[Bug]: Read-Only permission after adding Downloads folder to Nextcloud-synchronisation

[guckuck]

⚠️ Before submitting, please verify the following: ⚠️

• This is a bug, not a question or a configuration issue.
• This issue is not already reported on Github (I've searched it).
• Nextcloud Server and Desktop Client are up to date. See Server Maintenance and Release Schedule and Desktop Releases for supported versions.
• I agree to follow Nextcloud's Code of Conduct

Bug description

The problem happened on two different devices with Windows 10 and Window 11.

I added the Downloads-Folder as a seperated synchronisation-folder to the desktop client. After a while the downloads-folder was read only. It was not possible to add new files and folders. It was also not possible to change the persmission back to read/write (with and without admin privileges). Even after removing the folder from the desktop client (synchronisation) so folder was still read only.

I found this work-around to enable write-access again: https://answers.microsoft.com/en-us/windows/forum/all/unable-to-delete-folder-as-administrator-requires/ae5b6cf6-dae5-49b9-83db-1435d41749a9?page=2

Ok I found the answer:
First, rename the file so that it has an unknown extension
In the advanced permissions, change the owner to everyone
Then move the files to a folder you have full control of
Go back to permissions and set the owner as your account name
close the window
Go back to permissions and enable inheritance
you can then delete the file
Repeat for every file you wish to delete

The Downloads-Folder is a system folder. It was not a good idea to delete the folder.

Yesterday I had this problem on the Windows 10 device. After fixing the problem yesterday I tried it again and since than, the synchronisation works without any problems.

Today I tried it on the Windows 11 device with the same problem. I also added the Downloads-Folder to the synchronisation. After a while the same problem.

Steps to reproduce

1. Add the downloads-folder (c:\users\name\Downloads) to the desktop-client as a new folder-syncronisation (root folder on the Nextcloud-Server)
2. The synchronisation starts synching without problems.
3. After a while I get the error message from Desktop Client that the folder is read only.

Expected behavior

No changing persmissions to the folder.

Which files are affected by this bug

Autoruns.zip

Operating system

Windows

Which version of the operating system you are running.

Windows 10, Windows 11

Package

Appimage

Nextcloud Server version

28.0.5

Nextcloud Desktop Client version

3.13.0

Is this bug present after an update or on a fresh install?

Fresh desktop client install

Are you using the Nextcloud Server Encryption module?

Encryption is Disabled

Are you using an external user-backend?

• Default internal user-backend
• LDAP/ Active Directory
• SSO - SAML
• Other

Nextcloud Server logs

No response

Additional info

No response

[Madrich]

Shared (read-only) folders from an other NC user are syncronized but read-only too. After sync issues this files can not be deleted. need to go to Win secure mode and delete them in the console. Terrible.

[SofianeLasri]

I also have this problem with pictures and videos folders.

[epidemiaf1]

We had this issue as well in both Windows 10 and Windows 11 Pro machines. I'm not sure how we get to the point in which the folder changes to read only, but it is caused by an ACE in the folder permissions ACL explicitly denying access to all users in the computer for the user's profile path (./Documents, ./Desktop, etc.). Since the logged in user is also a member of the $COMPUTERNAME$\Users group, the deny ACE takes precedence over the other ACE that provides Full Control to the user's own profile. We synchronize the user's desktop, documents and pictures folder with the NextCloud Desktop Client. The fix is just to remove the conflicting ACE from the Advanced Permissions in the Security tab of the Folder Properties.

[Mysli0210]

I have this issue too, though only with one particular folder containing raw images nested in folders.

So nextcloud desktop client for windows sets computername\Users to deny write access under advanced permissions.

I did set up auditing on the folder, as i thought it to be malware trying to block me from my photos, but it turned out to be nextcloud.exe doing the deed.