7.2.0

Table of Contents

• Changelog for 7.2.0

Changes in 7.2.0

Summary

• Bugfix - Fix the OCM role editor: #11071
• Bugfix - Fix the SpaceMembershipExpired event: #11078
• Bugfix - Fix the OCM role file editor: #11093
• Bugfix - Fix the parent-id for the share-jail root: #11101
• Bugfix - Adjust the capabilities according to full text search config: #11111
• Bugfix - Fix app-auth: #11123
• Bugfix - Fix the SpaceMembershipExpired duplicate event: #11127
• Bugfix - Fix migrate rebuild-jsoncs3-indexes cli: #11145
• Bugfix - OCM Share Notifications: #11162
• Bugfix - Fix pdf form creation: #11163
• Bugfix - Fix app-auth, REST status code: #11190
• Bugfix - Fix error on listing space members: #11245
• Bugfix - Fix the graceful shutdown: #11295
• Bugfix - Fix the reva log interceptor: #11348
• Bugfix - Fix panic while traversing the service list: #11390
• Bugfix - Fix the OCM role editor: #11484
• Bugfix - Fix storage-users cli: #11490
• Bugfix - Clean up unified roles label: #11494
• Change - Remove deprecated FRONTEND_OCS_*: #11333
• Change - Remove deprecated CLIENTLOG_REVA_GATEWAY: #11372
• Enhancement - Update Mockery to 2.52.3: #11070
• Enhancement - Improve postprocessing logs: #11108
• Enhancement - Improve graph space management logs: #11115
• Enhancement - Delete notification by ID: #11203
• Enhancement - CLI, storage-users uploads delete-stale-nodes: #11216
• Enhancement - Allow setting driveid through graph API: #11256
• Enhancement - More secure Microsoft 365 collaboration: #11276
• Enhancement - Claim managed spaces: #11280
• Enhancement - Bump Reva: #11283
• Enhancement - Update ocis_full deployment example images: #11319
• Enhancement - Bump Web to 11.3.2: #11330
• Enhancement - Add capability for server managed spaces: #11332
• Enhancement - Harden office deployment process: #11339
• Enhancement - Add SpaceEditorWithoutTrashbin Role: #11391
• Enhancement - Improve cookies security: #11413
• Enhancement - Bump Web to 12.0.0: #11420
• Enhancement - Bump Web to 12.0.1: #11420
• Enhancement - Remove deprecated envvars: #11430
• Enhancement - Update Bleve to v2.5.2: #11441
• Enhancement - Bump Web to 12.0.2: #11444

Details

• Bugfix - Fix the OCM role editor: #11071

  Fix the OCM role editor permission set. The redundant permissions have been
  removed.

  #11054
  #11071

• Bugfix - Fix the SpaceMembershipExpired event: #11078

  We fixed the SpaceMembershipExpired event emitting.

  #10882
  #11078

• Bugfix - Fix the OCM role file editor: #11093

  Fix the OCM role file editor permission set. The redundant permissions have been
  removed.

  #11054
  #11093

• Bugfix - Fix the parent-id for the share-jail root: #11101

  Fix the parent-id for the share-jail root.

  #10917
  #11101

• Bugfix - Adjust the capabilities according to full text search config: #11111

  Adjust the capabilities according to full text search configurations.

  #11059
  #11111

• Bugfix - Fix app-auth: #11123

  Allow the app-auth announce www-authenticate: basic header.

  #11113
  #11123

• Bugfix - Fix the SpaceMembershipExpired duplicate event: #11127

  We fixed the SpaceMembershipExpired event duplication issue.

  #10966
  #11127

• Bugfix - Fix migrate rebuild-jsoncs3-indexes cli: #11145

  Fix migrate rebuild-jsoncs3-indexes cli

  #11145
  #11145

• Bugfix - OCM Share Notifications: #11162

  Fix no OCM sharing notifications, now share and unshare notifications are
  created

  #11042
  #11162

• Bugfix - Fix pdf form creation: #11163

  Fix pdf form creation for Onlyoffice. Adjust the file extension for Form to be
  PDF instead of DOCXF

  #11164
  #11163

• Bugfix - Fix app-auth, REST status code: #11190

  Now app-auth REST returns status code 404 when creating token for non-existent
  user (Impersonation)

  #10815
  #11190

• Bugfix - Fix error on listing space members: #11245

  Now the members list will still show grantees even with there is any invalid
  share after the upgrade.

  #11119
  #11245

• Bugfix - Fix the graceful shutdown: #11295

  Fix the graceful shutdown using the new ocis and reva runners.

