Cannot delete files in shared folder when an open_basedir is set, error #465

[VincentvgNn]

Description

In OC server 6.0.3. I still cannot delete files in a shared folder when an open_basedir is set.
In OC server 6.0.2. Deleting files and creating/deleting folders via the ownCloud client did not work at all. Error message: 403 Forbidden
So the closed issue "Fix for Should work with open_basedir enabled #6472" seems to have solved a lot, but not all.

I described the problem and a temporary fix in my posts on the forum at:
"Patch fix open_basedir enabled for 6.0.2"
http://forum.owncloud.org/viewtopic.php?f=26&t=20244
by: Vincentvg » Wed Apr 16, 2014 3:09 pm

I can help testing a next fix.

Steps to reproduce

1. Create a file in a folder shared with you (editor permission set).
2. Delete that file.

Expected behaviour

The file should be deleted and not be downloaded again.

Actual behaviour

The client sync activity log screen reports:
"The file has been removed from a read only share. It was restored."
And indeed I got the deleted file restored.
Strange is that I'm having a read/write share !! Why do I get this false message?

Server configuration

Operating system: Linux Hosting Package
Web server: Apache
Database: MySQL
PHP version: 5.4
ownCloud version: 6.0.3.1
Updated from an older ownCloud or fresh install: recently updated from a fresh installed version 6.0.2
List of activated apps: default apps + encryption app
Are you using external storage: no
Are you using encryption: yes

Client configuration

Browser: (IE8) IE11 or Google Chrome
Operating system: Win XP or Win 7

Logs

ownCloud log (data/owncloud.log)

Error PHP 
curl_setopt_array(): CURLOPT_FOLLOWLOCATION cannot be activated when an open_basedir is set at /home/"user name"/domains/"domain name"/public_html/owncloud/3rdparty/Sabre/DAV/Client.php#465
2014-05-06T18:16:44+00:00

The client sync activity log screen reports:
Action: The file has been removed from a read only share. It was restored.

[PVince81]

Duplicate of #8509 ? You seem to have raised it twice.
Please close one of them. Thanks.

[VincentvgNn]

Yes it's a duplicate. I'm sorry. I've closed #8509 now.

[VincentvgNn]

After the automatic update from OC server 6.0.3. to OC server 6.0.4. I got the same error again.
The same temporary repair (?) method of adding 6 lines to the .htaccess file worked again.
In which version of OC server can this issue #8510 be solved?

[VincentvgNn]

The Dutch hosting company where I'm running the ownCloud 7.0.0 server offers a Linux Hosting Package that is controlled via DirectAdmin and that's using Installatron as the auto-installer. It's well documented and until now all runs flawlessly. Many people will run a Joomla website there.
I think that Joomla has solved the issue as discussed here already for a long time ago.
Which OC specialist can translate the Joomla solution to the OC situation?

I do not understand the patch that I use in the 6 additional lines at the end in the .htaccess file:

<Limit GET POST>
order allow,deny
allow from all
</Limit>
<Limit PUT DELETE>
order allow,deny
allow from all
</Limit>

I also do not understand whether this is a safe solution.
Anyhow it solves my problem until the .htaccess file is overwritten again in a next OC update.

[VincentvgNn]

@evert @Sausmaster @PVince81
Is this issue the same as posted at: https://github.com/fruux/sabre-dav/issues/330 ?

Sausmaster could not change the .htaccess file.
I have an own (non-shared) IP at my hoster web-oke (NL) and could edit the .htaccess file as mentioned above.

In which OC server version will the Sabre-DAV fix (2.0?) from evert be implemented?

I can test this solution if it can be done by only uploading and replacing 1 or 2 files.

[VincentvgNn]

From further testing it became clear that the title of this issue is misleading.
It will be continued as #10084.