[Bug]: Editing a shared text does not work anymore (regression)

[max-nextcloud]

⚠️ This issue respects the following points: ⚠️

• This is a bug, not a question or a configuration/webserver/proxy issue.
• This issue is not already reported on Github (I've searched it).
• Nextcloud Server is up to date. See Maintenance and Release Schedule for supported versions.
• I agree to follow Nextcloud's Code of Conduct.

Bug description

When sharing a text file in a writable way and opening that share link
the editor toolbar does not show anymore
and the server responds to push requests for the document with 403 Not Allowed.

We first observed this bug by failing CI runs in the text app CI.
The text code in question had not changed.
Tests passed last time on Feb. 14th 8:56 AM ( https://github.com/nextcloud/text/actions/runs/1839800871 )
and fail since Feb 17th 10:59 AM ( https://github.com/nextcloud/text/actions/runs/1857945037 ).

Also reproduced locally in a docker dev environment.
Local tests are still passing with server checked out at eb0d4ef and failing at 5ee0fb3 .

Steps to reproduce

1. login
2. create a text doc
3. share it with a link and grant edit permission
4. open the link and attempt to edit the doc

Expected behavior

The document should be editable and edits should be synced

Installation method

Official Docker image

Operating system

Debian/Ubuntu

PHP engine version

PHP 7.4

Web server

No response

Database engine version

No response

Is this bug present after an update or on a fresh install?

Fresh Nextcloud Server install

Are you using the Nextcloud Server Encryption module?

No response

What user-backends are you using?

• Default user-backend (database)
• LDAP/ Active Directory
• SSO - SAML
• Other

Configuration report

{
    "system": {
        "debug": true,
        "apps_paths": [
            {
                "path": "\/var\/www\/html\/apps",
                "url": "\/apps",
                "writable": false
            },
            {
                "path": "\/var\/www\/html\/apps-extra",
                "url": "\/apps-extra",
                "writable": false
            },
            {
                "path": "\/var\/www\/html\/apps-writable",
                "url": "\/apps-writable",
                "writable": true
            }
        ],
        "allow_local_remote_servers": true,
        "mail_from_address": "***REMOVED SENSITIVE VALUE***",
        "mail_smtpmode": "smtp",
        "mail_sendmailmode": "smtp",
        "mail_domain": "***REMOVED SENSITIVE VALUE***",
        "mail_smtphost": "***REMOVED SENSITIVE VALUE***",
        "mail_smtpport": "1025",
        "skeletondirectory": "\/skeleton",
        "passwordsalt": "***REMOVED SENSITIVE VALUE***",
        "secret": "***REMOVED SENSITIVE VALUE***",
        "trusted_domains": [
            "localhost",
            "nextcloud",
            "nextcloud.local",
            "192.168.24.6",
            "localhost"
        ],
        "datadirectory": "***REMOVED SENSITIVE VALUE***",
        "dbtype": "mysql",
        "version": "24.0.0.4",
        "overwrite.cli.url": "https:\/\/nextcloud.local",
        "dbname": "***REMOVED SENSITIVE VALUE***",
        "dbhost": "***REMOVED SENSITIVE VALUE***",
        "dbport": "",
        "dbtableprefix": "oc_",
        "mysql.utf8mb4": true,
        "dbuser": "***REMOVED SENSITIVE VALUE***",
        "dbpassword": "***REMOVED SENSITIVE VALUE***",
        "installed": true,
        "instanceid": "***REMOVED SENSITIVE VALUE***",
        "redis": {
            "host": "***REMOVED SENSITIVE VALUE***",
            "port": 6379
        },
        "memcache.local": "\\OC\\Memcache\\Redis",
        "memcache.locking": "\\OC\\Memcache\\Redis",
        "overwriteprotocol": "https"
    }
}

List of activated Apps

Enabled:
  - accessibility: 1.10.0
  - circles: 24.0.0-alpha1
  - cloud_federation_api: 1.7.0
  - comments: 1.14.0
  - contacts: 4.1.0-alpha.1
  - contactsinteraction: 1.5.0
  - dashboard: 7.4.0
  - dav: 1.22.0
  - federatedfilesharing: 1.14.0
  - federation: 1.14.0
  - files: 1.19.0
  - files_sharing: 1.16.0
  - files_trashbin: 1.14.0
  - files_versions: 1.17.0
  - lookup_server_connector: 1.12.0
  - oauth2: 1.12.0
  - provisioning_api: 1.14.0
  - settings: 1.6.0
  - sharebymail: 1.14.0
  - systemtags: 1.14.0
  - text: 3.5.1
  - theming: 1.15.0
  - twofactor_backupcodes: 1.13.0
  - updatenotification: 1.14.0
  - user_status: 1.4.0
  - viewer: 1.8.0
  - weather_status: 1.4.0
  - workflowengine: 2.6.0
Disabled:
  - admin_audit
  - collectives
  - deck
  - encryption
  - files_external
  - testing
  - user_ldap
  - user_oidc

Nextcloud Signing status

No response

Nextcloud Logs

No response

Additional info

No response

[max-nextcloud]

bisected this

git bisect start
# good: [eb0d4efdc34ec45ce7d2df4627c193e88be72040] [tx-robot] updated from transifex
git bisect good eb0d4efdc34ec45ce7d2df4627c193e88be72040
# bad: [5ee0fb3acb918d16c78addaa54d3a581f9e4f982] [tx-robot] updated from transifex
git bisect bad 5ee0fb3acb918d16c78addaa54d3a581f9e4f982
# good: [77ed32b6134196f442ac4c0d43a7e520e8b62cb7] Merge pull request #31174 from nextcloud/fix/script_loading_ldap
git bisect good 77ed32b6134196f442ac4c0d43a7e520e8b62cb7
# bad: [1bfd001cf6add6cb99d5231502c8c19e8dce910a] Merge pull request #30862 from nextcloud/feat/crud_share_permission
git bisect bad 1bfd001cf6add6cb99d5231502c8c19e8dce910a
# good: [9026455dac6d48ee5ac5899bdb5f00b09c107824] Merge pull request #31170 from nextcloud/enh/noid/fix-broken-tooltip
git bisect good 9026455dac6d48ee5ac5899bdb5f00b09c107824
# good: [6d7feebe73c3007843d53c61d2674df0d2130d93] Merge pull request #31180 from nextcloud/feature/ChrisCano66/Add_Target_Blank_To_Links_Menu
git bisect good 6d7feebe73c3007843d53c61d2674df0d2130d93
# bad: [da435b1e67930e85fc30fd1b94c6214caa086f4f] Support CRUD share permissions
git bisect bad da435b1e67930e85fc30fd1b94c6214caa086f4f
# first bad commit: [da435b1e67930e85fc30fd1b94c6214caa086f4f] Support CRUD share permissions

... points to da435b1 - which kind of makes sense as it's permission related.

[max-nextcloud]

@artonge could you take a look at this?