10.0.9RC Changelog Testing

[phil-davis]

Changelog for 10.0.9. Summary

Summary of the complete Changelog: https://github.com/owncloud/core/blob/stable10/CHANGELOG.md

This summary has a QA purpose.

Make sure to refresh the page before editing, and keep the edit window open for a short a time as possible.

Added

• occ user:list now takes a list of attributes to display - #31115 @phil-davis
• Added Symfony events for user preference changes - #31266 @phil-davis - unit tests pass, debugger tests done in PR, no further QA test.
• Added Symfony events for public links shared by email - #31632 tested by unit tests @davitol
• Added Symfony events for accept and reject for local shares - #31702 @davitol
• Added support for Imprint and Privacy Policy URLs in web UI and email footers - #31666 #31699 #31730 #31766 @davitol
• Added HTML template for lost password email - #31144 @davitol
• Received local shares can now trigger a notification to accept or reject them, also visible in "Shared with you" section - #31613 @davitol
• Rejected shares can now be accepted again in the "Shared with you" section - [[stable10] Accept user share stable10 #31613] ([stable10] Accept user share stable10 #31613) @davitol
• Provide original exception via logging events - #31623 @phil-davis - tested by unit tests
• Share autocomplete now displays useful tooltip when typing less characters - #31729 @phil-davis
• Added public Webdav API for versions using a new "meta" DAV endpoint - #31729 #29637 @phil-davis - acceptance tests exist
• Added support for retrieving file previews using Webdav endpoint - #29319 #30192 Note: Thumbnail not regenerated as file changes #31849 @phil-davis
• Added versioning support for primary object store - #29607 #31285 #31595 @davitol

[phil-davis]

Changed

• Updated ca-bundle.crt - #31734 @phil-davis - from unpacked release tarball open resources/config/ca-bundle.crt - it opens in a certificate viewer app, parses as valid, shows the new certificates added in the PR.
• Removed example theme which now lives in the theme-example repository - #31447 @davitol
• A user who is a member of multiple groups is now excluded from sharing if at least one of their group is configured for exclusion - #31737 @phil-davis
• Changed back default minimum search characters to 2 for share autocomplete due to confusion - #31729 @phil-davis
• Files app UI now uses new versions API through the "meta" DAV endpoint @phil-davis - when using versions in webUI I can see server accesses like /remote.php/dav/meta/2147563785/v

Library updates

• Bump symfony to 3.4.8 and other pending minor bumps - #31221
• Bump karma from 2.0.0 to 2.0.2 in /build - #31253
• Bump karma-jasmine from 1.1.1 to 1.1.2 in /build - #31378
• Bump karma-coverage from 1.1.1 to 1.1.2 in /build - #31380
• Bump zendframework/zend-inputfilter from 2.8.1 to 2.8.2 - #31431
• Bump icewind/smb from 1.1.0 to 3.0.0 in /apps/files_external/3rdparty - #31521
• Bump symfony 3.4.9 to 3.4.11 - #31571
• Update jsdoc requirement to ~3.5.5 - #30036

[phil-davis]

Removed

• Removed old private ajax API for previews, deprecated by DAV endpoint support - #30254 @phil-davis - testing of various preview features all still works, so it must not be using this removed API endpoint any longer

[phil-davis]

Fixed

• Fixed restoring of versions for single file shares - #31681 @phil-davis
• Group admins are not able to create groups any more using provisioning API - #31738 @phil-davis
• Fix Oracle for queries using ILIKE operator - #31466
• Improve user-sync command help description - #31691 - and the change is in current doc also @phil-davis
• Fix deletion and restoration of files in trashbin in some partial selection scenarios - #31700 @phil-davis
• Do not load the code of disabled theme apps - #31478 @davitol
• Fix encrypt-all and decrypt-all commands to keep shares when encrypting - #31600 #31590 @davitol
• Proceed with encrypt-all command by enabling user-keys if no mode is selected by user - #31612 @davitol
• Validate maximum length of a username - #31664 @phil-davis - works in both UI and provisioning API
• Save timezone as given during login - #31493 @phil-davis
• Fix checksum computation to not apply on read-write streams to avoid potential mismatch results - #31619 @phil-davis checksums.feature acceptance tests confirm that regular scenarios have not been broken
• Exclude uploads directory from read-only cache mask, fixes guest app chunked uploads - #31596 @phil-davis guest acceptance tests added in Test for chunking upload  guests#212 confirm this is good
• Properly normalize paths for event, no &$magic needed - #31689 @phil-davis this is a general log output file path cleaner. Not seeing any double-slash in logs.
• Use the correct user id in login related Symfony events - #31605 @phil-davis - event data is checked by unit tests
• Fix public link dialog issue when collaborative tags app is disabled - #31581 @davitol
• ❌ Fix updating public link share in transfer ownership command - #31176 @davitol FIXED
• Do not set the password again if it hasn't changed - #31370 @davitol
• Use correct l10n to translate 'password was changed' email - #31553 @davitol
• Improve text in settings/personal App Password - #31539 @phil-davis
• Fix default language code example - #31448 @phil-davis change to example only, no run-time code
• Fix double slash in versioning file copy events - #31452 @phil-davis
• Split public password enforced capabilities based on a config - #31499 - covered by capabilities.feature acceptance tests
• Fix bogus exceptions related to missing DAV nodes after deletion - #31479 @phil-davis - 'Could not get node for path' messages gone from log file
• Fix enabling of users by group admins in the web UI - #31489 @phil-davis
• Fix AccountMapper to return an object or throw an exception - #31445 @phil-davis this is an error-exception processing code path change. Commands that deal with UIDs are still working/logging OK when given a non-existent UID
• Proper handling of exceptions in UserManager - #31446 @phil-davis as above
• Properly cache non-existing user in UserManager - #31446 @phil-davis as above
• Update verify checksums console output to flow more naturally - #31449 @phil-davis
• Subadmin shouldn't be able to add users to their groups via API - #31337 @phil-davis
• Catch duplicate inserts in token table - #31460 @phil-davis login etc works with debug level set and messages going to log
• Fix overflowing public share names in the share panel - #31369 @phil-davis
• Fix occ user:sync to sync quota from preferences after upgrade if backend provided no quota - #31360 @phil-daavis fix waas confirmed in PR also try syncing quote from preferences if backend provided no quota #31359 (review)
• Fix for Redis dev editions - #31282 @phil-davis - was tested by PR submitter on system with Redis dev version. Not causing warnings on Admin General Settings panel with ordinary install.
• Fix mail debug message recipient field - #31227 @phil-davis
• Prevent infinite loop in case of error in "log" event handler - #31247 @phil-davis - requires coding an event with an error, not production testable (easily). dev tested here [stable10] Don't reset inEvent while skipping events #31247 (comment)
• Fix HTTP status code when uploading virus-infected files - #31260 @phil-davis - files_antivirus acceptance tests confirm that this is fixed
• Add back robots.txt in the release - #31248 @phil-davis - robots.txt is in unpacked tarball
• [stable10] Properly detect thumbnail availability in PreviewPlugin [stable10] Properly detect thumbnail availability in PreviewPlugin #31788 @davitol

