Trying to restore personal file to file of share received folder returns 403 but the share file is deleted (new dav path)

[saw-jan]

Steps to reproduce

1. as admin, add a folder (myfolder) and a file inside it (myfolder/lorem.txt)
2. as admin, share the folder to user demo
3. as demo, create a same named file (lorem.txt) and delete it
4. as demo, try to restore the deleted file to the share received folder (using new dav path)

curl -XMOVE 'https://localhost:9200/remote.php/dav/trash-bin/demo/bc1b3655-4801-4646-90a1-d39b5be6bcc7' \                                                                            
-H'Destination: https://localhost:9200/remote.php/dav/files/demo/Shares/myfolder/lorem.txt' -udemo:demo -vk

< HTTP/1.1 403 Forbidden

<?xml version="1.0" encoding="UTF-8"?>
<d:error xmlns:d="DAV" xmlns:s="http://sabredav.org/ns">
  <s:exception>Sabre\DAV\Exception\Forbidden</s:exception>
  <s:message>Permission denied to restore</s:message>
  <s:errorcode></s:errorcode>
</d:error>

❗ lorem.txt file in the share folder is deleted and moved to trashbin of sharer (admin) ❗

With spaces endpoint: ✔️

curl -XMOVE 'https://localhost:9200/remote.php/dav/spaces/trash-bin/14cb34c2-9a97-40d4-9cb5-c0e221bbd9cb$bca43c23-9616-465f-a433-ae001b3092fa/bc1b3655-4801-4646-90a1-d39b5be6bcc7' \
-H'Destination: https://localhost:9200/remote.php/dav/spaces/a0ca6a90-a365-4782-871e-d44447bbc668$a0ca6a90-a365-4782-871e-d44447bbc668/myfolder/lorem.txt' -uadmin:admin -vk

< HTTP/1.1 400 Bad Request

lorem.txt exists - no change

Related issues:

• MOVE a file into same folder with same name returns 404 instead of 403 #1976