{"action":"opened","issue":{"url":"https://api.github.com/repos/owncloud/core/issues/16756","labels_url":"https://api.github.com/repos/owncloud/core/issues/16756/labels{/name}","comments_url":"https://api.github.com/repos/owncloud/core/issues/16756/comments","events_url":"https://api.github.com/repos/owncloud/core/issues/16756/events","html_url":"https://github.com/owncloud/core/issues/16756","id":85504282,"number":16756,"title":"Prevent WebDAV delete of user's files folder","user":{"login":"PVince81","id":277525,"avatar_url":"https://avatars.githubusercontent.com/u/277525?v=3","gravatar_id":"","url":"https://api.github.com/users/PVince81","html_url":"https://github.com/PVince81","followers_url":"https://api.github.com/users/PVince81/followers","following_url":"https://api.github.com/users/PVince81/following{/other_user}","gists_url":"https://api.github.com/users/PVince81/gists{/gist_id}","starred_url":"https://api.github.com/users/PVince81/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/PVince81/subscriptions","organizations_url":"https://api.github.com/users/PVince81/orgs","repos_url":"https://api.github.com/users/PVince81/repos","events_url":"https://api.github.com/users/PVince81/events{/privacy}","received_events_url":"https://api.github.com/users/PVince81/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/owncloud/core/labels/app:files","name":"app:files","color":"02d7e1"},{"url":"https://api.github.com/repos/owncloud/core/labels/bug","name":"bug","color":"fc2929"},{"url":"https://api.github.com/repos/owncloud/core/labels/sev3-medium","name":"sev3-medium","color":"fc2929"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":0,"created_at":"2015-06-05T10:43:00Z","updated_at":"2015-06-05T10:43:00Z","closed_at":null,"body":"### Steps:\r\nRun `curl -D - -X DELETE \"http://root:admin@localhost/owncloud/remote.php/webdav/\"`\r\n\r\n### Expected result\r\n403 forbidden\r\n\r\n### Actual result\r\nInternal folder \"$user/files\" is deleted.\r\nTrashbin contains folder \"files\".\r\nGetting \"contrain violation errors\".\r\n\r\nWe should probably make \"isDeletable()\" return false on the root folder and also \"files\".\r\n\r\nCC @icewind1991 @schiesbn @nickvergessen "}}