upstream/nextcloud
1
0
Fork 0
mirror of https://github.com/nextcloud/server.git synced 2026-03-01 13:00:44 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions 7
58326 commits 695 branches 1186 tags 7 GiB
Commit graph

58326 commits

This branch
This branch
All branches
Author SHA1 Message Date
Carl Schwan
00a9b0c1db Fix permissions when copying from ObjectStorage 
Make sure that when a user copy a file from a directory they don't have
all permissions to a directory where they have more permissions, the
permissions are correctly set to the one from the parent taget folder.

This was caused by the ObjectStoreStorage::copyFromStorage using
the jailed storage and cache entry instead of the unjailed one like other
storages (the local one).
Steps to reproduce

+ Use object storage
+ Create a groupfolder with one group having full permission and another one
  who can just read files.
+ With an user who is in the second group, copy a file from the groupfolder to
  the home folder of this user.
+ The file in the home folder of the user will be read only and can't be deleted
  even though it is in their home folder and they are the owner. In oc_filecache,
  the permissions stored for this file are 1 (READ)

Signed-off-by: Carl Schwan <carl@carlschwan.eu>
 2021-10-28 12:55:53 +00:00
Julius Härtl
e4e35107b0
Merge pull request #29458 from nextcloud/backport/29454/stable21 2021-10-28 09:29:37 +02:00
Nextcloud bot
ea56f85fa1
[tx-robot] updated from transifex 
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
 2021-10-28 02:23:12 +00:00
John Molakvoæ
cf58d5ff51
Merge pull request #29447 from nextcloud/backport/29220/stable21 2021-10-27 15:52:30 +02:00
Joas Schilling
c6cff0ff06 Detect mimetype by content only with content 
Signed-off-by: Joas Schilling <coding@schilljs.com>
 2021-10-27 13:47:31 +00:00
Nextcloud bot
799b77208e
[tx-robot] updated from transifex 
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
 2021-10-27 02:23:55 +00:00
Louis
df8ec07862
Merge pull request #29443 from nextcloud/backport/stable21/26841 
[stable21] Implement local filtering in file list
 2021-10-26 15:09:29 +02:00
Robin Appelman
cf6da08f00
ci 
Signed-off-by: Robin Appelman <robin@icewind.nl>
 2021-10-26 14:46:21 +02:00
Robin Appelman
ce243798f6
cache versioning enabled status 
Signed-off-by: Robin Appelman <robin@icewind.nl>
 2021-10-26 14:45:59 +02:00
Robin Appelman
759f2daf38
minor directory detect improvements 
Signed-off-by: Robin Appelman <robin@icewind.nl>
 2021-10-26 14:45:20 +02:00
Robin Appelman
99ba96524e
more reliable return value for Watcher::checkUpdate 
Signed-off-by: Robin Appelman <robin@icewind.nl>
 2021-10-26 14:45:08 +02:00
Robin Appelman
4bc357d1ce
always set Key field in headObject 
Signed-off-by: Robin Appelman <robin@icewind.nl>
 2021-10-26 14:44:25 +02:00
Robin Appelman
06b59b5002
more reliable hasUpdated for s3 
Signed-off-by: Robin Appelman <robin@icewind.nl>
 2021-10-26 14:44:13 +02:00
Robin Appelman
df013e2d53
remove old migration method 
Signed-off-by: Robin Appelman <robin@icewind.nl>
 2021-10-26 14:44:07 +02:00
Robin Appelman
15aa354e74
optimize filetype for s3 directories a bit 
Signed-off-by: Robin Appelman <robin@icewind.nl>
 2021-10-26 14:43:59 +02:00
Robin Appelman
87c4c05671
more reliable directory copy 
Signed-off-by: Robin Appelman <robin@icewind.nl>
 2021-10-26 14:42:26 +02:00
Robin Appelman
69e93edf90
doesDirectoryExist fixes 
Signed-off-by: Robin Appelman <robin@icewind.nl>
 2021-10-26 14:41:54 +02:00
Robin Appelman
f18a76fec9
s3 external storage listing rework 
Signed-off-by: Robin Appelman <robin@icewind.nl>
 2021-10-26 14:41:46 +02:00
Julius Härtl
cba70e4541
Move to combined files entrypoint 
Signed-off-by: Julius Härtl <jus@bitgrid.net>
 2021-10-26 09:52:56 +02:00
Joas Schilling
5c8c486791
Fix "No entries in this …" template 
Signed-off-by: Joas Schilling <coding@schilljs.com>
 2021-10-26 09:25:40 +02:00
Julius Härtl
fd1d9798e8
Implement local filtering in file list 
Signed-off-by: Julius Härtl <jus@bitgrid.net>
 2021-10-26 09:25:40 +02:00
Nextcloud bot
c89eaec9e4
[tx-robot] updated from transifex 
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
 2021-10-26 02:23:16 +00:00
Lukas Reschke
9fc4bd5248
Merge pull request #29428 from nextcloud/fix/user_status_enumeration_21 
Backport #29260: Respect user enumeration settings in user status lists
 2021-10-25 14:52:13 +02:00
Jonas Meurer
e838e63b88
Add integration tests for user_status API 
Signed-off-by: Jonas Meurer <jonas@freesources.org>
 2021-10-25 11:37:44 +02:00
Jonas Meurer
02ce5c8f7d
Respect user enumeration settings in user status lists 
So far, the functions to find user statuses listed didn't respect user
enumeration settings (`shareapi_allow_share_dialog_user_enumeration`
and `shareapi_restrict_user_enumeration_to_group` core app settings).

