[Bug]: Cannot edit groupfolder files after new AD account is created prior to first login

[WangTiankunKenny]

⚠️ This issue respects the following points: ⚠️

• This is a bug, not a question or a configuration/webserver/proxy issue.
• This issue is not already reported on Github OR Nextcloud Community Forum (I've searched it).
• Nextcloud Server is up to date. See Maintenance and Release Schedule for supported versions.
• I agree to follow Nextcloud's Code of Conduct.

Bug description

We are having a weird situation while we are using Nextcloud. Everytime when we create a new AD account, then all the group folder files became read-only.
System Version is 27.1.7

Steps to reproduce

1.Create a AD user.(Keep the accound not logged in with NextCloud)
2.add the new AD user to that groupfolders' group from AD server
3.try to editing something to the files that is under groupfolder
4.then save, it will show cannot be save.
5. The solution is to login that new AD account, then everything will be fine.

Expected behavior

Dont have to login that new AD account

Nextcloud Server version

28

Operating system

Debian/Ubuntu

PHP engine version

None

Web server

Nginx

Database engine version

None

Is this bug present after an update or on a fresh install?

Updated from a MINOR version (ex. 28.0.1 to 28.0.2)

Are you using the Nextcloud Server Encryption module?

Encryption is Disabled

What user-backends are you using?

• Default user-backend (database)
• LDAP/ Active Directory
• SSO - SAML
• Other

Configuration report

No response

List of activated Apps

No response

Nextcloud Signing status

No response

Nextcloud Logs

No response

Additional info

No response

[joshtrichards]

When did this behavior start?

System Version is 27.1.7

27 has reached end-of-life. In addition, even within 27 you're behind several maintenance releases: https://nextcloud.com/changelog-unsupported/#latest27

You also left most of the template empty so... I suggest reproducing this in a still supported major version (28, 29, 30), checking your Nextcloud log (you may need to adjust the log level to see what is going on), and filling out the full Issue template if it still occurs.

Please utilize the community help forum - https://help.nextcloud.com - if you'd like assistance with any of those steps.

[joshtrichards]

4.then save, it will show cannot be save.

There may be some clues about what is going on in your browser Inspector. Specifically under the Network and Console tabs. Are there any errors/similar?

[Chartman123]

Can confirm that logging in with the mentioned users in the log entries makes the error go away. In my case I'd created two new LDAP users just before the error appeared for the first time and the two users were listed in the logs. (first only one and the second then after a login with the first user)

There's also a related comment in the issues for the activity app: nextcloud/activity#1584 (comment)