  #11170
  #11295

• Bugfix - Fix the reva log interceptor: #11348

  Fix the reva log interceptor. Implemented the Unwrap interface to allow TUS
  middleware to handle correctly SetReadDeadline and SetWriteDeadline functions
  and to avoid the error during the upload.

  #10857
  #11348

• Bugfix - Fix panic while traversing the service list: #11390

  Fix the panic while traversing the service list

  #11377
  #11390

• Bugfix - Fix the OCM role editor: #11484

  Fix the issue when the watermark is visible to user with a viewer role in
  Collabora

  #11474
  #11484

• Bugfix - Fix storage-users cli: #11490

  Fix storage-users uploads --resume command.

  #11290
  #11490

• Bugfix - Clean up unified roles label: #11494

  Clean up the unified roles label

  #11470
  #11254
  #10082
  #11494

• Change - Remove deprecated FRONTEND_OCS_*: #11333

  Deprecated FRONTEND_OCS_* environment variable was removed from config.

  #11314
  #11333

• Change - Remove deprecated CLIENTLOG_REVA_GATEWAY: #11372

  Deprecated CLIENTLOG_REVA_GATEWAY environment variable was removed from config.

  #11314
  #11372

• Enhancement - Update Mockery to 2.52.3: #11070

  Without updating ocis will not build on go 1.24. This requires also updating the
  go version to 1.24

  #11070

• Enhancement - Improve postprocessing logs: #11108

  Improve postprocessing logs to easily trace successful and failing uploads/

  #10998
  #11108

• Enhancement - Improve graph space management logs: #11115

  Improve graph space management logs to help troubleshooting user operations

  #10989
  #11115

• Enhancement - Delete notification by ID: #11203

  It is now possible to delete a single notification by ID: DELETE
  /ocs/v2.php/apps/notifications/api/v1/notifications/:id

  owncloud/enterprise#6307
  #11203

• Enhancement - CLI, storage-users uploads delete-stale-nodes: #11216

  An oCIS command that deletes stale nodes: in processing state wihout connected
  upload info.

  owncloud/enterprise#7178
  #11216

• Enhancement - Allow setting driveid through graph API: #11256

  Allow setting the id through the graph API. This should always be a uuid to
  avoid clashes, but this is the responsibility of the API user.

  #11256

• Enhancement - More secure Microsoft 365 collaboration: #11276

  Security update to WOPI protocol token handling

  #11276

• Enhancement - Claim managed spaces: #11280

  Allow managing spaces from oidc claims

  #11280
  #11291

• Enhancement - Bump Reva: #11283

  Bumps reva version

  #11283

• Enhancement - Update ocis_full deployment example images: #11319

  The ocis_full deployment example got updated images. Additionally a fix has been
  implemented for collabora.yml to be compliant with new releases.

  #11319

• Enhancement - Bump Web to 11.3.2: #11330

  • Bugfix owncloud/web#12460: Add
    missing dependencies to markdown editor - Bugfix
    owncloud/web#12460: Hide image
    upload in markdown editor - Bugfix
    owncloud/web#12460: Hide save in
    markdown editor

  #11330
  https://github.com/owncloud/web/releases/tag/v11.3.2

• Enhancement - Add capability for server managed spaces: #11332

  Adds the capability for server managed spaces, which will deactivate
  adding/removing users to/from spaces in the web UI.

  #11332

• Enhancement - Harden office deployment process: #11339

  Office deployment will use proof keys by default to ensure requests to the
  collaboration service come from a trusted source. In addition, OnlyOffice will
  use ip filters to ensure requests come from the collaboration service (with the
  exception of the editor). Lastly, the collaboration service won't be exposed to
  the outside and will remain in the docker network.

  #11339

• Enhancement - Add SpaceEditorWithoutTrashbin Role: #11391

  Added a new built-in role: SpaceEditorWithoutTrashbin. This role is a subset
  of the SpaceEditor role, but it does not have list/restore resources in
  trashbin permissions.

  #11206
  #11391

• Enhancement - Improve cookies security: #11413

  Cookies now have securtiy flags set that remove angle for attacks like CSRF,
  MITM, XSS.

