Commit graph

270 commits

Author SHA1 Message Date
Joas Schilling
eb1605f4ae Fix invalid date in security.txt
Signed-off-by: Joas Schilling <coding@schilljs.com>
2022-11-04 10:20:21 +00:00
Julien Veyssier
65d86fb3c4 check disable_activity.email_address_changed_by_admin when email is changed by admin via the OCS API
Signed-off-by: Julien Veyssier <eneiluj@posteo.net>
2022-10-14 09:18:58 +00:00
Joas Schilling
ba0e337860 Update security.txt expires field
Signed-off-by: Joas Schilling <coding@schilljs.com>
2022-10-11 08:22:26 +00:00
acsfer
aade17feac Harden some PHP functions
To avoid things like https://github.com/nextcloud/server/issues/26034

Signed-off-by: Louis Chemineau <louis@chmn.me>
2022-10-10 19:08:37 +00:00
Carl Schwan
bc29ff5567
Handle one time and large passwords
For passwords bigger than 250 characters, use a bigger key since the
performance impact is minor (around one second to encrypt the password).

For passwords bigger than 470 characters, give up earlier and throw
exeception recommanding admin to either enable the previously enabled
configuration or use smaller passwords.

This adds an option to disable storing passwords in the database. This
might be desirable when using single use token as passwords or very
large passwords.

Signed-off-by: Carl Schwan <carl@carlschwan.eu>
2022-08-03 13:50:29 +02:00
Carl Schwan
3750160d9f Allow to disable password policy enforcement for selected groups
Signed-off-by: Carl Schwan <carl@carlschwan.eu>
Co-authored-by: Vincent Petry <vincent@nextcloud.com>
Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>
2022-07-05 17:05:09 +02:00
Louis Chemineau
768b41ee45 Rename setting name to reduce its length
Signed-off-by: Louis Chemineau <louis@chmn.me>
2022-06-28 08:40:44 +00:00
szaimen
6d0d38ae58 do not display the buffer_size info if the size is already set to a certain threshold
Signed-off-by: szaimen <szaimen@e.mail.de>
Co-Authored-By: MichaIng <micha@dietpi.com>
2022-06-27 12:20:15 +00:00
Louis Chemineau
d0bfca5131 Add setting to ignore email during search
Signed-off-by: Louis Chemineau <louis@chmn.me>
2022-06-07 11:37:25 +00:00
Louis Chemineau
e297e1ce18 Add settings to ignore second display name in search
Signed-off-by: Louis Chemineau <louis@chmn.me>
2022-06-07 11:37:25 +00:00
Louis Chemineau
839046a50b Add settings to not match userID during full match
Signed-off-by: Louis Chemineau <louis@chmn.me>
2022-06-07 11:37:25 +00:00
szaimen
0bc3706c92 adjust wording for database checks
Signed-off-by: szaimen <szaimen@e.mail.de>
2022-05-17 11:23:56 +00:00
acsfer
c565f4a3fb Don't use plain URL on the subject
Many servers classify emails with plain URLs on subject as spam, or can event reject/discard it completely. Don't use it and display Instance Name instead.

`550 5.2.0 GIuMngdpZqS9h Mail rejected. OFR_506 [506]`
2022-05-02 21:10:32 +00:00
Joas Schilling
07249728d4
Merge pull request #31678 from nextcloud/backport/31658/stable23
[stable23] Limit the length of app password names
2022-04-14 22:10:15 +02:00
szaimen
6af075a7e7 allow to disable the imagick warning
Signed-off-by: szaimen <szaimen@e.mail.de>
Co-Authored-By: MichaIng <micha@dietpi.com>
2022-04-14 13:29:46 +02:00
Louis
988236b9ae
Merge pull request #31705 from nextcloud/backport/30950/stable23
[stable23] Add OPcache recommendations to Transifex
2022-03-28 11:15:33 +02:00
Christopher Ng
d8c04464aa Add profile default setting for admin
Signed-off-by: Christopher Ng <chrng8@gmail.com>
(cherry picked from commit 108abd77ed)
Signed-off-by: Christopher Ng <chrng8@gmail.com>
2022-03-25 03:53:54 +00:00
Christopher Ng
8bef2ec925 Add global profile toggle config
Signed-off-by: Christopher Ng <chrng8@gmail.com>
(cherry picked from commit 1fc0b4320c)
2022-03-25 03:53:54 +00:00
MichaIng
eca6197ec5 Add OPcache recommendations to Transifex
Fixes: https://github.com/nextcloud/server/issues/30941

