contact is deleted after move to read only address book

[DietmarMa]

Steps to reproduce

1. User has an contact in his own address book
2. An other user share an address book with this user in read only mode
3. User move an contact to the shared address book

Expected behaviour

1. the shared read only address book is not selectable or
2. you get an valid error message

Actual behaviour

1. error message: "contact is not createable"
2. the origin contact is deleted

Server configuration

Operating system:
rasperian jessy

Web server:
Apache

Database:
mysql 5.5.54

PHP version:
5.6.29

Nextcloud version: (see Nextcloud admin page)
11.0.2

Contacts version: (see Nextcloud apps page)
1.5.3

Updated from an older Nextcloud or fresh install:
updated
Signing status:
No errors have been found.

The content of config/config.php:

{
    "system": {
        "instanceid": "ocb41c453080",
        "passwordsalt": "***REMOVED SENSITIVE VALUE***",
        "datadirectory": "\/var\/local\/owncloud\/data",
        "dbtype": "mysql",
        "version": "11.0.2.7",
        "installed": true,
        "forcessl": false,
        "theme": "",
        "maintenance": false,
        "default_language": "de",
        "enable_previews": true,
        "trusted_domains": [
            "***REMOVED SENSITIVE VALUE***"
        ],
        "dbname": "nextcloud",
        "dbhost": "localhost",
        "dbtableprefix": "oc_",
        "dbuser": "***REMOVED SENSITIVE VALUE***",
        "dbpassword": "***REMOVED SENSITIVE VALUE***",
        "mail_from_address": "owncloud",
        "mail_smtpmode": "smtp",
        "mail_domain": "cipicek.click",
        "mail_smtpsecure": "tls",
        "mail_smtpname": "***REMOVED SENSITIVE VALUE***",
        "mail_smtppassword": "***REMOVED SENSITIVE VALUE***",
        "mail_smtpauthtype": "LOGIN",
        "mail_smtpauth": 1,
        "mail_smtphost": "posteo.de",
        "memcache.local": "\\OC\\Memcache\\APCu",
        "loglevel": 1,
        "log_authfailip": true,
        "logfile": "\/var\/log\/owncloud\/owncloud.log",
        "log_rotate_size": 2097152,
        "logtimezone": "Europe\/Berlin",
        "secret": "***REMOVED SENSITIVE VALUE***",
        "trashbin_retention_obligation": "auto",
        "updatechecker": false,
        "appstoreenabled": true,
        "appstoreurl": "https:\/\/api.owncloud.com\/v1",
        "htaccess.RewriteBase": "\/",
        "appstore.experimental.enabled": true
    }
}

Are you using external storage, if yes which one: local/smb/sftp/...
local

Are you using encryption: yes/no
no

Are you using an external user-backend, if yes which one: LDAP/ActiveDirectory/Webdav/...
no

Eventually replace sensitive data as the name/IP-address of your LDAP server or groups.

### Client configuration
**Browser:**
firefox

**Operating system:**
debian strech

**CardDAV-clients:**
Web interface

### Logs
#### Web server error log

Insert your webserver log here
no log for this issue

Nextcloud log (data/nextcloud.log)

no log for this issue