Secure view makes moving/copying documents across group foldes fail

[violoncelloCH]

Describe the bug
When secure view is enabled, when moving or copying a file from one group folder to another fails, even though secure view should not apply to the current context.

To Reproduce
Steps to reproduce the behavior:

1. Enable secure view, configure it in a way it doesn't apply to the user/usecase doing the next steps (i.e. only enable it for link shares, or only for a specific group we are not part of)
2. for a folder containing office files currently in one groupfolder, try to move it to another groupfolder
3. see two errors appear in top right: "Move or copy" action failed object urn:oid:4908 not found in objectstore

Expected behavior
User should be able to move or copy the document/folder

Server details

Operating system: Debian/Docker

Database: Postgresql 17.5

PHP version: 8.3.22

Nextcloud version: 31.0.6

Version of the richdocuments app 8.7.1

Version of Collabora Online 25.04.3.1

Configuration of the richdocuments app

{
    "apps": {
        "richdocuments": {
            "installed_version": "8.7.1",
            "types": "filesystem,prevent_group_restriction",
            "enabled": "yes",
            "wopi_url": "https:\/\/office.integritaet.ch",
            "disable_certificate_verification": "",
            "public_wopi_url": "https:\/\/office.integritaet.ch",
            "doc_format": "ooxml"
        }
    }
}

Logs

Nextcloud log (data/nextcloud.log)

