Changes in 2.0.0-alpha2
Summary
- Bugfix - Remove runtime kill and run commands: #3740
- Bugfix - Check permissions when deleting Space: #3709
- Bugfix - Make IDP secrets configurable via environment variables: #3744
- Bugfix - Thumbnails for
/dav/xxx?preview=1
requests: #3567 - Bugfix - Idp: Check if CA certificate if present: #3623
- Bugfix - Return proper errors when ocs/cloud/users is using the cs3 backend: #3483
- Bugfix - URL encode the webdav url in the graph API: #3597
- Change - Update ocis packages and imports to V2: #3678
- Change - Load configuration files just from one directory: #3587
- Change - Reduce permissions on docker image predeclared volumes: #3641
- Change - Introduce
ocis init
and remove all default secrets: #3551 - Change - Reduce drives in graph /me/drives API: #3629
- Change - Switched default configuration to use libregraph/idm: #3331
- Change - Rename MetadataUserID: #3671
- Change - Use new space ID util functions: #3648
- Change - Rename serviceUser to systemUser: #3673
- Change - Split MachineAuth from SystemUser: #3672
- Enhancement - Align service naming: #3606
- Enhancement - Wrap metadata storage with dedicated reva gateway: #3602
- Enhancement - Product field in OCS version: #2918
- Enhancement - Add initial version of the search extensions: #3635
- Enhancement - Add capability for public link single file edit: #6787
- Enhancement - Added
share_jail
andprojects
feature flags in spaces capability: #3626 - Enhancement - Update linkshare capabilities: #3579
- Enhancement - Update reva to v2.3.1: #3552
- Enhancement - Update ownCloud Web to v5.5.0-rc.5: #6854
Details
-
Bugfix - Remove runtime kill and run commands: #3740
We've removed the kill and run commands from the oCIS runtime. If these dynamic capabilities
are needed, one should switch to a full fledged supervisor and start oCIS as individual
services.If one wants to start a only a subset of services, this is still possible by setting
OCIS_RUN_EXTENSIONS. -
Bugfix - Check permissions when deleting Space: #3709
Check for manager permissions when deleting spaces. Do not allow deleting spaces via dav
service -
Bugfix - Make IDP secrets configurable via environment variables: #3744
We've fixed the configuration options of the IDP to make the IDP secrets again configurable via
environment variables. -
Bugfix - Thumbnails for
/dav/xxx?preview=1
requests: #3567We've added the thumbnail rendering for
/dav/xxx?preview=1
,
/remote.php/webdav/{relative path}?preview=1
and/webdav/{relative path}?preview=1
requests, which was previously not supported because of missing routes. It
now returns the same thumbnails as for/remote.php/dav/xxx?preview=1
. -
Bugfix - Idp: Check if CA certificate if present: #3623
Upon first start with the default configurtation the idm service creates a server
certificate, that might not be finished before the idp service is starting. Add a check to idp
similar to what the user, group, and auth-providers implement. -
Bugfix - Return proper errors when ocs/cloud/users is using the cs3 backend: #3483
The ocs API was just exiting with a fatal error on any update request, when configured for the cs3
backend. Now it returns a proper error. -
Bugfix - URL encode the webdav url in the graph API: #3597
Fixed the webdav URL in the drives responses. Without encoding the URL could be broken by files
with spaces in the file name. -
Change - Update ocis packages and imports to V2: #3678
This needs to be done in preparation for the major version bump in ocis.
-
Change - Load configuration files just from one directory: #3587
We've changed the configuration file loading behavior and are now only loading configuration
files from ONE single directory. This directory can be set on compile time or via an environment
variable on startup (OCIS_CONFIG_DIR
).We are using following configuration default paths:
- Docker images:
/etc/ocis/
- Binary releases:$HOME/.ocis/config/
- Docker images:
-
Change - Reduce permissions on docker image predeclared volumes: #3641
We've lowered the permissions on the predeclared volumes of the oCIS docker image from 777 to
750.This change doesn't affect you, unless you use the docker image with the non default uid/guid to
start oCIS (default is 1000:1000). -
Change - Introduce
ocis init
and remove all default secrets: #3551We've removed all default secrets and the hardcoded UUID of the user
admin
. This means you
can't start oCIS any longer without setting these via environment variable or configuration
file.In order to make this easy for you, we introduced a new command:
ocis init
. You can run this
command before starting oCIS withocis server
and it will bootstrap you a configuration file
for a secure oCIS instance. -
Change - Reduce drives in graph /me/drives API: #3629
Reduced the drives in the graph
/me/drives
API to only the drives the user has access to. The
endpoint/drives
will list all drives when the user has the permission. -
Change - Switched default configuration to use libregraph/idm: #3331
We switched the default configuration of oCIS to use the "idm" service (based on
libregraph/idm) as the standard source for user and group information. The accounts and
glauth services are no longer enabled by default and will be removed with an upcoming release. -
Change - Rename MetadataUserID: #3671
MetadataUserID is renamed to SystemUserID including yaml tags and env vars
-
Change - Use new space ID util functions: #3648
Changed code to use the new space ID util functions so that everything works with the new spaces
ID format. -
Change - Rename serviceUser to systemUser: #3673
We renamed serviceUser to systemUser in all configs and vars including yaml-tags and env vars
-
Change - Split MachineAuth from SystemUser: #3672
We now have two different APIKeys: MachineAuth for the machine-auth service and SystemUser
for the system user used e.g. by settings service -
Enhancement - Align service naming: #3606
