Rclone mount handling for DeleteObject disallowed

What is the problem you are having with rclone?

We use “rclone” to mount S3 bucket from a NetApp ONTAP s3 storage for archiving purpose.
We disallowed the “DeleteObject” permission at the S3 storage, in order to make it write once only. It basically works fine in “S3 brower” as expected (able to put the object and refused and reporting error when attempt to delete).

However, using the mount point with “rclone mount”, a strange behavior for attempting object deletion is observed that it firstly looks like the object is deleted successfully from the file explorer (without any error/warning). Then the object will appear again when “refreshing” the file explorer. For command shell, the “del” command also seems execute sucessfully. But the object will appear in next “dir” command.

Is this behavior work as expected?
Is there any addition parameters can be added to the “rclone mount” command to improve the situation?
does “rclone mount” plan to have a better response / handling for this situation?

Run the command 'rclone version' and share the full output of the command.

C:\rclone>rclone --version
rclone v1.72.1

  • os/version: Microsoft Windows 10 Pro 22H2 22H2 (64 bit)
  • os/kernel: 10.0.19045.5487 (x86_64)
  • os/type: windows
  • os/arch: amd64
  • go/version: go1.25.5
  • go/linking: static
  • go/tags: cmount

Which cloud storage system are you using? (eg Google Drive) NetApp ONTAP 9.16.1

The command you were trying to run (eg rclone copy /tmp remote:tmp)

C:\rclone>rclone mount eqx-netapp01:test-1d C:\S3-test\test-1d --volname "test-1d" --vfs-cache-mode off --vfs-refresh --ca-cert C:\rclone\eqx-netapp01_ObjectStore.pem --no-check-certificate --s3-endpoint https://172.17.18.35 --log-file C:\rclone\s3_log-1d.txt -vv

Paste command here

The rclone config contents with secrets removed.

Editing existing "eqx-netapp01" remote with options:

  • type: s3
  • provider: Other
  • access_key_id:
  • secret_access_key:
  • endpoint: https://172.17.18.35
  • acl: public-read-write
  • storage_class: STANDARD
  • bucket_acl: public-read-write
  • region: q
Paste config here

A log from the command with the -vv flag

2026/03/10 10:53:55 DEBUG : /README.html: Getattr: fh=0xFFFFFFFFFFFFFFFF
2026/03/10 10:53:55 DEBUG : /README.html: >Getattr: errc=0
2026/03/10 10:53:55 DEBUG : /README.html: OpenEx: flags=0x0
2026/03/10 10:53:55 DEBUG : /README.html: OpenFile: flags=O_RDONLY, perm=-rwxrwxrwx
2026/03/10 10:53:55 DEBUG : README.html: Open: flags=O_RDONLY
2026/03/10 10:53:55 DEBUG : README.html: >Open: fd=README.html (r), err=
2026/03/10 10:53:55 DEBUG : /README.html: >OpenFile: fd=README.html (r), err=
2026/03/10 10:53:55 DEBUG : /README.html: >OpenEx: errc=0, fh=0x0
2026/03/10 10:53:55 DEBUG : /README.html: Unlink:
2026/03/10 10:53:55 DEBUG : README.html: Remove:
2026/03/10 10:53:55 DEBUG : README.html: File.Remove file error: operation error S3: DeleteObject, https response error StatusCode: 403, RequestID: , HostID: , api error AccessDenied: Access Denied
2026/03/10 10:53:55 DEBUG : README.html: >Remove: err=operation error S3: DeleteObject, https response error StatusCode: 403, RequestID: , HostID: , api error AccessDenied: Access Denied
2026/03/10 10:53:55 ERROR : IO error: operation error S3: DeleteObject, https response error StatusCode: 403, RequestID: , HostID: , api error AccessDenied: Access Denied
2026/03/10 10:53:55 DEBUG : /README.html: >Unlink: errc=-5
2026/03/10 10:53:55 DEBUG : /README.html: Flush: fh=0x0
2026/03/10 10:53:55 DEBUG : /: Getattr: fh=0xFFFFFFFFFFFFFFFF
2026/03/10 10:53:55 DEBUG : /: >Getattr: errc=0
2026/03/10 10:53:55 DEBUG : /README.html: >Flush: errc=0
2026/03/10 10:53:55 DEBUG : /: Getattr: fh=0xFFFFFFFFFFFFFFFF
2026/03/10 10:53:55 DEBUG : /: >Getattr: errc=0
2026/03/10 10:53:55 DEBUG : /README.html: Release: fh=0x0
2026/03/10 10:53:55 DEBUG : /: Opendir:
2026/03/10 10:53:55 DEBUG : /README.html: >Release: errc=0

Paste  log here