From 2f38ef0122a634245f715b73bea531dda5e4740a Mon Sep 17 00:00:00 2001
From: pyllyukko <pyllyukko@maimed.org>
Date: Tue, 21 Apr 2020 16:32:52 +0300
Subject: [PATCH] Suppress rule 200002 when editing contacts in Nextcloud

---
 rules/REQUEST-903.9003-NEXTCLOUD-EXCLUSION-RULES.conf | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/rules/REQUEST-903.9003-NEXTCLOUD-EXCLUSION-RULES.conf b/rules/REQUEST-903.9003-NEXTCLOUD-EXCLUSION-RULES.conf
index e1dca51c9..809db438c 100644
--- a/rules/REQUEST-903.9003-NEXTCLOUD-EXCLUSION-RULES.conf
+++ b/rules/REQUEST-903.9003-NEXTCLOUD-EXCLUSION-RULES.conf
@@ -262,6 +262,17 @@ SecRule REQUEST_FILENAME "@contains /remote.php/dav/addressbooks/" \
     nolog,\
     setvar:'tx.allowed_request_content_type=%{tx.allowed_request_content_type}|text/vcard'"
 
+# Allow modifying contacts via the web interface
+SecRule REQUEST_METHOD "@streq PUT" \
+    "id:9003321,\
+    phase:1,\
+    pass,\
+    t:none,\
+    nolog,\
+    chain"
+    SecRule REQUEST_FILENAME "@contains /remote.php/dav/addressbooks/" \
+        "t:none,\
+        ctl:ruleRemoveById=200002"
 
 # [ Calendar ]
 #