Sends e-mail without indication when editing calendar

Support intro

Sorry to hear you’re facing problems. :slightly_frowning_face:

The community help forum (help.nextcloud.com) is for home and non-enterprise users. Support is provided by other community members on a best effort / “as available” basis. All of those responding are volunteering their time to help you.

If you’re using Nextcloud in a business/critical setting, paid and SLA-based support services can be accessed via portal.nextcloud.com where Nextcloud engineers can help ensure your business keeps running smoothly.

Getting help

In order to help you as efficiently (and quickly!) as possible, please fill in as much of the below requested information as you can.

Before clicking submit: Please check if your query is already addressed via the following resources:

(Utilizing these existing resources is typically faster. It also helps reduce the load on our generous volunteers while elevating the signal to noise ratio of the forums otherwise arising from the same queries being posted repeatedly).

The Basics

  • Nextcloud Server version (e.g., 29.x.x):
    • 30.0.25
  • Operating system and version (e.g., Ubuntu 24.04):
    • 30.0.25
  • Web server and version (e.g, Apache 2.4.25):
    • nginx 1.29.1
  • Reverse proxy and version _(e.g. nginx 1.27.2)
    • nginx 1.29.1
  • PHP version (e.g, 8.3):
    • 8.3.25
  • Is this the first time you’ve seen this error? (Yes / No):
    • Yes
  • Installation method (e.g. AlO, NCP, Bare Metal/Archive, etc.)
    • Docker (nextcloud:30-fpm)
  • Are you using CloudfIare, mod_security, or similar? (Yes / No)
    • No

Summary of the issue you are facing:

Recently I added an event to Nextcloud Calendar. However there were some issues with the event (e.g. when I tried to add a second one it refused to add it and instead insisted on replacing the first one, as they both just have zeroes as the UUID, and it didn’t have and and date and for some reason didn’t let me set one). So, I removed it and instead created an event manually. Then, after a while I got a bounce e-mail from a no-reply who’d sent the event. Looking in my sent folder I then notice that Nextcloud has secretly sent an e-mail falsely claiming I’ve declined the meeting (well actually it said that “Personlig“, the name of the calendar, has declined the meeting). Luckily in this case it just hit a no-reply address and bounced, but this could be pretty bad if Nextcloud cancels a meeting for you and you have no idea it has done so (plus it’s a privacy leak, as it leaks details of your calendar setup, albeit pretty minor).

There is no indication that Nextcloud is going to send any e-mails when removing events from the calendar, and I have been unable to find any settings controlling this. In this case it’s a personal Nextcloud instance where I’m using my own e-mail account, otherwise I wouldn’t even have any way to know this was happening. Deleting the event from the trash apparently causes yet another false decline e-mail. How do you disable this? It really feels like it should be asking for confirmation before sending e-mails to other people.

Configuration

Nextcloud

{
    "system": {
        "instanceid": "***REMOVED SENSITIVE VALUE***",
        "passwordsalt": "***REMOVED SENSITIVE VALUE***",
        "secret": "***REMOVED SENSITIVE VALUE***",
        "trusted_domains": [
            "localhost:8081",
            "nextcloud.kvasta.se"
        ],
        "datadirectory": "***REMOVED SENSITIVE VALUE***",
        "overwrite.cli.url": "https:\/\/nextcloud.kvasta.se",
        "dbtype": "mysql",
        "version": "30.0.15.1",
        "dbname": "***REMOVED SENSITIVE VALUE***",
        "dbhost": "***REMOVED SENSITIVE VALUE***",
        "dbport": "",
        "dbtableprefix": "oc_",
        "dbuser": "***REMOVED SENSITIVE VALUE***",
        "dbpassword": "***REMOVED SENSITIVE VALUE***",
        "logtimezone": "UTC",
        "installed": true,
        "memcache.local": "\\OC\\Memcache\\APCu",
        "memcache.locking": "\\OC\\Memcache\\Redis",
        "redis": {
            "host": "***REMOVED SENSITIVE VALUE***",
            "password": "***REMOVED SENSITIVE VALUE***",
            "port": 0
        },
        "filelocking.enabled": true,
        "maintenance": false,
        "loglevel": 2,
        "theme": "",
        "mysql.utf8mb4": true,
        "overwriteprotocol": "https",
        "trusted_proxies": "***REMOVED SENSITIVE VALUE***",
        "apps_paths": [
            {
                "path": "\/var\/www\/html\/apps",
                "url": "\/apps",
                "writable": false
            },
            {
                "path": "\/var\/www\/html\/custom_apps",
                "url": "\/custom_apps",
                "writable": true
            }
        ],
        "memcache.distributed": "\\OC\\Memcache\\Redis",
        "twofactor_enforced": "false",
        "twofactor_enforced_groups": [],
        "twofactor_enforced_excluded_groups": [],
        "mail_from_address": "***REMOVED SENSITIVE VALUE***",
        "mail_smtpmode": "smtp",
        "mail_sendmailmode": "smtp",
        "mail_domain": "***REMOVED SENSITIVE VALUE***",
        "mail_smtpsecure": "ssl",
        "mail_smtpauthtype": "PLAIN",
        "mail_smtpauth": 1,
        "mail_smtphost": "***REMOVED SENSITIVE VALUE***",
        "mail_smtpport": "465",
        "mail_smtpname": "***REMOVED SENSITIVE VALUE***",
        "mail_smtppassword": "***REMOVED SENSITIVE VALUE***",
        "session_lifetime": 2592000,
        "default_phone_region": "SE",
        "maintenance_window_start": 0,
        "app_install_overwrite": [
            "news"
        ]
    }
}