Fix this privacy issue by returning an empty list in case
`shareapi_allow_share_dialog_user_enumeration` is unset or
`shareapi_restrict_user_enumeration_to_group` is set.

In the long run, we might want to return users from common groups if
`shareapi_restrict_user_enumeration_to_group` is set. It's complicated
to implement this in a way that scales, though. See the discussion at
https://github.com/nextcloud/server/pull/27879#pullrequestreview-753655308
for details.

Also, don't register the user_status dashboard widget at all if
`shareapi_allow_share_dialog_user_enumeration` is unset or
`shareapi_restrict_user_enumeration_to_group` is set.

Fixes: #27122

Signed-off-by: Jonas Meurer <jonas@freesources.org>
 2021-10-25 10:05:33 +02:00
Nextcloud bot
082d429c6e
[tx-robot] updated from transifex 
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
 2021-10-25 02:22:42 +00:00
Nextcloud bot
b3001fd69e
[tx-robot] updated from transifex 
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
 2021-10-24 02:22:43 +00:00
blizzz
b8ab9ffc1e
Merge pull request #29420 from nextcloud/backport/29400/stable21 
[stable21] fixes an undefined index when getAccessList returns an empty array
 2021-10-24 01:27:20 +02:00
dependabot[bot]
7ead027da4
Merge pull request #29411 from nextcloud/dependabot/npm_and_yarn/stable21/babel-loader-8.2.3 2021-10-23 18:51:01 +00:00
MichaIng
a17529b483
Merge pull request #29399 from nextcloud/backport/29378/stable21 
[stable21] Make the route name error more helpful
 2021-10-23 20:12:44 +02:00
dependabot[bot]
59919fddd8 Bump babel-loader from 8.2.2 to 8.2.3 
Bumps [babel-loader](https://github.com/babel/babel-loader) from 8.2.2 to 8.2.3.
- [Release notes](https://github.com/babel/babel-loader/releases)
- [Changelog](https://github.com/babel/babel-loader/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel-loader/compare/v8.2.2...v8.2.3)