  #11413

• Enhancement - Bump Web to 12.0.0: #11420

  • Bugfix owncloud/web#11960:
    Preview app flat file lists - Bugfix
    owncloud/web#11967: Show progress
    bar when emptying trash bin - Bugfix
    owncloud/web#12059: Reload
    preloaded resource in sidebar - Bugfix
    owncloud/web#12101: Missing User
    Light translations - Bugfix
    owncloud/web#12207: Preserve
    current page when opening a file - Bugfix
    owncloud/web#12227: Make password
    protected folder tile clickable - Bugfix
    owncloud/web#12228: Allow email
    address as user name in the user creation form - Bugfix
    owncloud/web#12236: Sorting arrow
    misplaced - Bugfix
    owncloud/web#12265: Disable
    cutting and pasting into the same folder - Bugfix
    owncloud/web#12266: Generate
    public link password on click - Bugfix
    owncloud/web#12328: Disallow user
    from inviting themselves - Bugfix
    owncloud/web#12329: Delete .psec
    file - Bugfix owncloud/web#12336:
    Handle shares loading error - Bugfix
    owncloud/web#12339: Add domain to
    distinguish between external users - Bugfix
    owncloud/web#12351: Fix sorting in
    spaces view that may crash the application - Bugfix
    owncloud/web#12356: Show path
    tooltip on parent folder - Bugfix
    owncloud/web#12357: Handle changed
    public link password in file editors - Bugfix
    owncloud/web#12368: Space context
    menu is cropped with limited vertical screen space - Bugfix
    owncloud/web#12373: Add space not
    found message - Bugfix
    owncloud/web#12377: Mock services
    correctly in test file - Bugfix
    owncloud/web#12385: Use resource
    ID in share notifications - Bugfix
    owncloud/web#12385: Watch scroll
    target in shared list - Bugfix
    owncloud/web#12406: Download
    archives directly - Bugfix
    owncloud/web#12406: Request
    archive as blob - Bugfix
    owncloud/web#12478: Fix wrong HTML
    lang attribute - Bugfix
    owncloud/web#12482: Delete
    resource throws unknown error - Bugfix
    owncloud/web#12487: Application
    language and browser language do not match - Bugfix
    owncloud/web#12606: Access correct
    key when loading favorites - Bugfix
    owncloud/web#12607: Load ancestor
    space only when parent id is returned - Bugfix
    owncloud/web#12608: Do not crash
    when tus is unsupported - Bugfix
    owncloud/web#12628: Use
    capabilities store in preview service - Bugfix
    owncloud/web#12646: Add missing
    label to rename button - Change
    owncloud/web#12567: Remove CERN's
    collapsible table - Change
    owncloud/web#12686: Remove
    deprecated applicationMenu - Change
    owncloud/web#12686: Remove
    deprecated ApplicationQuickAction - Change
    owncloud/web#12686: Remove
    deprecated client init method - Change
    owncloud/web#12686: Remove
    deprecated isFileEditor - Change
    owncloud/web#12686: Remove
    deprecated ocsUserContext and ocsPublicLinkContext - Change
    owncloud/web#12686: Remove
    deprecated type prop - Enhancement
    owncloud/web#5379: Accessibility
    improvements - Enhancement
    owncloud/web#11849: Create spaces
    via admin settings - Enhancement
    owncloud/web#12110: Hide active
    editor action - Enhancement
    owncloud/web#12239: Add
    maintenance banner - Enhancement
    owncloud/web#12243: Add new
    supported language to md-editor - Enhancement
    owncloud/web#12355: Rephrase
    invite users to invite users to federate - Enhancement
    owncloud/web#12424: Use custom
    password generator - Enhancement
    owncloud/web#12488: Add OCM
    explanatory tooltips - Enhancement
    owncloud/web#12508: Add duplicate
    action - Enhancement
    owncloud/web#12509: Add flat list
    view - Enhancement
    owncloud/web#12513: Add loading
    spinner to submit button - Enhancement
    owncloud/web#12519: Improve file
    drop view UI - Enhancement
    owncloud/web#12578: Add Catalan to
    list of supported languages - Enhancement
    owncloud/web#12584: Disable space
    membership management when it's server-managed - Enhancement
    owncloud/web#12648: Add login
    error

  #11420
  https://github.com/owncloud/web/releases/tag/v12.0.0

• Enhancement - Bump Web to 12.0.1: #11420

  • Bugfix owncloud/web#12697: Md
    Text Html Preview Text gets Clipped

  #11420
  https://github.com/owncloud/web/releases/tag/v12.0.1

• Enhancement - Remove deprecated envvars: #11430

  Remove envvars that where deprecated on previous versions

  #11430

• Enhancement - Update Bleve to v2.5.2: #11441

  Updated blevesearch dependency with minor improvements to the search quality.

  #11441

• Enhancement - Bump Web to 12.0.2: #11444

  • Bugfix owncloud/web#12575:
    Ensure uniform distribution when generating password

  #11444
  https://github.com/owncloud/web/releases/tag/v12.0.2