": "0",
        "theme": "",
        "updater.secret": "***REMOVED SENSITIVE VALUE***"
    }
}

Apps

The output of occ app:list (if possible).

Enabled:
  - app_api: 33.0.0
  - bruteforcesettings: 6.0.0
  - calendar: 6.4.2
  - circles: 33.0.0
  - cloud_federation_api: 1.17.0
  - comments: 1.23.0
  - contacts: 8.5.1
  - contactsinteraction: 1.14.1
  - dav: 1.36.0
  - deck: 1.17.2
  - encryption: 2.21.0
  - federatedfilesharing: 1.23.0
  - federation: 1.23.0
  - files: 2.5.0
  - files_antivirus: 6.2.0
  - files_downloadlimit: 5.1.0
  - files_pdfviewer: 6.0.0
  - files_reminders: 1.6.0
  - files_sharing: 1.25.2
  - files_trashbin: 1.23.0
  - files_versions: 1.26.0
  - firstrunwizard: 6.0.0
  - formvox: 1.2.3
  - groupfolders: 21.0.7
  - guests: 4.7.5
  - logreader: 6.0.0
  - lookup_server_connector: 1.21.0
  - nextcloud_announcements: 5.0.0
  - notifications: 6.0.0
  - oauth2: 1.21.0
  - onlyoffice: 10.0.0
  - password_policy: 5.0.0
  - photos: 6.0.0
  - privacy: 5.0.0
  - profile: 1.2.0
  - provisioning_api: 1.23.0
  - recommendations: 6.0.0
  - related_resources: 4.0.0
  - serverinfo: 5.0.0
  - settings: 1.16.0
  - sharebymail: 1.23.0
  - support: 5.0.0
  - survey_client: 5.0.0
  - systemtags: 1.23.0
  - text: 7.0.1
  - theming: 2.8.0
  - twofactor_backupcodes: 1.22.0
  - twofactor_totp: 15.0.0
  - updatenotification: 1.23.0
  - user_status: 1.13.0
  - viewer: 6.0.0
  - weather_status: 1.13.0
  - webhook_listeners: 1.5.0
  - workflowengine: 2.15.0
Disabled:
  - activity: 6.0.0 (installed 6.0.0)
  - admin_audit: 1.23.0
  - dashboard: 7.13.0 (installed 7.13.0)
  - files_accesscontrol: 4.0.1 (installed 4.0.1)
  - files_external: 1.25.1
  - suspicious_login: 11.0.0
  - testing: 1.23.0
  - twofactor_nextcloud_notification: 7.0.0
  - twofactor_webauthn: 2.6.0
  - user_ldap: 1.24.0

Tips for increasing the likelihood of a response

Use the preformatted text formatting option in the editor for all log entries and configuration output.
If screenshots are useful, feel free to include them.
- If possible, also include key error output in text form so it can be searched for.
Try to edit log output only minimally (if at all) so that it can be ran through analyzers / formatters by those trying to help you.

wwe · June 4, 2026, 8:03pm

I can’t repro with two instances 33.0.4 and 33.0.5.. apache and nginx..

no upload buttons, drag&drop doesn’t work as well
in my instance I don’t enforce password, so “uncheck PW protect” is not required
- but with PW required still works as expected..

Please double check you are checking the share link - visit exactly the share URL using private/incognito mode, maybe different browser.

andreic · June 4, 2026, 8:04pm

I have the exact same problem

Emi71 · June 4, 2026, 8:31pm

Tried with a private window and with a password same issue sadly.

andreic · June 4, 2026, 8:34pm

Permissions only have effect for local folders, this bug is only for external storage

wwe · June 4, 2026, 8:40pm

yes you are right - “view-only” public share created on external storage is writeable!

Emi71 · June 4, 2026, 8:41pm

This share is on the hosting server.