---
updated-dependencies:
- dependency-name: babel-loader
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2021-10-23 20:11:11 +02:00
dependabot[bot]
bf35e6e5de
Merge pull request #29403 from nextcloud/dependabot/composer/build/integration/stable21/behat/behat-approx-3.9.0 2021-10-23 16:06:44 +00:00
dependabot[bot]
123a0de273 Update behat/behat requirement in /build/integration 
Updates the requirements on [behat/behat](https://github.com/Behat/Behat) to permit the latest version.
- [Release notes](https://github.com/Behat/Behat/releases)
- [Changelog](https://github.com/Behat/Behat/blob/master/CHANGELOG.md)
- [Commits](https://github.com/Behat/Behat/compare/v3.8.0...v3.9.0)

---
updated-dependencies:
- dependency-name: behat/behat
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
 2021-10-23 17:36:36 +02:00
Arthur Schiwon
d3576d32ae fixes an undefined index when getAccessList returns an empty array 
- [] is a valid return value that should be honored as having no access

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
 2021-10-23 12:51:15 +00:00
Nextcloud bot
a87643a9e0
[tx-robot] updated from transifex 
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
 2021-10-23 02:22:54 +00:00
Christoph Wurst
48d97fa865 Make the route name error more helpful 
As a developer I have no clue what "Invalid route name" means. If the
exception gives me a hint I might find it easier to figure out why my
route triggers this error.

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
 2021-10-22 20:38:58 +00:00
Julius Härtl
6750662047
Merge pull request #29390 from nextcloud/backport/29375/stable21 2021-10-22 20:12:39 +02:00
Daniel
88cb9e0ec6
Merge pull request #29386 from nextcloud/backport/28997/stable21 
[stable21] Scheduling plugin not updating responding attendee status
 2021-10-22 18:14:33 +02:00
Julius Härtl
35910f483d Make calendar schedule options translatable 
Signed-off-by: Julius Härtl <jus@bitgrid.net>
 2021-10-22 10:38:16 +00:00
Daniel Kesselberg
6df439177d Update attendence for external users 
For local users it's possible to select their calendar via the principal url and first update their own attendance status.
External users have no calendar event hence the recipient is the organizer.

Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>
 2021-10-22 10:14:00 +00:00
Anna Larch
a44e728a89 Scheduling plugin not updating responding attendee status take two 
Signed-off-by: Anna Larch <anna@nextcloud.com>
 2021-10-22 10:14:00 +00:00
Vincent Petry
a080c08d64
Merge pull request #29367 from nextcloud/backport/29362/stable21 
[stable21] Fix security issues when copying groupfolder with advanced ACL
 2021-10-22 09:56:21 +02:00
Nextcloud bot
884fcf0227
[tx-robot] updated from transifex 
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
 2021-10-22 02:22:17 +00:00
Carl Schwan
ec8b2a90e6 Fix security issues when copying groupfolder with advanced ACL 
Using advanced ACL, it is possible that an user has access to a
directory but not to a subdirectory, so the copying use
Common::copyFromStorage instead of Local::copyFromStorage.

Fix https://github.com/nextcloud/groupfolders/issues/1692

Signed-off-by: Carl Schwan <carl@carlschwan.eu>
 2021-10-21 16:34:46 +00:00
John Molakvoæ
6b0bdf192c
Merge pull request #29289 from nextcloud/backport/28768/stable21 2021-10-21 09:32:32 +02:00
Nextcloud bot
8a5317cbfe
[tx-robot] updated from transifex 
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
 2021-10-21 02:24:37 +00:00
blizzz
4f83ef5b6d
Merge pull request #29315 from nextcloud/backport/29180/stable21 
[stable21] Avoid PHP errors when the LDAP attribute is not found
 2021-10-20 18:24:37 +02:00
Daniel
105d28c875
Merge pull request #29268 from nextcloud/backport/29125/stable21 
[stable21] Add configuration flag to disable the background job for files_trashbin
 2021-10-20 10:35:21 +02:00
Nextcloud bot
8191ee34f2
[tx-robot] updated from transifex 
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
 2021-10-20 02:43:22 +00:00
MichaIng
db4cdcec6f
Merge pull request #29267 from nextcloud/backport/29090/stable21 
[stable21] Add configuration flag to disable the background job for files_versions
 2021-10-20 00:13:25 +02:00