Skip to content

Blocking desktop synchronization for folders results in logging all instances of "block access" in Nextcloud 18 #201

@Dave-REBL

Description

@Dave-REBL

Steps to reproduce

Add restricted tag "NoSync"

Create file access rule (Block Desktop Sync)

Rule 1: File system tag is tagged with NoSync (restricted)

Rule 2: Request user agent is Desktop client

Tag a folder containing other folders and files with "NoSync"

Share the tagged folder with a user using Desktop Client 3.0.3

Upgrade from Nextcloud 17 to Nextcloud 18

Expected behaviour

Rule is working as expected, but should not be logging every single instance of blocking access to a file, repeated every 30 seconds.

Actual behaviour

The work flow engine is logging every single instance of blocking access to a file, repeated every 30 seconds to nextcloud.log.

Note: These are Info logs. Changed logging level to Warning (2) to avoid filling up the log but this is not a solution as other Info logs are required.

These log messages were not generated in Nextcloud 17.

Server configuration detail

Operating system: Linux 4.4.0-194-generic nextcloud/server#226-Ubuntu SMP Wed Oct 21 10:19:36 UTC 2020 x86_64

Webserver: Apache/2.4.18 (Ubuntu) (apache2handler)

Database: mysql 10.0.38

PHP version:

7.3.24-3+ubuntu16.04.1+deb.sury.org+1
Modules loaded: Core, date, libxml, openssl, pcre, zlib, filter, hash, Reflection, SPL, sodium, session, standard, apache2handler, mysqlnd, PDO, xml, calendar, ctype, curl, dom, mbstring, fileinfo, ftp, gd, gettext, iconv, igbinary, imagick, intl, json, exif, mysqli, pdo_mysql, Phar, posix, readline, redis, shmop, SimpleXML, sockets, sysvmsg, sysvsem, sysvshm, tokenizer, wddx, xmlreader, xmlwriter, xsl, zip, Zend OPcache

Nextcloud version: 18.0.11 - 18.0.11.2

Updated from an older Nextcloud/ownCloud or fresh install:
Updated from Nextcloud 17.0.10

Where did you install Nextcloud from:
Updater

Signing status

Array
(
)

List of activated apps
Enabled:
 - accessibility: 1.4.0
 - activity: 2.11.1
 - admin_audit: 1.8.0
 - bruteforcesettings: 2.0.1
 - cloud_federation_api: 1.1.0
 - comments: 1.8.0
 - dav: 1.14.0
 - federatedfilesharing: 1.8.0
 - files: 1.13.1
 - files_accesscontrol: 1.8.3
 - files_external: 1.9.0
 - files_pdfviewer: 1.7.0
 - files_rightclick: 0.15.2
 - files_sharing: 1.10.1
 - files_trashbin: 1.8.0
 - files_versions: 1.11.0
 - impersonate: 1.5.2
 - issuetemplate: 0.7.0
 - logreader: 2.3.0
 - lookup_server_connector: 1.6.0
 - nextcloud_announcements: 1.7.0
 - notifications: 2.6.0
 - oauth2: 1.6.0
 - onlyoffice: 6.1.0
 - password_policy: 1.8.0
 - photos: 1.0.0
 - privacy: 1.2.0
 - provisioning_api: 1.8.0
 - recommendations: 0.6.0
 - serverinfo: 1.8.0
 - settings: 1.0.0
 - sharebymail: 1.8.0
 - support: 1.1.1
 - survey_client: 1.6.0
 - systemtags: 1.8.0
 - text: 2.0.0
 - twofactor_backupcodes: 1.7.0
 - unsplash: 1.1.7
 - updatenotification: 1.8.0
 - viewer: 1.2.0
 - workflowengine: 2.0.0
Disabled:
 - encryption
 - federation
 - files_videoplayer
 - firstrunwizard
 - theming
 - user_ldap

Configuration (config/config.php)
{
    "instanceid": "***REMOVED SENSITIVE VALUE***",
    "passwordsalt": "***REMOVED SENSITIVE VALUE***",
    "secret": "***REMOVED SENSITIVE VALUE***",
    "trusted_domains": [
        "ncloud.rebl.com"
    ],
    "datadirectory": "***REMOVED SENSITIVE VALUE***",
    "overwrite.cli.url": "https:\/\/ncloud.rebl.com",
    "dbtype": "mysql",
    "version": "18.0.11.2",
    "dbname": "***REMOVED SENSITIVE VALUE***",
    "dbhost": "***REMOVED SENSITIVE VALUE***",
    "dbport": "",
    "dbtableprefix": "oc_",
    "dbuser": "***REMOVED SENSITIVE VALUE***",
    "dbpassword": "***REMOVED SENSITIVE VALUE***",
    "enable_avatars": true,
    "enable_previews": true,
    "htaccess.RewriteBase": "\/",
    "logfile": "\/var\/log\/nextcloud\/nextcloud.log",
    "loglevel": 2,
    "logdateformat": "Y-m-d H:i:s",
    "lost_password_link": "disabled",
    "installed": true,
    "knowledgebaseenabled": false,
    "mail_smtpmode": "smtp",
    "mail_from_address": "***REMOVED SENSITIVE VALUE***",
    "mail_domain": "***REMOVED SENSITIVE VALUE***",
    "mail_smtphost": "***REMOVED SENSITIVE VALUE***",
    "mail_smtpport": "25",
    "memcache.distributed": "\\OC\\Memcache\\Redis",
    "memcache.local": "\\OC\\Memcache\\Redis",
    "memcache.locking": "\\OC\\Memcache\\Redis",
    "redis": {
        "host": "***REMOVED SENSITIVE VALUE***",
        "port": 6379
    },
    "remember_login_cookie_lifetime": 86400,
    "session_keepalive": false,
    "session_lifetime": 3600,
    "skeletondirectory": "",
    "updater.release.channel": "stable",
    "maintenance": false,
    "theme": "",
    "log_rotate_size": 10485760,
    "trashbin_retention_obligation": "auto, 30",
    "data-fingerprint": "431b9ba2f6a06e53ed489e3686d0aa81",
    "updater.secret": "***REMOVED SENSITIVE VALUE***"
}

Are you using external storage, if yes which one: local/smb/sftp/...

Are you using encryption:

Are you using an external user-backend, if yes which one: LDAP/ActiveDirectory/Webdav/...

Client configuration

Browser: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.198 Safari/537.36

Operating system:

Logs

Web server error log
Insert your web server log here 
Nextcloud log
[workflowengine] Info: Last qualified flow configuration is going to run Block access to a file

PROPFIND /remote.php/dav/files/user/
from 44.234.56.78 by user at 2020-11-20T19:55:55+00:00
Browser log

Insert your browser log here, this could for example include:

a) The javascript console log
b) The network log
c) ...

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions