d8859757d9
[tx] updated from transifex
2025-11-06 00:02:59 +00:00
8a7d51ca88
Apply typo fixes from code review
...
Co-authored-by: Michael Barz <michael.barz@zeitgestalten.eu >
2025-11-04 16:45:08 +01:00
a2f9cadd9f
feat(collaboration): Set IsAnonymousUser flag for Collabora
...
Closes : #796
2025-11-04 16:45:08 +01:00
30ef495c92
feat(collaboration): Set IsAdminUser property for Collabora
...
This set the 'IsAdminUser' Property correctly in the CheckFileInfo
Response. For that a new Permission 'WebOffice.Manage' is introduced. By
default this permission is only assigned to the Admin role.
User with this permission get access to certain admin features in
Collabora (e.g. the 'Server Audit' dashboard)
Closes : #796
2025-11-04 16:45:08 +01:00
37609e52df
feat!: Make the url signing secret a mandatory config option
...
This is required for allowing the web office to download images to
insert into documents.
The secret is generated by `opencloud init` and the server refuses
to start now without a secret being set. (Breaking Change)
Also the setting is now moved to the shared options as all involved
services need the same secret to work properly.
Related: https://github.com/opencloud-eu/web/issues/704
2025-11-04 16:01:00 +01:00
589cee4ab3
collaboration: Enable InsertRemoteImage option
...
Related: https://github.com/opencloud-eu/web/issues/704
2025-11-04 16:01:00 +01:00
c05c740fa6
bump web 4.2.0 ( #1765 )
2025-11-03 15:55:36 +01:00
790c6b165f
[tx] updated from transifex
2025-11-02 00:03:10 +00:00
a2935abe3d
[tx] updated from transifex
2025-11-01 00:02:51 +00:00
e270cdbfd2
[tx] updated from transifex
2025-10-29 00:03:02 +00:00
e2441696c2
graph(education): 'primaryRole' and 'identities' should be optional
...
Related: #1597
2025-10-28 12:56:42 +01:00
28ec9c3282
graph(education): Make 'schoolNumber' attribute optional
...
It's already optional in the spec. For mulit-tenant provisioning
we want it to be optional as well.
Related: #1597
2025-10-28 12:56:42 +01:00
920a6916c4
fix: only search LDAP group by name
2025-10-28 10:22:54 +01:00
e7a4cbaae5
fix: fix #1698 - Notification email doesn't contain Message-ID header
2025-10-27 18:56:37 +01:00
c887947a85
[tx] updated from transifex
2025-10-27 00:01:43 +00:00
ac8be264f0
[tx] updated from transifex
2025-10-26 00:01:09 +00:00
6e4e533e2c
[tx] updated from transifex
2025-10-23 00:01:41 +00:00
f12a433b85
chore: add groupware capabilities ( #1661 )
2025-10-21 22:31:45 +02:00
3874c3e0d3
[tx] updated from transifex
2025-10-20 00:02:20 +00:00
254f999382
[tx] updated from transifex
2025-10-16 08:04:58 +00:00
b099dcdf6e
fix: 'readyz' enpdoint check only required service
...
The readyz endpoint contained unconditional checks for the LDAP and nats
endpoints. Depending on configuration neihter LDAP nor NATS might be
required.
2025-10-14 16:49:46 +02:00
d1a6cc22c1
graph: Allow the service to run without a NatsJS server
...
For running the Graph Education API we want to keep it possible
to run the service standalone. With an LDAP server as the only
external dependency.
2025-10-14 16:49:46 +02:00
6c387336e1
chore/bump-web-4.1.0 ( #1652 )
...
CI shows a false failure. merge it
2025-10-13 16:09:44 +02:00
d080d7415e
[tx] updated from transifex
2025-10-13 00:01:42 +00:00
4b2e6e4695
[tx] updated from transifex
2025-10-12 00:01:38 +00:00
e9a2ba8afc
fix(settings): env var precedence
...
Fix the ordering of the env vars for the 'set_default_assignments'
setting. The service specific variable ('SETTINGS_SETUP_DEFAULT_ASSIGNMENTS')
should take precedence over other variable ('IDM_CREATE_DEMO_USERS' in
this case).