{"reqId":"ooAvEUzdcpfnPNQs8hpV","level":3,"time":"2025-06-27T19:34:01+00:00","remoteAddr":"****","user":"****","app":"objectstore","method":"MOVE","url":"/remote.php/dav/files/****/****/test","message":"Could not get object urn:oid:4908 for file __groupfolders/1/****/test","userAgent":"Mozilla/5.0 (X11; Linux x86_64; rv:139.0) Gecko/20100101 Firefox/139.0","version":"31.0.6.2","exception":{"Exception":"OCP\\Files\\NotFoundException","Message":"object urn:oid:4908 not found in object store","Code":0,"Trace":[{"file":"/var/www/html/lib/private/Files/ObjectStore/ObjectStoreStorage.php","line":303,"function":"readObject","class":"OC\\Files\\ObjectStore\\Swift","type":"->","args":["urn:oid:4908"]},{"file":"/var/www/html/lib/private/Files/Storage/Wrapper/Wrapper.php","line":142,"function":"fopen","class":"OC\\Files\\ObjectStore\\ObjectStoreStorage","type":"->","args":["__groupfolders/1/****/test","r"]},{"file":"/var/www/html/lib/private/Files/Storage/Wrapper/Jail.php","line":155,"function":"fopen","class":"OC\\Files\\Storage\\Wrapper\\Wrapper","type":"->","args":["__groupfolders/1/****/test","r"]},{"file":"/var/www/html/lib/private/Files/Storage/Wrapper/Quota.php","line":122,"function":"fopen","class":"OC\\Files\\Storage\\Wrapper\\Jail","type":"->","args":["Abstimmung E-ID/AAA_E-ID Guest/test","r"]},{"file":"/var/www/html/lib/private/Files/Storage/Wrapper/Wrapper.php","line":142,"function":"fopen","class":"OC\\Files\\Storage\\Wrapper\\Quota","type":"->","args":["****/test","r"]},{"file":"/var/www/html/lib/private/Files/Storage/Wrapper/PermissionsMask.php","line":98,"function":"fopen","class":"OC\\Files\\Storage\\Wrapper\\Wrapper","type":"->","args":["****/test","r"]},{"file":"/var/www/html/lib/private/Files/Storage/Wrapper/Wrapper.php","line":142,"function":"fopen","class":"OC\\Files\\Storage\\Wrapper\\PermissionsMask","type":"->","args":["****/test","r"]},{"file":"/var/www/html/custom_apps/richdocuments/lib/Storage/SecureViewWrapper.php","line":45,"function":"fopen","class":"OC\\Files\\Storage\\Wrapper\\Wrapper","type":"->","args":["****/test","r"]},{"file":"/var/www/html/custom_apps/richdocuments/lib/Storage/SecureViewWrapper.php","line":89,"function":"fopen","class":"OCA\\Richdocuments\\Storage\\SecureViewWrapper","type":"->","args":["****/test","r"]},{"file":"/var/www/html/custom_apps/richdocuments/lib/Storage/SecureViewWrapper.php","line":111,"function":"shouldSecure","class":"OCA\\Richdocuments\\Storage\\SecureViewWrapper","type":"->","args":["****/test",{"__class__":"OCA\\Richdocuments\\Storage\\SecureViewWrapper","cache":null,"scanner":null,"watcher":null,"propagator":null,"updater":null}]},{"file":"/var/www/html/custom_apps/richdocuments/lib/Storage/SecureViewWrapper.php","line":67,"function":"checkSourceAndTarget","class":"OCA\\Richdocuments\\Storage\\SecureViewWrapper","type":"->","args":["****/test","test",{"__class__":"OCA\\Richdocuments\\Storage\\SecureViewWrapper","cache":null,"scanner":null,"watcher":null,"propagator":null,"updater":null}]},{"file":"/var/www/html/lib/private/Files/View.php","line":808,"function":"moveFromStorage","class":"OCA\\Richdocuments\\Storage\\SecureViewWrapper","type":"->","args":[{"__class__":"OCA\\Richdocuments\\Storage\\SecureViewWrapper","cache":null,"scanner":null,"watcher":null,"propagator":null,"updater":null},"****/test","test"]},{"file":"/var/www/html/apps/dav/lib/Connector/Sabre/Directory.php","line":418,"function":"rename","class":"OC\\Files\\View","type":"->","args":["/****/****/test","/****/test"]},{"file":"/var/www/html/3rdparty/sabre/dav/lib/DAV/Tree.php","line":178,"function":"moveInto","class":"OCA\\DAV\\Connector\\Sabre\\Directory","type":"->","args":["test","files/****/****/test",{"__class__":"OCA\\DAV\\Connector\\Sabre\\Directory"}]},{"file":"/var/www/html/3rdparty/sabre/dav/lib/DAV/CorePlugin.php","line":612,"function":"move","class":"Sabre\\DAV\\Tree","type":"->","args":["files/****/****/test","files/****/****/test"]},{"file":"/var/www/html/3rdparty/sabre/event/lib/WildcardEmitterTrait.php","line":89,"function":"httpMove","class":"Sabre\\DAV\\CorePlugin","type":"->","args":[{"__class__":"Sabre\\HTTP\\Request"},{"__class__":"Sabre\\HTTP\\Response"}]},{"file":"/var/www/html/3rdparty/sabre/dav/lib/DAV/Server.php","line":472,"function":"emit","class":"Sabre\\DAV\\Server","type":"->","args":["method:MOVE",[{"__class__":"Sabre\\HTTP\\Request"},{"__class__":"Sabre\\HTTP\\Response"}]]},{"file":"/var/www/html/apps/dav/lib/Connector/Sabre/Server.php","line":49,"function":"invokeMethod","class":"Sabre\\DAV\\Server","type":"->","args":[{"__class__":"Sabre\\HTTP\\Request"},{"__class__":"Sabre\\HTTP\\Response"}]},{"file":"/var/www/html/apps/dav/lib/Server.php","line":400,"function":"start","class":"OCA\\DAV\\Connector\\Sabre\\Server","type":"->","args":[]},{"file":"/var/www/html/apps/dav/appinfo/v2/remote.php","line":21,"function":"exec","class":"OCA\\DAV\\Server","type":"->","args":[]},{"file":"/var/www/html/remote.php","line":145,"args":["/var/www/html/apps/dav/appinfo/v2/remote.php"],"function":"require_once"}],"File":"/var/www/html/lib/private/Files/ObjectStore/Swift.php","Line":102,"message":"Could not get object urn:oid:4908 for file __groupfolders/1/****/test","exception":{},"CustomMessage":"Could not get object urn:oid:4908 for file __groupfolders/1/****/test"}}
