The Basics
- Nextcloud Server version (e.g., 29.x.x):
30.0.8
- Operating system and version (e.g., Ubuntu 24.04):
Ubuntu 22.04
- Web server and version (e.g, Apache 2.4.25):
Apache 2.4.63
- Reverse proxy and version _(e.g. nginx 1.27.2)
traefik
- Is this the first time you’ve seen this error? (Yes / No):
No
- When did this problem seem to first start?
I think it exists forever
- Installation method (e.g. AlO, NCP, Bare Metal/Archive, etc.)
AIO
- Are you using CloudfIare, mod_security, or similar? (Yes / No)
No
Summary of the issue you are facing:
Users who explicitly do not have the right to delete files can still delete them by uploading a file with the same file name and file type. They have the option of either uploading the new file to the server or keeping the old version. If the new file is selected, the old file can be overwritten, i.e., deleted.
Steps to replicate it (hint: details matter!):
- Upload a file with the same filename that already exists
- You are allowed to override the old file even you are not permitted to delete files.