2025-10-08 18:06:35 +02:00
c0244fc977
enhancement(graph): resolve review feedback such as, use fmt for error wrapping, make use of store auth options, use a dedicated jetstream package
2025-10-08 16:45:16 +02:00
2ca88e66da
add mocks for natskv
...
Signed-off-by: Christian Richter <c.richter@opencloud.eu >
2025-10-08 16:45:16 +02:00
bcafd97e31
Catch bucket not found error
...
Co-authored-by: Jörn Dreyer <jfd@butonic.de >
Signed-off-by: Christian Richter <c.richter@opencloud.eu >
2025-10-08 16:45:16 +02:00
351f4e6be2
Mock nats & adapt tests
...
Co-authored-by: Florian Schade <f.schade@opencloud.eu >
Signed-off-by: Christian Richter <c.richter@opencloud.eu >
2025-10-08 16:45:16 +02:00
5225b66f65
Move keyvalue initialisation to options
...
Co-authored-by: Florian Schade <f.schade@opencloud.eu >
Signed-off-by: Christian Richter <c.richter@opencloud.eu >
2025-10-08 16:45:16 +02:00
098ed082c8
attempt to fix broken soft delete
...
Signed-off-by: Christian Richter <c.richter@opencloud.eu >
2025-10-08 16:45:16 +02:00
813edc4a59
use standard errors package
...
Signed-off-by: Christian Richter <c.richter@opencloud.eu >
2025-10-08 16:45:16 +02:00
f7454e576a
remove obsolete properties
...
Signed-off-by: Christian Richter <c.richter@opencloud.eu >
2025-10-08 16:45:16 +02:00
800c7bc863
revert faulty replaces
...
Signed-off-by: Christian Richter <c.richter@opencloud.eu >
2025-10-08 16:45:16 +02:00
ef920b040a
add missing pointer
...
Signed-off-by: Christian Richter <c.richter@opencloud.eu >
2025-10-08 16:45:16 +02:00
b815a6e0a1
respect ldap settings, add comments
...
Signed-off-by: Christian Richter <c.richter@opencloud.eu >
2025-10-08 16:45:16 +02:00
cd295dfd9e
add persistance function & userstate
...
Signed-off-by: Christian Richter <c.richter@opencloud.eu >
2025-10-08 16:45:16 +02:00
07a9308c4c
add nats-js-kv connection to graph
...
Signed-off-by: Christian Richter <c.richter@opencloud.eu >
# Conflicts:
# services/graph/pkg/service/v0/service.go
2025-10-08 16:45:16 +02:00
63f976cac1
add nats-js-kv persistance to graph
...
Signed-off-by: Christian Richter <c.richter@opencloud.eu >
2025-10-08 16:45:16 +02:00
38b1a0feb0
[tx] updated from transifex
2025-10-07 00:01:20 +00:00
f096285769
feat(groups): Only allow the "null" driver for multi-tenant setups
2025-10-06 11:21:57 +02:00
736fb9db1f
fix: make storage system user a service account
...
The reva auth-middleware blocks users without a tenant id, expect
system users.
2025-10-06 11:21:57 +02:00
7b5c59e827
feat(reva): Pass the multi-tenancy flag to reva services
...
This allows to pass the multi-tenant enablement flag as a shared config
option to the reva service. This needs to be done for all reva services
since it ends up in a global variable in reva that is only initialized
once, by the service that is the first to parse its config.
See https://github.com/opencloud-eu/opencloud/issues/1563 for details.
2025-10-06 11:21:57 +02:00
8cea8c8cfd
feat(proxy): account_resolver multi-tenancy
...
Make the account resolve reject users without a tenantid, when
multi-tenancy is enabled.
2025-10-06 11:21:57 +02:00
b1c50ea5a0
feat(graph): validate identity backend value
2025-10-06 11:21:57 +02:00
7e86d85d62
feat: Add a global flag to enable multi-tenant support
...
When enabled the graph service refuses to start with the "ldap" backend.
Additional enforcements will follow in subsequent commits.
2025-10-06 11:21:57 +02:00
bbf30b5802
[tx] updated from transifex
2025-10-05 00:02:32 +00:00
4e06b0c376
[tx] updated from transifex
2025-10-02 00:02:45 +00:00
3b27d8f580
change: use 404 as status when thumbnail can not be fetched ( #1582 )
2025-09-30 20:40:31 +02:00
opencloudeu