Permissions (rwmd) not enough for a delete: don't have read-access

### Describe the bug
A user with the rwmd permission in a given folder is unable to delete a file.
The permissions are set via the username provided by Authentik.

### To Reproduce

1. Setup an Authentik forward auth provider in front of copyparty.
2. Configure a user directory where a given user has access to
3. Login as that user
4. Try to delete an existing file (can be one the user uploaded)
5. Watch the error message, that the user has no read-permission

### Expected behavior

The user should have read permission for that folder

### Screenshots

### Server details (if you are using docker/podman)

* **server OS / version:** copyparty v1.20.10
* **how you're running copyparty:** docker
* **docker image:** copyparty/ac:latest (pulled on 08.03.2026)
* **copyparty arguments and/or config-file:**

[global]
e2dsa
e2ts
ansi
idp-h-usr: x-authentik-username
idp-h-grp: x-authentik-groups
rproxy: 1
xff-src: lan
xff-hdr: X-Forwarded-For
q, lo: /cfg/log/%Y-%m%d.log
df: 16
ver
stats, nos-dup
no-robots, force-js
hist: /w/apps/copyparty/data/
shr: /public

[/]
/w/data
accs:
r: @files-guest, @files-documents
A: @files-admin

[/admin]
/w
accs:
A: @files-admin

[/documents]
/w/data/documents
accs:
A: @files-admin
rw: @files-documents

[/share]
/w/data/share
accs:
A: @files-admin
rwmd: @files-guest, @files-documents

[/${u}]
/w/data/user/${u}
accs:
rwmd: ${u}
A: @files-admin

### The rest of the stack

Traefik Reverse proxy with an Authentik forward auth middleware.

### Server log

@2026-0308-153912.907 [auth ] reinitializing due to new user from IdP: ['gutentag2012':['files-admin', 'sysadmin']]
@2026-0308-153912.907 [root ] reloading config
@2026-0308-153912.936 [auth ] discovered config files in /cfg => ['copyparty.conf']
@2026-0308-153912.936 [auth ] loaded 2 config files:
â””/z/initcfg
â””/cfg/copyparty.conf
@2026-0308-153913.181 [auth ] volumes and permissions:

"/" /w/data
| read: gutentag2012
| write: gutentag2012
| move: gutentag2012
| delete: gutentag2012
| dots: gutentag2012
| get: --none--
| upGet: --none--
| html: --none--
| uadmin: gutentag2012

"/admin" /w
| read: gutentag2012
| write: gutentag2012
| move: gutentag2012
| delete: gutentag2012
| dots: gutentag2012
| get: --none--
| upGet: --none--
| html: --none--
| uadmin: gutentag2012

"/share" /w/data/share
| read: gutentag2012
| write: gutentag2012
| move: gutentag2012
| delete: gutentag2012
| dots: gutentag2012
| get: --none--
| upGet: --none--
| html: --none--
| uadmin: gutentag2012

"/documents" /w/data/documents
| read: gutentag2012
| write: gutentag2012
| move: gutentag2012
| delete: gutentag2012
| dots: gutentag2012
| get: --none--
| upGet: --none--
| html: --none--
| uadmin: gutentag2012

"/gutentag2012" /w/data/user/gutentag2012
| read: gutentag2012
| write: gutentag2012
| move: gutentag2012
| delete: gutentag2012
| dots: gutentag2012
| get: --none--
| upGet: --none--
| html: --none--
| uadmin: gutentag2012

@2026-0308-153913.181 [auth ] hint: enable upload deduplication with --dedup (but see readme for consequences)
@2026-0308-153913.216 [172.19.0.1 54250 ] POST /gutentag2012/test.txt?delete @gutentag2012
@2026-0308-153913.216 [172.19.0.1 54250 ] http403: you don't have read-access in '/gutentag2012/test.txt' or below '/', '/gutentag2012/test.txt'