Commit graph

33985 commits

Author SHA1 Message Date
Andy Scherzinger
76b73436ba
Merge pull request #53036 from nextcloud/backport/53029/stable31
[stable31] fix(caldav): don't send invitations to circles
2025-05-25 22:51:59 +02:00
Git'Fellow
0eeb8335a9 fix(files_external): Safely check if the timestamp is numeric
Signed-off-by: Git'Fellow <12234510+solracsf@users.noreply.github.com>
2025-05-25 16:52:55 +02:00
Andy Scherzinger
a9d0c2164f
Merge pull request #52978 from nextcloud/backport/52879/stable31
[stable31] feat: add command to clear contacts photo cache
2025-05-25 16:44:07 +02:00
John Molakvoæ
014fd24de2
Merge pull request #53101 from nextcloud/backport/52897/stable31 2025-05-25 15:58:29 +02:00
Nextcloud bot
45672ffcc0
fix(l10n): Update translations from Transifex
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
2025-05-25 00:22:26 +00:00
Daniel
0437378e31
Merge pull request #53077 from nextcloud/backport/52914/stable31
[stable31] fix: hide guests group from principal backend
2025-05-24 17:58:43 +02:00
Jérôme Herbinet
64a378ea54 refactor(settings): replace "remove" wording with "delete"
Signed-off-by: Jérôme Herbinet <33763786+Jerome-Herbinet@users.noreply.github.com>
2025-05-24 08:00:35 +00:00
Nextcloud bot
2403763052
fix(l10n): Update translations from Transifex
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
2025-05-24 00:22:39 +00:00
Daniel Kesselberg
78ba825455 fix: hide guests group from principal backend
Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>
2025-05-23 16:27:57 +00:00
SebastianKrupinski
bd3026fcbd
fix: add calendar enable
Signed-off-by: SebastianKrupinski <krupinskis05@gmail.com>
2025-05-23 10:42:12 +02:00
Nextcloud bot
86d9289512
fix(l10n): Update translations from Transifex
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
2025-05-23 00:22:16 +00:00
Ferdinand Thiessen
c85f6a6f4f
Merge pull request #53040 from nextcloud/backport/52810/stable31
[stable31] fix: Move CSRF check from base to PublicAuth for public.php
2025-05-22 13:36:11 +02:00
Ferdinand Thiessen
f699595748
fix(files): make sure to always have proper plural forms
counted words should always be translated using `n`.
We can still simply concat the segments with punctation, this always
works regardless of the language used (even with RTL / LTR languages).

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2025-05-22 13:01:50 +02:00
Louis Chemineau
617af2f3cc fix: Replace the deprecated direct download link with the public DAV endpoint
Follow-up of #48098

Signed-off-by: Louis Chemineau <louis@chmn.me>
2025-05-22 08:30:36 +00:00
Louis Chemineau
7a0261878a fix: Move CSRF check from base to PublicAuth for public.php
This currently prevent directly accessing a ressource when clicking on a link on a third party site. Example, clicking on `https://example.com/public.php/dav/files/pqLWcA269zfzXez/?accept=zip` in a GitHub comment.

Skipping the check is an issue with password protected shares, as it allows third party sites to request the ressource when the user already entered the password, aka CSRF.  So after removing the check from `base.php`, we need to add the it again in the `PublicAuth` plugin.

We also add a redirect to be helpful to the user.

**Warning**: this adds the limitation that clicking on a direct download link for password protected shares will redirect you to the password form, and then to the main share view.

Fix #52482

Signed-off-by: Louis Chemineau <louis@chmn.me>
2025-05-22 08:30:36 +00:00
Nextcloud bot
2e65f43eb2
fix(l10n): Update translations from Transifex
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
2025-05-22 00:22:50 +00:00
Richard Steinmetz
d9eff389a7 fix(caldav): don't send invitations to circles
Signed-off-by: Richard Steinmetz <richard@steinmetz.cloud>
2025-05-21 14:16:07 +00:00
skjnldsv
7aca7be306 fix(systemtags): case-insensitive search
Signed-off-by: skjnldsv <skjnldsv@protonmail.com>

[skip ci]
2025-05-21 13:28:53 +00:00
Joas Schilling
76e15f695a
Merge pull request #53009 from nextcloud/backport/53005/stable31
[stable31] fix(theming): Instead of expecting a warning handle it properly
2025-05-21 07:46:03 +02:00
Nextcloud bot
477f0860e4
fix(l10n): Update translations from Transifex
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
2025-05-21 00:24:51 +00:00
Joas Schilling
5b5d67908b fix(theming): Instead of expecting a warning handle it properly
Signed-off-by: Joas Schilling <coding@schilljs.com>
2025-05-20 21:39:02 +00:00
Daniel Kesselberg
79e4147454 feat: add command to clear contacts photo cache
Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>
2025-05-20 15:02:59 +00:00
Nextcloud bot
bfea258648
fix(l10n): Update translations from Transifex
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
2025-05-20 00:22:34 +00:00
Daniel Kesselberg
1313fdaa50 fix(dav): only consider user's principal for unsharing entries
Before: Find all entries in `dav_shares` with `access = 5` for the user's principal, as well as group and circle memberships.

After: Find all entries in `dav_shares` with `access = 5` solely for the user's principal.

Future support for unsharing group or circle principals could be considered as a feature enhancement.

Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>
2025-05-19 14:35:04 +02:00
Daniel Kesselberg
eab2c5cbee fix(caldav): prevent unshare entry creation for owner unsharing
- Introduces a `unshare` method in `CalDavBackend` to handle user unshares.
- Implements check to determine if unshare entry is needed based on group/circle membership.
- Ensures `updateShares` is only used when the calendar owner manages shares.
- Resolves issue where unsharing a calendar as owner created an unshare entry in `oc_dav_shares`.

Related PRs:
- https://github.com/nextcloud/server/pull/43117
- https://github.com/nextcloud/server/pull/47737

Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>
2025-05-19 14:35:04 +02:00
Ferdinand Thiessen
9b3d73e6dc fix(updatenotification): respect updatechecker config
If disabled:
- Hide admin settings
- Do not create Nextcloud server update notifications

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2025-05-19 13:00:28 +02:00
Nextcloud bot
b8775ca1e3
fix(l10n): Update translations from Transifex
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
2025-05-19 00:22:55 +00:00
Nextcloud bot
9d56e34e27
fix(l10n): Update translations from Transifex
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
2025-05-18 00:22:50 +00:00
Ferdinand Thiessen
2bb2bbcae4
fix(files_sharing): Disable folder upload on file drop shares for now
The backend does not allow creating folders currently, so we have to
disable it for now.

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
2025-05-17 12:04:36 +02:00
Nextcloud bot
395515f346
fix(l10n): Update translations from Transifex
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
2025-05-17 00:23:25 +00:00
Robin Appelman
d18ff624d0
Merge pull request #52866 from nextcloud/backport/51603/stable31
[stable31] Add command to list orphan objects
2025-05-16 21:36:33 +02:00
Louis
84c528f64b
Merge pull request #52806 from nextcloud/backport/52694/stable31 2025-05-16 16:23:53 +02:00
F. E Noel Nfebe
7f2a7fedb2
Merge pull request #52674 from nextcloud/backport/52438/stable31
[stable31] fix(files): middle click & ctrl new tab
2025-05-16 15:05:19 +02:00
Robin Appelman
780766b63c fix: keep IObjectStoreMetaData in private namespace for backports
Signed-off-by: Robin Appelman <robin@icewind.nl>
2025-05-16 10:41:27 +02:00
Robin Appelman
4ff14790af feat: move streaming output helps to command base class
Signed-off-by: Robin Appelman <robin@icewind.nl>
2025-05-16 10:41:27 +02:00
Robin Appelman
18997b0199 feat: rework object listing
Signed-off-by: Robin Appelman <robin@icewind.nl>
2025-05-16 10:41:27 +02:00
Robin Appelman
e0ec7db29c feat: add command to list orphan objects
Signed-off-by: Robin Appelman <robin@icewind.nl>
2025-05-16 10:41:27 +02:00
Robin Appelman
f0cab800ab feat: add command to list objects
Signed-off-by: Robin Appelman <robin@icewind.nl>
2025-05-16 10:41:27 +02:00
Robin Appelman
a324dbec2e feat: add command to get object metadata
Signed-off-by: Robin Appelman <robin@icewind.nl>
2025-05-16 10:41:27 +02:00
Robin Appelman
9a52cfc25e
Merge pull request #52689 from nextcloud/backport/52133/stable31
[stable31] fix: disable direct download for shares
2025-05-16 10:23:24 +02:00
Kate
3f2fee08ca
Merge pull request #52823 from nextcloud/backport/52775/stable31 2025-05-16 10:01:43 +02:00
Nextcloud bot
d407508d22
fix(l10n): Update translations from Transifex
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
2025-05-16 00:23:00 +00:00
Andy Scherzinger
e5a579a0a4
Merge pull request #52701 from nextcloud/backport/52699/stable31
[stable31] fix(webhooks_listener): correctly set userId from event
2025-05-15 21:51:44 +02:00
skjnldsv
12334c162a fix(files): middle click & ctrl new tab
Signed-off-by: skjnldsv <skjnldsv@protonmail.com>
2025-05-15 21:49:29 +02:00
Andy Scherzinger
b13f76683f
Merge pull request #52663 from nextcloud/backport/52589/stable31
[stable31] fix(dav): move orphan cleaning logic to a chunked background job
2025-05-15 17:25:11 +02:00
Robin Appelman
465486e335 fix: fix unjailedroot of nested jails if there are other wrappers in between
Signed-off-by: Robin Appelman <robin@icewind.nl>
2025-05-15 14:57:05 +02:00
Stephan Orbaugh
61182a1d2c
Merge pull request #52691 from nextcloud/backport/52634/stable31
[stable31] perf(Share20): Add interface to query all shares in a folder without filtering by user
2025-05-15 14:32:45 +02:00
Robin Appelman
4271753fc2
Merge pull request #52790 from nextcloud/backport/52441/stable31
[stable31] fix: better error message when trying to scan a folder that is already being scanned
2025-05-15 14:11:14 +02:00
Robin Appelman
aec2c567c3
Merge pull request #52783 from nextcloud/backport/52681/stable31
[stable31] feat: add command to check files_external dependencies
2025-05-15 14:08:14 +02:00
Robin Appelman
ef2e308aa3
Merge pull request #52762 from nextcloud/backport/52707/stable31
[stable31] fix: throw a better error if we can't get the encrypted header size
2025-05-15 14:03:03 +02:00