From 0f87897eb7745949f9b5fb9f2c36f02b764c4d8a Mon Sep 17 00:00:00 2001
From: Peter Bieringer <pb@bieringer.de>
Date: Sun, 29 Sep 2024 17:44:44 +0200
Subject: [PATCH] change default rights/permit_delete_collection from True to
 False (failsafe)

---
 CHANGELOG.md       | 1 +
 config             | 2 +-
 radicale/config.py | 2 +-
 3 files changed, 3 insertions(+), 2 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 08296c64..6d8a6dbf 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -4,6 +4,7 @@
 
 * Adjustment: option [auth] htpasswd_encryption change default from "md5" to "autodetect"
 * Add: option [auth] type=ldap with (group) rights management via LDAP/LDAPS
+* Adjustment: option [rights] 'permit_delete_collection' change default from "True" to "False" (failsafe)
 
 ## 3.2.3
 * Add: support for Python 3.13
diff --git a/config b/config
index 5fb11290..56c2c61c 100644
--- a/config
+++ b/config
@@ -113,7 +113,7 @@
 #file = /etc/radicale/rights
 
 # Permit delete of a collection (global)
-#permit_delete_collection = True
+#permit_delete_collection = False
 
 
 [storage]
diff --git a/radicale/config.py b/radicale/config.py
index 5bddaf91..68b3cc2a 100644
--- a/radicale/config.py
+++ b/radicale/config.py
@@ -242,7 +242,7 @@ DEFAULT_CONFIG_SCHEMA: types.CONFIG_SCHEMA = OrderedDict([
             "type": str_or_callable,
             "internal": rights.INTERNAL_TYPES}),
         ("permit_delete_collection", {
-            "value": "True",
+            "value": "False",
             "help": "permit delete of a collection",
             "type": bool}),
         ("file", {