Where my configuration differs from yours is that I don’t use Apache2.

andreic · June 4, 2026, 8:55pm

This is a small comparison of the external (left side) and local storage (right side). Both have view only permission, no password. On the external storage the recipients can add, delete and modify the files. On the local storage everything is fine.

wwe · June 5, 2026, 8:41pm

based on private discussion we can confirm following on 33.0.5

it true

folder in personal local storage works fine
folder on external storage is writeable through “view only share”
folder below groupfolder/team folder is writeable through “view only share”
- view-only changes on the fly when I move the folder between personal storage and groupfolder - in my case even without any updates - same folder, same share link beahaves different when moving out of personal storage

wwe · June 5, 2026, 9:17pm

created github issue

github.com/nextcloud/server

[Bug]: view-only share is writeable

opened 09:13PM - 05 Jun 26 UTC

isdnfan

bug 0. Needs triage 33-feedback

### ⚠️ This issue respects the following points: ⚠️ - [x] This is a **bug**, no…t a question or a configuration/webserver/proxy issue. - [x] This issue is **not** already reported on [Github](https://github.com/nextcloud/server/issues?q=is%3Aopen+is%3Aissue+label%3Abug) OR [Nextcloud Community Forum](https://help.nextcloud.com/) _(I've searched it)_. - [x] Nextcloud Server **is** up to date. See [Maintenance and Release Schedule](https://github.com/nextcloud/server/wiki/Maintenance-and-Release-Schedule) for supported versions. - [x] I agree to follow Nextcloud's [Code of Conduct](https://nextcloud.com/contribute/code-of-conduct/). ### Bug description view-only share link created on groupfolder or external storage allows upload/write/delete for anonymous visitor - folder in personal local storage works fine :white_check_mark: - folder on external storage is writeable through “view only share” 🛑 - folder below groupfolder/team folder is writeable through “view only share” 🛑 - view-only changes on the fly when I move the folder between personal storage and groupfolder - in my case even without any updates - same folder, same share link behaves different when moving out of personal storage initially reported at https://help.nextcloud.com/t/public-folder-share-is-always-writable-despite-being-view-only/245460 tested on NC 33.0.4, 33.05 with *real* docker community image Apache and Nginx ### Steps to reproduce 1. create anonymous share of a folder located on external storage/groupfolder 2. choose "view-only" 3. visit a link and see it is possible to upload files ### Expected behavior view-only share link doesn't allow CRUD operations. ### Nextcloud Server version 33 ### Operating system Debian/Ubuntu ### PHP engine version PHP 8.4 ### Web server Apache (supported) ### Database engine version PostgreSQL ### Is this bug present after an update or on a fresh install? Upgraded to a MAJOR version (ex. 31 to 32) ### Are you using the Nextcloud Server Encryption module? Encryption is Disabled ### What user-backends are you using? - [ ] Default user-backend _(database)_ - [ ] LDAP/ Active Directory - [ ] SSO - SAML - [x] Other ### Configuration report ```json { "system": { "htaccess.RewriteBase": "\/", "memcache.local": "\\OC\\Memcache\\APCu", "apps_paths": [ { "path": "\/var\/www\/html\/apps", "url": "\/apps", "writable": false }, { "path": "\/var\/www\/html\/custom_apps", "url": "\/custom_apps", "writable": true } ], "overwritehost": "dev-nc.mydomain.tld", "overwriteprotocol": "https", "passwordsalt": "***REMOVED SENSITIVE VALUE***", "secret": "***REMOVED SENSITIVE VALUE***", "trusted_domains": [ "localhost", "dev-nc.weikum.ch" ], "datadirectory": "***REMOVED SENSITIVE VALUE***", "dbtype": "pgsql", "version": "33.0.4.1", "dbname": "***REMOVED SENSITIVE VALUE***", "dbhost": "***REMOVED SENSITIVE VALUE***", "dbport": "", "dbtableprefix": "oc_", "mysql.utf8mb4": true, "dbuser": "***REMOVED SENSITIVE VALUE***", "dbpassword": "***REMOVED SENSITIVE VALUE***", "installed": true, "instanceid": "***REMOVED SENSITIVE VALUE***", "maintenance": false, "memcache.distributed": "\\OC\\Memcache\\Redis", "memcache.locking": "\\OC\\Memcache\\Redis", "redis": { "host": "***REMOVED SENSITIVE VALUE***", "password": "***REMOVED SENSITIVE VALUE***", "port": 6379 }, "default_phone_region": "CH", "mail_from_address": "***REMOVED SENSITIVE VALUE***", "mail_smtpmode": "smtp", "mail_sendmailmode": "smtp", "mail_domain": "***REMOVED SENSITIVE VALUE***", "mail_smtpsecure": "ssl", "mail_smtpauthtype": "LOGIN", "mail_smtpauth": true, "mail_smtpport": "465", "allow_local_remote_servers": true, "trashbin_retention_obligation": "15, 180", "app_install_overwrite": [ "suspicious_login", "privatedata", "forms" ], "serverinfo": { "token": "lmFaJ6JXR5e8wxCuyfSn" }, "trusted_proxies": "***REMOVED SENSITIVE VALUE***", "session_keepalive": "true", "overwrite.cli.url": "https:\/\/dev-nc.mydomain.tld", "theme": "", "updater.release.channel": "stable", "enabledPreviewProviders": [ "OC\\Preview\\MP3", "OC\\Preview\\TXT", "OC\\Preview\\MarkDown", "OC\\Preview\\OpenDocument", "OC\\Preview\\Krita", "OC\\Preview\\Imaginary" ], "preview_imaginary_url": "***REMOVED SENSITIVE VALUE***", "preview_concurrency_all": "12", "preview_concurrency_new": "8", "log_rotate_size": "26214400", "log_rotate_size_audit": "52428800", "loglevel": 1, "maintenance_window_start": 1, "upgrade.disable-web": true, "user_oidc": { "use_pkce": true }, "mail_smtphost": "***REMOVED SENSITIVE VALUE***", "mail_smtpname": "***REMOVED SENSITIVE VALUE***", "mail_smtppassword": "***REMOVED SENSITIVE VALUE***", "forbidden_filename_basenames": [ "con", "prn", "aux", "nul", "com0", "com1", "com2", "com3", "com4", "com5", "com6", "com7", "com8", "com9", "com\u00b9", "com\u00b2", "com\u00b3", "lpt0", "lpt1", "lpt2", "lpt3", "lpt4", "lpt5", "lpt6", "lpt7", "lpt8", "lpt9", "lpt\u00b9", "lpt\u00b2", "lpt\u00b3" ], "forbidden_filename_characters": [ "<", ">", ":", "\"", "|", "?", "*", "\\", "\/" ], "forbidden_filename_extensions": [ " ", ".", ".filepart", ".part" ] } } ``` ### List of activated Apps ```shell Enabled: - activity: 6.0.0 - admin_audit: 1.23.0 - app_api: 33.0.0 - bruteforcesettings: 6.0.0 - calendar: 6.4.2 - circles: 33.0.0 - cloud_federation_api: 1.17.0 - collectives: 4.4.1 - comments: 1.23.0 - contacts: 8.5.1 - contactsinteraction: 1.14.1 - dashboard: 7.13.0 - dav: 1.36.0 - federatedfilesharing: 1.23.0 - federation: 1.23.0 - files: 2.5.0 - files_downloadlimit: 5.1.0 - files_external: 1.25.1 - files_pdfviewer: 6.0.0 - files_reminders: 1.6.0 - files_sharing: 1.25.2 - files_trashbin: 1.23.0 - files_versions: 