{"reqId":"ooAvEUzdcpfnPNQs8hpV","level":3,"time":"2025-06-27T19:34:01+00:00","remoteAddr":"****","user":"****","app":"webdav","method":"MOVE","url":"/remote.php/dav/files/****/test","message":"object urn:oid:4908 not found in object store","userAgent":"Mozilla/5.0 (X11; Linux x86_64; rv:139.0) Gecko/20100101 Firefox/139.0","version":"31.0.6.2","exception":{"Exception":"OCP\\Files\\NotFoundException","Message":"object urn:oid:4908 not found in object store","Code":0,"Trace":[{"file":"/var/www/html/lib/private/Files/ObjectStore/ObjectStoreStorage.php","line":303,"function":"readObject","class":"OC\\Files\\ObjectStore\\Swift","type":"->","args":["urn:oid:4908"]},{"file":"/var/www/html/lib/private/Files/Storage/Wrapper/Wrapper.php","line":142,"function":"fopen","class":"OC\\Files\\ObjectStore\\ObjectStoreStorage","type":"->","args":["__groupfolders/1/****/test","r"]},{"file":"/var/www/html/lib/private/Files/Storage/Wrapper/Jail.php","line":155,"function":"fopen","class":"OC\\Files\\Storage\\Wrapper\\Wrapper","type":"->","args":["__groupfolders/1/****/test","r"]},{"file":"/var/www/html/lib/private/Files/Storage/Wrapper/Quota.php","line":122,"function":"fopen","class":"OC\\Files\\Storage\\Wrapper\\Jail","type":"->","args":["****t/test","r"]},{"file":"/var/www/html/lib/private/Files/Storage/Wrapper/Wrapper.php","line":142,"function":"fopen","class":"OC\\Files\\Storage\\Wrapper\\Quota","type":"->","args":["****/test","r"]},{"file":"/var/www/html/lib/private/Files/Storage/Wrapper/PermissionsMask.php","line":98,"function":"fopen","class":"OC\\Files\\Storage\\Wrapper\\Wrapper","type":"->","args":["****/test","r"]},{"file":"/var/www/html/lib/private/Files/Storage/Wrapper/Wrapper.php","line":142,"function":"fopen","class":"OC\\Files\\Storage\\Wrapper\\PermissionsMask","type":"->","args":["****/test","r"]},{"file":"/var/www/html/custom_apps/richdocuments/lib/Storage/SecureViewWrapper.php","line":45,"function":"fopen","class":"OC\\Files\\Storage\\Wrapper\\Wrapper","type":"->","args":["****/test","r"]},{"file":"/var/www/html/custom_apps/richdocuments/lib/Storage/SecureViewWrapper.php","line":89,"function":"fopen","class":"OCA\\Richdocuments\\Storage\\SecureViewWrapper","type":"->","args":["****/test","r"]},{"file":"/var/www/html/custom_apps/richdocuments/lib/Storage/SecureViewWrapper.php","line":111,"function":"shouldSecure","class":"OCA\\Richdocuments\\Storage\\SecureViewWrapper","type":"->","args":["****/test",{"__class__":"OCA\\Richdocuments\\Storage\\SecureViewWrapper","cache":null,"scanner":null,"watcher":null,"propagator":null,"updater":null}]},{"file":"/var/www/html/custom_apps/richdocuments/lib/Storage/SecureViewWrapper.php","line":67,"function":"checkSourceAndTarget","class":"OCA\\Richdocuments\\Storage\\SecureViewWrapper","type":"->","args":["****/test","test",{"__class__":"OCA\\Richdocuments\\Storage\\SecureViewWrapper","cache":null,"scanner":null,"watcher":null,"propagator":null,"updater":null}]},{"file":"/var/www/html/lib/private/Files/View.php","line":808,"function":"moveFromStorage","class":"OCA\\Richdocuments\\Storage\\SecureViewWrapper","type":"->","args":[{"__class__":"OCA\\Richdocuments\\Storage\\SecureViewWrapper","cache":null,"scanner":null,"watcher":null,"propagator":null,"updater":null},"****/test","test"]},{"file":"/var/www/html/apps/dav/lib/Connector/Sabre/Directory.php","line":418,"function":"rename","class":"OC\\Files\\View","type":"->","args":["/****/test","/E-ID-Guest/test"]},{"file":"/var/www/html/3rdparty/sabre/dav/lib/DAV/Tree.php","line":178,"function":"moveInto","class":"OCA\\DAV\\Connector\\Sabre\\Directory","type":"->","args":["test","files/****/****/test",{"__class__":"OCA\\DAV\\Connector\\Sabre\\Directory"}]},{"file":"/var/www/html/3rdparty/sabre/dav/lib/DAV/CorePlugin.php","line":612,"function":"move","class":"Sabre\\DAV\\Tree","type":"->","args":["files/****/****/test","files/****/****/test"]},{"file":"/var/www/html/3rdparty/sabre/event/lib/WildcardEmitterTrait.php","line":89,"function":"httpMove","class":"Sabre\\DAV\\CorePlugin","type":"->","args":[{"__class__":"Sabre\\HTTP\\Request"},{"__class__":"Sabre\\HTTP\\Response"}]},{"file":"/var/www/html/3rdparty/sabre/dav/lib/DAV/Server.php","line":472,"function":"emit","class":"Sabre\\DAV\\Server","type":"->","args":["method:MOVE",[{"__class__":"Sabre\\HTTP\\Request"},{"__class__":"Sabre\\HTTP\\Response"}]]},{"file":"/var/www/html/apps/dav/lib/Connector/Sabre/Server.php","line":49,"function":"invokeMethod","class":"Sabre\\DAV\\Server","type":"->","args":[{"__class__":"Sabre\\HTTP\\Request"},{"__class__":"Sabre\\HTTP\\Response"}]},{"file":"/var/www/html/apps/dav/lib/Server.php","line":400,"function":"start","class":"OCA\\DAV\\Connector\\Sabre\\Server","type":"->","args":[]},{"file":"/var/www/html/apps/dav/appinfo/v2/remote.php","line":21,"function":"exec","class":"OCA\\DAV\\Server","type":"->","args":[]},{"file":"/var/www/html/remote.php","line":145,"args":["/var/www/html/apps/dav/appinfo/v2/remote.php"],"function":"require_once"}],"File":"/var/www/html/lib/private/Files/ObjectStore/Swift.php","Line":102,"message":"object urn:oid:4908 not found in object store","exception":{},"CustomMessage":"object urn:oid:4908 not found in object store"}}