[phil-davis]

@davitol I volunteered myself for some PRs that I am already familiar with, but I did not do. That will get me started. You do the same. Then as we get them done, we can put our names against more, or look for other "volunteers" if needed.

[phil-davis]

10.0.9RC2 Items

• Added account module middleware to be able to plug in logic after authentication - #31883 @phil-davis no auth regressions found. (to test by smoke-test of password-policy with 10.0.9RC3)
• Received local shares can now trigger a notification to accept or reject them, also visible in "Shared with you" section - extra changes from issue #31886 @phil-davis Note: the exact format of the notification messages is changed again by [stable10] Adjustments for the notifications messages of the sharing apps #31947 (see RC3 section)
• - Added public Webdav API for versions using a new "meta" DAV endpoint - added PR #31805 PR #31801 @phil-davis
• - Added support for retrieving file previews using Webdav endpoint - added issues #31748 #31788 #31862 #31865 @phil-davis [stable10] Exceptions need to properly be handled in the preview plugin #31748 tested by firewall acceptance tests passing, [stable10] Properly detect thumbnail availability in PreviewPlugin #31788 tested with local storage as per Disable 'Enable previews' option do not stop showing the thumbnails for an external storage mountpoint #31763 (comment) , [stable10] Fixes #31849 - delete thumbnails on write hooks #31865 tested with procedure in Thumbnail not regenerated as file changes #31849
• A user who is a member of multiple groups is now excluded from sharing if at least one of their group is configured for exclusion - added #31822 @phil-davis - code change is to never-called code, so no test. Code awaits removal in stablee10 [stable10] Add can_share to capabilities #31824
• Bookmarks certificate was removed - #31878 @phil-davis updated intermediate.crl.pem content is in released tarball
• Work around Edge browser memory leak in web UI chunked upload - #31884 - memory use in Edge (HTML 17) and IE11 ddoes not grow constantly during large file upload
• Don't fail if ISqlMigration doesn't return anything - #31779 @phil-davis
• Catch duplicate inserts in token table - added #31794 @phil-davis - removal of excess logging only

10.0.9RC3 Items

• Added account module middleware to be able to plug in logic after authentication -added #31933 @phil-davis (to test by smoke-test of password-policy with 10.0.9RC3)
• Adjustments for the notifications messages of the sharing apps - #31947 @phil-davis
• Disable jquery globalEval - #31972 @phil-davis examined js/js code in Firefox debugger on login page and when logged in
• Fix updating public link share in transfer ownership command - added #31953 @phil-davis test steps from Lost share when transferring files to recipient #31150 (comment)

[phil-davis]

Password policy testing overview:

• enable password policy, change policy parameters for min length, min uppercase, min lowercase, min numbers, min special chars and the actual special chars. Check that relevant error messages are returned when trying to change password from webUI, occ commands and user provisioning API. PR Tidy password messages password_policy#21 tidied the messages
• setup user_ldap. Confirm that LDAP users do not get password expiry, but that ordinary users do.
• try to change other user's passwords as admin. Confirm that normal users get their password changed and get a password change recorded from which password expiry ticks. Confirm that LDAP user passwords cannot be changed (and so they never get password history, and so never get expired). PR Do not allow passwords to be expired for non-local users password_policy#31 prevents occ command from expiring LDAP user passwords.
• install and enable one-time password TOTP. Check it works along with password policies and expiry. Problem found with interaction between OTP and password expired flow in webUI see issue Redirect problem with password expiry plus TOTP password_policy#32
• create app passwords. Confirm that they work across ordinary password change and expiry. Seems to be some issue with app passwords not working correctly after the ordinary password has expired - issue App password not working after expired password change password_policy#33
• check password expiry for new users that never change their password - When "force change on first login" is not set, user password never expires password_policy#25 and fix in PR Create a new entry in user_password_history when a new user is created password_policy#34

Nothing here requires a core change, so no need to hold 10.0.9

[davitol]

❌ Fix updating public link share in transfer ownership command - #31176 @davitol FIXED

Retested in RC3 and it is fixed

[lock]

This thread has been automatically locked since there has not been any recent activity after it was closed. Please open a new issue for related bugs.