1.26.0 - firstrunwizard: 6.0.0 - forms: 5.2.9 - groupfolders: 21.0.7 - logreader: 6.0.0 - lookup_server_connector: 1.21.0 - mail: 5.8.1 - notes: 5.0.0 - notifications: 6.0.0 - notify_push: 1.3.3 - oauth2: 1.21.0 - ocs_api_viewer: 1.0.12 - password_policy: 5.0.0 - photos: 6.0.0 - polls: 9.1.4 - privacy: 5.0.0 - profile: 1.2.0 - provisioning_api: 1.23.0 - recommendations: 6.0.0 - related_resources: 4.0.0 - richdocuments: 10.1.3 - serverinfo: 5.0.0 - settings: 1.16.0 - sharebymail: 1.23.0 - spreed: 23.0.5 - support: 5.0.0 - survey_client: 5.0.0 - suspicious_login: 11.0.0 - systemtags: 1.23.0 - tables: 2.1.1 - text: 7.0.1 - theming: 2.8.0 - twofactor_backupcodes: 1.22.0 - twofactor_nextcloud_notification: 7.0.0 - twofactor_totp: 15.0.0 - twofactor_webauthn: 2.6.0 - unroundedcorners: 1.1.5 - user_oidc: 8.10.1 - user_status: 1.13.0 - viewer: 6.0.0 - webhook_listeners: 1.5.0 - workflowengine: 2.15.0 Disabled: - encryption: 2.21.0 - nextcloud_announcements: 5.0.0 (installed 3.0.0) - updatenotification: 1.23.0 (installed 1.21.0) - user_ldap: 1.24.0 - weather_status: 1.13.0 (installed 1.3.0) ``` ### Nextcloud Signing status ```shell No errors have been found. ``` ### Nextcloud Logs ```json app-1 | 192.168.11.203 - - [05/Jun/2026:21:08:40 +0000] "PROPFIND /public.php/dav/files/ng6owB9LdQPYC74/ HTTP/1.1" 207 4711 "https://dev-nc.mydomain.tld/s/ng6owB9LdQPYC74" "Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0" [XFF: 192.168.11.203] [realIP: -] app-1 | 109.108.108.3 - - [05/Jun/2026:21:08:40 +0000] "GET /apps/richdocuments/settings/fonts.json HTTP/1.1" 304 1355 "-" "COOLWSD HTTP Agent 25.04.9.4" [XFF: 109.108.108.3] [realIP: -] app-1 | 192.168.11.203 - - [05/Jun/2026:21:08:40 +0000] "PUT /public.php/dav/files/ng6owB9LdQPYC74/xyz.txt HTTP/1.1" 201 568 "https://dev-nc.mydomain.tld/s/ng6owB9LdQPYC74" "Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0" [XFF: 192.168.11.203] [realIP: -] app-1 | 192.168.11.203 - - [05/Jun/2026:21:08:40 +0000] "PROPFIND /public.php/dav/files/ng6owB9LdQPYC74/ HTTP/1.1" 207 5999 "https://dev-nc.mydomain.tld/s/ng6owB9LdQPYC74" "Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0" [XFF: 192.168.11.203] [realIP: -] app-1 | 192.168.11.203 - - [05/Jun/2026:21:08:40 +0000] "GET /core/mimeicon?mime=text%2Fplain HTTP/1.1" 303 723 "https://dev-nc.mydomain.tld/s/ng6owB9LdQPYC74" "Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0" [XFF: 192.168.11.203] [realIP: -] app-1 | 192.168.11.203 - - [05/Jun/2026:21:08:40 +0000] "GET /core/img/filetypes/text.svg HTTP/1.1" 200 731 "https://dev-nc.mydomain.tld/s/ng6owB9LdQPYC74" "Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0" [XFF: 192.168.11.203] [realIP: -] app-1 | 192.168.11.203 - - [05/Jun/2026:21:08:41 +0000] "GET /ocs/v2.php/apps/notifications/api/v2/notifications HTTP/1.1" 200 1811 "https://dev-nc.mydomain.tld/apps/files/files/141079?dir=%2Fgroupfolder&opendetails=true" "Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0" [XFF: 192.168.11.203] [realIP: -] ``` ### Additional info _No response_

SysKeeper · June 7, 2026, 2:55pm

Thanks for the report and details, we will check and verify this.
Please keep in mind that if there are any concerns that might be security-related, these shall be reported via hackerone, not on GitHub and not on the forum.

3857640045 · June 8, 2026, 10:45am

同样的问题。。。。。。。。。。。。。。