We now reflect the configured service names when listing them in the ocis runtime
-
Enhancement - Wrap metadata storage with dedicated reva gateway: #3602
We wrapped the metadata storage in a minimal reva instance with a dedicated gateway, including
static storage registry, static auth registry, in memory userprovider, machine
authprovider and demo permissions service. This allows us to preconfigure the service user
for the ocis settings service, share and public share providers. -
Enhancement - Product field in OCS version: #2918
We've added a new field to the OCS Version, which is supposed to announce the product name. The
web ui as a client will make use of it to make the backend product and version available (e.g. for
easier bug reports). -
Enhancement - Add initial version of the search extensions: #3635
It is now possible to search for files and directories by their name using the web UI. Therefor
new search extension indexes files in a persistent local index. -
Enhancement - Add capability for public link single file edit: #6787
It is now possible to share a single file by link with edit permissions. Therefore we need a
public share capability to enable that feature in the clients. At the same time, we improved the
WebDAV permissions for public links. -
Enhancement - Added
share_jail
andprojects
feature flags in spaces capability: #3626We've added feature flags to the
spaces
capability to indicate to clients which features are
supposed to be shown to users. -
Enhancement - Update linkshare capabilities: #3579
We have updated the capabilities regarding password enforcement and expiration dates of
public links. They were previously hardcoded in a way that didn't reflect the actual backend
functionality anymore. -
Enhancement - Update reva to v2.3.1: #3552
Updated reva to version 2.3.1. This update includes
- Bugfix cs3org/reva#2827: Check permissions when deleting spaces
- Bugfix cs3org/reva#2830: Correctly render response when accepting merged shares
- Bugfix cs3org/reva#2831: Fix uploads to owncloudsql storage when no mtime is provided
- Enhancement cs3org/reva#2833: Make status.php values configurable
- Enhancement cs3org/reva#2832: Add version option for ocdav go-micro service
Updated reva to version 2.3.0. This update includes:
- Bugfix cs3org/reva#2693: Support editnew actions from MS Office
- Bugfix cs3org/reva#2588: Dockerfile.revad-ceph to use the right base image
- Bugfix cs3org/reva#2499: Removed check DenyGrant in resource permission
- Bugfix cs3org/reva#2285: Accept new userid idp format
- Bugfix cs3org/reva#2802: Bugfix the resource id handling for space shares
- Bugfix cs3org/reva#2800: Bugfix spaceid parsing in spaces trashbin API
- Bugfix cs3org/reva#2608: Respect the tracing_service_name config variable
- Bugfix cs3org/reva#2742: Use exact match in login filter
- Bugfix cs3org/reva#2759: Made uid, gid claims parsing more robust in OIDC auth provider
- Bugfix cs3org/reva#2788: Return the correct file IDs on public link resources
- Bugfix cs3org/reva#2322: Use RFC3339 for parsing dates
- Bugfix cs3org/reva#2784: Disable storageprovider cache for the share jail
- Bugfix cs3org/reva#2555: Bugfix site accounts endpoints
- Bugfix cs3org/reva#2675: Updates Makefile according to latest go standards
- Bugfix cs3org/reva#2572: Wait for nats server on middleware start
- Change cs3org/reva#2735: Avoid user enumeration
- Change cs3org/reva#2737: Bump go-cs3api
- Change cs3org/reva#2763: Change the oCIS and S3NG storage driver blob store layout
- Change cs3org/reva#2596: Remove hash from public link urls
- Change cs3org/reva#2785: Implement workaround for chi.RegisterMethod
- Change cs3org/reva#2559: Do not encode webDAV ids to base64
- Change cs3org/reva#2740: Rename oc10 share manager driver
- Change cs3org/reva#2561: Merge oidcmapping auth manager into oidc
- Enhancement cs3org/reva#2698: Make capabilities endpoint public, authenticate users is present
- Enhancement cs3org/reva#2515: Enabling tracing by default if not explicitly disabled
- Enhancement cs3org/reva#2686: Features for favorites xattrs in EOS, cache for scope expansion
- Enhancement cs3org/reva#2494: Use sys ACLs for file permissions
- Enhancement cs3org/reva#2522: Introduce events
- Enhancement cs3org/reva#2811: Add event for created directories
- Enhancement cs3org/reva#2798: Add additional fields to events to enable search
- Enhancement cs3org/reva#2790: Fake providerids so API stays stable after beta
- Enhancement cs3org/reva#2685: Enable federated account access
- Enhancement cs3org/reva#1787: Add support for HTTP TPC
- Enhancement cs3org/reva#2799: Add flag to enable unrestriced listing of spaces
- Enhancement cs3org/reva#2560: Mentix PromSD extensions
- Enhancement cs3org/reva#2741: Meta path for user
- Enhancement cs3org/reva#2613: Externalize custom mime types configuration for storage providers
- Enhancement cs3org/reva#2163: Nextcloud-based share manager for pkg/ocm/share
- Enhancement cs3org/reva#2696: Preferences driver refactor and cbox sql implementation
- Enhancement cs3org/reva#2052: New CS3API datatx methods
- Enhancement cs3org/reva#2743: Add capability for public link single file edit
- Enhancement cs3org/reva#2738: Site accounts site-global settings
- Enhancement cs3org/reva#2672: Further Site Accounts improvements
- Enhancement cs3org/reva#2549: Site accounts improvements
- Enhancement cs3org/reva#2795: Add feature flags "projects" and "share_jail" to spaces capability
- Enhancement cs3org/reva#2514: Reuse ocs role objects in other drivers
- Enhancement cs3org/reva#2781: In memory user provider
- Enhancement cs3org/reva#2752: Refactor the rest user and group provider drivers
-
Enhancement - Update ownCloud Web to v5.5.0-rc.5: #6854
Tags: web
We updated ownCloud Web to v5.5.0-rc.5. Please refer to the changelog (linked) for details on
the web release.owncloud/web#6854
#3664
#3680
#3727
#3747
https://github.com/owncloud/web/releases/tag/v5.5.0-rc.5