Nextcloud version (eg, 29.0.5): Nextcloud Hub 9 (30.0.10) (VirtualBox AIO)
Operating system and version (eg, Ubuntu 24.04): Ubuntu 24.04
Apache or nginx version (eg, Apache 2.4.25): Apache
The issue you are facing:
What does this activity mean? Whose account is that? Files disappeared from my account without me deleting them…
Is this the first time you’ve seen this error? (Y/N): Y
I had only shared it with one person within NextCloud (by username not public link), and that person didn’t have sharing or deletion permissions.
In their activity, she also see “remote account” deleted file…
if you have auditlog it should be easy to find the reason and remote IP doing the manipulation. regarding the files - I would first look in the trashbin of the initial owner - I would expect the files to remain there.
I found this here:
/var/lib/docker/volumes/nextcloud_aio_nextcloud/_data/data/audit.log
{“reqId”:“xxxxxx”,“level”:1,“time”:“2025-04-30T12:08:31+00:00”,“remoteAddr”:“”,“user”:“–”,“app”:“admin_audit”,“method”:“”,“url”:“–”,“message”:“File with id "1450874" deleted: "/admin/files/Archivos/version.ini"”,“userAgent”:“–”,“version”:“30.0.10.1”,“data”:{“app”:“admin_audit”}}
No username, no remote address… I edited the xxxxxx, but the rest is the current audit.log file… Is there anything else to look for?
Luckily, I recovered the files from the recycle bin… But I’m worried about not realizing my files are disappearing and that eventually they’ll be deleted from the recycle bin too… Thanks.
So I had a similar thing happen to me on a public share that was password protected. My friend with the password who doesn’t have an account on my nextcloud server deleted the file by accident. I could not find the file anywhere afterwards. It did not end up in my trash bin at all. It seems like once it’s deleted from a public share by a “remote account”. It’s gone forever. I tested it with a random file and got the same results. If I delete the file after logging into my account, it’ll end up in my trash bin and I can recover it, but if the file is deleted by the “remote account” via the public link then it never gets put in my trash bin even though I am the original owner of the file. Is there a setting or something I can change to fix this?
For now, I’ve enabled push and email notifications for file changes. It’s quite annoying, but I honestly can’t find the reason why the files disappeared. I understand it has to do with the sharing feature, since there were three files that were shared. Although only one of them has regular changes, the other two are never modified; they’re only shared (by an internal NextCloud username, not by a public link), and yet they’ve disappeared.
I had a recent issue with a deleted file on a public share that was password protected. My friend with the password who doesn’t have an account on my nextcloud server deleted a file by accident. I could not find the file anywhere afterwards. It did not end up in my trash bin at all like I thought it should. It seems like once it was deleted from a public share by a “remote account” (my friend). It was gone forever. I tested it with a random file and got the same results. If I delete a file while logged in, it’ll end up in my trash bin and I can recover it, but if I delete a file via the public link then it never gets put in my trash bin even though I am the original owner of the file. Is there a setting or something I can change to fix this?