Apps

Enabled:
  - app_api: 4.0.6
  - bruteforcesettings: 3.0.0
  - calendar: 5.5.4
  - cloud_federation_api: 1.13.0
  - contacts: 7.3.1
  - dashboard: 7.10.0
  - dav: 1.31.1
  - federatedfilesharing: 1.20.0
  - files: 2.2.0
  - files_downloadlimit: 3.0.0
  - files_reminders: 1.3.0
  - files_trashbin: 1.20.1
  - gpoddersync: 3.12.0
  - logreader: 3.0.0
  - lookup_server_connector: 1.18.0
  - news: 26.1.0
  - notes: 4.12.3
  - notifications: 3.0.0
  - oauth2: 1.18.1
  - provisioning_api: 1.20.0
  - recommendations: 3.0.0
  - related_resources: 1.5.0
  - serverinfo: 2.0.0
  - settings: 1.13.0
  - survey_client: 2.0.0
  - tasks: 0.16.1
  - text: 4.1.0
  - theming: 2.6.0
  - twofactor_backupcodes: 1.19.0
  - twofactor_totp: 12.0.0-dev
  - viewer: 3.0.0
  - webhook_listeners: 1.1.0-dev
  - workflowengine: 2.12.0
Disabled:
  - activity: 3.0.0 (installed 2.15.0)
  - admin_audit: 1.20.0
  - breezedark: 29.0.0 (installed 29.0.0)
  - circles: 30.0.0 (installed 22.2.0)
  - comments: 1.20.1 (installed 1.12.0)
  - contactsinteraction: 1.11.0 (installed 1.3.0)
  - deck: 1.14.6 (installed 1.14.6)
  - drawio: 3.0.9 (installed 3.0.9)
  - encryption: 2.18.0
  - end_to_end_encryption: 1.16.2 (installed 1.16.2)
  - federation: 1.20.0 (installed 1.12.0)
  - files_external: 1.22.0 (installed 1.18.0)
  - files_markdown: 2.4.1 (installed 2.4.1)
  - files_pdfviewer: 3.0.0 (installed 2.7.0)
  - files_rightclick: 0.15.1 (installed 1.6.0)
  - files_sharing: 1.22.0 (installed 1.20.0)
  - files_texteditor: 2.15.1 (installed 2.15.1)
  - files_versions: 1.23.0 (installed 1.19.1)
  - firstrunwizard: 3.0.0 (installed 2.15.0)
  - health: 2.2.2 (installed 2.2.2)
  - mail: 5.4.0 (installed 5.4.0)
  - nextcloud_announcements: 2.0.0 (installed 1.15.0)
  - password_policy: 2.0.0 (installed 1.16.0)
  - photos: 3.0.2 (installed 2.2.0)
  - privacy: 2.0.0 (installed 1.6.0)
  - ransomware_protection: 1.14.0 (installed 1.14.0)
  - richdocuments: 8.5.10 (installed 8.5.10)
  - richdocumentscode: 25.4.403 (installed 25.4.403)
  - sharebymail: 1.20.0 (installed 1.16.0)
  - support: 2.0.0 (installed 1.9.0)
  - suspicious_login: 8.0.0
  - systemtags: 1.20.0 (installed 1.10.0)
  - twofactor_nextcloud_notification: 4.0.0
  - updatenotification: 1.20.0 (installed 1.16.0)
  - user_ldap: 1.21.0
  - user_status: 1.10.0 (installed 1.6.0)
  - weather_status: 1.10.0 (installed 1.6.0)