Signed-off-by: MichaIng <micha@dietpi.com>
2022-03-24 16:59:36 +00:00
Joas Schilling
7efa2fa3a0
Limit the length of app password names
Signed-off-by: Joas Schilling <coding@schilljs.com>
2022-03-23 21:46:35 +01:00
Joas Schilling
501fb2229e
Merge pull request #31536 from nextcloud/backport/31519/stable23
[stable23] Fix occ user:add-app-password
2022-03-22 13:54:17 +01:00
szaimen
6e1c064fc9 improve overwrite cli url setup check
Signed-off-by: szaimen <szaimen@e.mail.de>
2022-03-21 18:21:01 +00:00
Joas Schilling
a96cb00505 Differenciate the activity depending on admin vs user action
Signed-off-by: Joas Schilling <coding@schilljs.com>
2022-03-11 11:19:18 +00:00
Mickey Knox
4910724803 Fix permittedPath comparison
Signed-off-by: Mickey Knox <mickey@netfreaks.org>
2022-03-08 10:17:55 +00:00
Simon L
36860214f8
Merge pull request #31438 from nextcloud/backport/31267/stable23
[stable23] Add Nextcloud docs link to OPcache recommends
2022-03-08 11:07:27 +01:00
Julien Veyssier
cb28da4386 allow adding protocol to domains in 'connectivity_check_domains' config
Signed-off-by: Julien Veyssier <eneiluj@posteo.net>
2022-03-07 15:32:33 +00:00
MichaIng
652a8d3d27 Add Nextcloud docs link to OPcache recommends
A link to the Nextcloud documentation is currently only shown when the OPcache module is not loaded at all. This commit moves the link to the generic text above the individual recommendations list.

Additionally remove the obsolete phpOpcacheDocumentation entry from test data arrays, which is not passed anymore by the backend.

Signed-off-by: MichaIng <micha@dietpi.com>
2022-03-06 16:10:22 +01:00
szaimen
c49a55eb08 show if the mail server settings are not set or verified
Signed-off-by: szaimen <szaimen@e.mail.de>
2022-02-15 22:56:47 +00:00
Arthur Schiwon
092819d89b
Setup warning for invalid LDAP user or group UUIDs.
Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
2022-02-10 17:46:51 +01:00
MichaIng
755381a4c2 Avoid zero division in setup checks
Fixes: https://github.com/nextcloud/server/issues/30532

Signed-off-by: MichaIng <micha@dietpi.com>
2022-01-11 12:42:02 +00:00
MichaIng
fd481913ef Enhance and complement OPcache setup checks
The current OPcache recommendations match the PHP defaults, but the values are much higher than required to run Nextcloud, even with a high number of installed apps. On the other hand, when other applications use the same OPcache instance, the recommended values might not be sufficient. Accurate recommendations need to take into account actual OPcache usage.

With this commit, recommendations are shown to raise the config value if more than 90% of max cache size or number of keys is used.

The checks whether the module is loaded and whether the OPcache is properly configured have been merged into a single function. This allowed to reduce the overhead of OPcache configuration checks when the module is not loaded.

A check has been added whether Nextcloud is permitted to use the OPcache API. Without this, inconsistencies during core or app upgrades may cause errors and OPcache usage cannot be determined for the new usage based checks.

OPcache usage based checks are skipped when Nextcloud is not permitted to use the API.

Signed-off-by: MichaIng <micha@dietpi.com>
2021-12-20 00:10:10 +00:00
Joas Schilling
19d070850b
Make sure trusted_proxies is an array
Signed-off-by: Joas Schilling <coding@schilljs.com>
2021-11-09 15:13:24 +01:00
Christopher Ng
50a6612c1f Refine profile backend for frontend visibility requirements
- Provide metadata
  - Dynamic displayId
  - Add appId
- Filter out unused parameter config properties from the existing profile config

Signed-off-by: Christopher Ng <chrng8@gmail.com>
2021-11-04 00:17:29 +00:00
Vitor Mattos
6f7ca3432c
show warning on personal settings page
Signed-off-by: Vitor Mattos <vitor@php.rio>
2021-10-23 00:54:51 +02:00
Vitor Mattos
e55ceb2bb1
Show warning on admin settings page
Signed-off-by: Vitor Mattos <vitor@php.rio>
2021-10-23 00:54:50 +02:00
John Molakvoæ
b2c32b7e6c
Merge pull request #27731 from ZitronePlus/master 2021-10-22 12:04:07 +02:00
John Molakvoæ
c98039c1df
Merge pull request #26725 from nextcloud/fix-federated-scope-not-shown-when-public-addressbook-upload-is-disabled 2021-10-22 11:52:56 +02:00
Julien Veyssier
0bef570fe9
Merge pull request #29256 from nextcloud/fix/noid/harmonize-appstoreenabled-check
Fix appstoreenabled check
2021-10-21 12:42:14 +02:00
Pytal
f7b3d521f8
Merge pull request #28751 from nextcloud/feat/28139/profile-page 2021-10-18 23:03:58 -07:00
Christopher Ng
309354852f Profile backend
Signed-off-by: Christopher Ng <chrng8@gmail.com>
2021-10-19 04:59:35 +00:00
Christoph Wurst
f432dd2e2e
Add scheduling availability settings
Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
2021-10-18 20:21:51 +02:00
Julien Veyssier
facb50ebcc
fix appstoreenabled check in Fetcher so it's coherent with AppSettingsController
Signed-off-by: Julien Veyssier <eneiluj@posteo.net>
2021-10-18 12:39:43 +02:00
Christoph Wurst
4b8f8c5203
Deprecate PHP7.3 for Nextcloud 23
* 7.3 reaches EOL shortly after the release of 23.0.0
* Nextcloud 24 will require PHP7.4

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
2021-10-18 09:15:54 +02:00
Bjoern Schiessle
664bd5802f add 'supported'-label to all supported apps, also if they are not downloaded yet
Signed-off-by: Bjoern Schiessle <bjoern@schiessle.org>
2021-10-06 22:17:50 +02:00
Joas Schilling
0dae8805c2
Improve icon and section title of "Admin privileges"
Signed-off-by: Joas Schilling <coding@schilljs.com>
Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>
2021-10-06 19:13:16 +02:00
Carl Schwan
6958d8005a
Add admin privilege delegation for admin settings
This makes it possible for selected groups to access some settings
pages.

Signed-off-by: Carl Schwan <carl@carlschwan.eu>
2021-09-29 21:43:31 +02:00
szaimen
d253d52007
Merge pull request #28837 from nextcloud/show-warning-if-sharing-app-disabled
Show warning on the share settings when the File Shares app is disabled
2021-09-20 12:11:42 +02:00
szaimen
3eb1d23720
Merge pull request #28838 from stefan-schilling/enh/16719-integrity-check-temp-dir
Issue 16719: CheckSetupController.php now checks configured temporary directory for existence and if it's writable
2021-09-17 18:19:22 +02:00
Stefan
eb46011680 Issue 16719: CheckSetupController.php: now injecting reference to ITempManager, rather than obtaining using it manually
Signed-off-by: Stefan <Stefan.Schilling@EXXETA.com>
2021-09-17 13:32:42 +02:00
Stefan
8758b36ebb Issue 16719: CheckSetupController.php now checks configured temporary directory for existence and if it's writable
Signed-off-by: Stefan <Stefan.Schilling@EXXETA.com>
2021-09-17 13:32:42 +02:00