da495fd306
graph/sharing: Fix role condition for space roots
...
When computing the allowed roles for a spaceroot use the correct conditions.
Spaceroots require '@Subject.objectId Any_of @Resource.owners'.
Note: Updating or deleting the permissions on a spaceroot via
'v1beta1/drives/{driveid}/items/{itemid}/permissions/{permissionid}' does still
not work.
2024-01-24 17:03:00 +01:00
d9fc4af575
graph/sharing: Add check for role conditions
...
Use the condition from the unifiedrole to check if the requested role
is actually applicable to the selected resource.
Fixes : #8131
2024-01-24 17:03:00 +01:00
f38f940d22
graph/sharing: Fix role conditions for Space specific sharing roles
...
Co-Owner and Manager are space specific roles. They need the UnifiedRoleConditionOwner.
2024-01-24 17:03:00 +01:00
ccfb9101de
it is called traceProvider ( #8280 )
...
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de >
2024-01-24 16:34:58 +01:00
cec6ea50eb
remove unused stat cache
...
Signed-off-by: jkoberg <jkoberg@owncloud.com >
2024-01-24 10:39:32 +01:00
8e613bbe7a
fix store ttl
...
Signed-off-by: jkoberg <jkoberg@owncloud.com >
2024-01-24 10:39:32 +01:00
13bb2785d4
fix cache authentication
...
Signed-off-by: jkoberg <jkoberg@owncloud.com >
2024-01-24 10:39:30 +01:00
10628f399d
fix events authentication
...
Signed-off-by: jkoberg <jkoberg@owncloud.com >
2024-01-24 10:39:09 +01:00
e5d910aceb
[tx] updated from transifex
2024-01-24 00:44:59 +00:00
f3ed318d9d
graph/drives: Fix status code for PATCH/DELETE on drives don't allow them
...
Return a 405 Status when UpdateSpace() or DeleteSpace() are not implemented
in the backend for a certain type of drive (e.g. the virtual mountpoint drives
created for shares).
Fixes : #7881
2024-01-22 14:04:38 +01:00
60a67d7b0a
Fix proxy debug env name
2024-01-19 10:29:33 +01:00
9aebca17f0
Merge pull request #7893 from owncloud/fix-policies-jwt-config
...
remove jwt config from policies after #7672
2024-01-19 09:03:45 +01:00
0e1b5dd989
graph/sharedWitMe: fix response for shares from project space
...
Resources on project space do not have a real owner assigned. A special
of the type USER_TYPE_SPACE_OWNER is returned as the owner. This type of
user can't be looked up via a GetUser request. So we skip that call for
this usertype.
This also fixes the behavior of 'sharedWithMe' for case when the owner
or creator of a share or shared resource can't be looked up in the 'users'
service. Previously cause the complete request to fail with an error message.
So a single share with an unresolvable owner caused 'sharedWithMe' to fail.
Now we log a warning but return all shares. Those where the owner or creator
couldn't be resolved will have the 'displayName' field of the user in the
'remoteItem.shared.owner' or 'remoteItem.shared.sharedBy' property left
empty.
Fixes : #8215
Fixes : #8027
2024-01-19 09:01:33 +01:00
e1c74f338f
[tx] updated from transifex
2024-01-19 00:48:40 +00:00
fb4213e75f
remove jwt config from policies after #7672
2024-01-18 15:38:11 +01:00
348ad20b32
[tx] updated from transifex
2024-01-18 00:49:12 +00:00
f56cf085a7
Merge pull request #8230 from kobergj/FixSearchPanic
...
Cleanup `search.go`
2024-01-17 14:40:31 +01:00
b8b0d0b533
cleanup search/.../search.go
...
Signed-off-by: jkoberg <jkoberg@owncloud.com >
2024-01-17 13:30:08 +01:00
a4d71134f5
remove unused parameter
...
Signed-off-by: jkoberg <jkoberg@owncloud.com >
2024-01-17 13:21:28 +01:00
386e37cbdc
cleanup graph/.../driveitems.go
...
Signed-off-by: jkoberg <jkoberg@owncloud.com >
2024-01-17 11:58:56 +01:00
19d6be934b
Merge pull request #8152 from 2403905/issue-7916-rework
...
rework disabling the password policy
2024-01-17 09:09:56 +01:00
49d5748239
Merge pull request #8211 from 2403905/issue-8101
...
fix update and reset the logo
2024-01-16 16:51:49 +01:00
dfd022e38b
Merge pull request #8200 from aduffeck/improve-search-logging
...
Do not error-log when outdated resources can't be indexed anymore
2024-01-16 16:20:51 +01:00
3cc485a0fc
graph/sharewithme: add unit test for 'remoteitem.permissions' property
2024-01-16 15:09:27 +01:00
2c161881ba
graph/sharedWithMe: Fix 'parentReference' on 'driveItem'
...
The outer parentreference should refer to the drive containing the mountpoint.
In our case this is the storagespaceid of the virtual share jail.
Also 'CreatedBy' should be the same as on the wrapped remote item. Not the share creator.
2024-01-16 15:09:27 +01:00
eab501f593
graph/sharedwithme: move flags from 'remoteItem' back into 'permissions'
2024-01-16 15:09:27 +01:00
5bfc943a0c
graph/sharedWithMe: Renable and adjust unit test for recent changes
2024-01-16 15:09:27 +01:00
b5af346384
bugfix: graph/sharedWithMe fix shared.Owner property
...
The value of driveItem.remoteItem.shared.Owner should match the owner property
of the received share not the owner property of the resourceInfo.
2024-01-16 15:09:27 +01:00
03e704c291
graph/sharedWithMe: Set the permission property only on the wrapped remoteItem
...
Sematically the outer driveItem shouldn't carryt the permission. It's the `remoteItem`
that reflects the grantee's permissions.
2024-01-16 15:09:27 +01:00
dd61270e7d
graph/sharedWithMe: separate method for converting CS3 share to libregraph
...
For readability and reduced complexity of the sharedWithMe method. It was getting
too large already.
2024-01-16 15:09:27 +01:00
cfba9f29cc
enhancement: make use uo remote item ui hidden and client synchronized
2024-01-16 15:09:27 +01:00
b91bc535a8
enhancement: simplify sharedWithMe
...
- remove unnecessary stat for accepted items
- only display permission actions if the role cannot be resolved
- add permission user and group displayName
2024-01-16 15:09:27 +01:00
0b796443f2
enhancement: add ui hidden and client synced prop
2024-01-16 15:09:27 +01:00
8c6ba9c360
fix: shared with me listing
2024-01-16 15:09:27 +01:00
cf5f1bcb8e
fix: share jail usage for the listSharedWithMe endpoint
2024-01-16 15:09:27 +01:00
03f302227f
fix update and reset the logo
2024-01-16 13:05:15 +01:00
4b89ede756
Do not error-log when outdated resources can't be indexed anymore
...
That's an expected, totally valid case
2024-01-15 14:46:39 +01:00
b3b69581c4
rework disabling the password policy
2024-01-15 10:53:29 +01:00
f8b6582936
[tx] updated from transifex
2024-01-14 00:08:03 +00:00
16106b0ac5
use id for events
...
Signed-off-by: jkoberg <jkoberg@owncloud.com >
2024-01-11 14:48:42 +01:00
2a41ad4218
fix language patching
...
Signed-off-by: jkoberg <jkoberg@owncloud.com >
2024-01-11 11:49:01 +01:00
465c9e3c20
fix: allow one invite at a time only and implement related validations and http status code handling
2024-01-09 17:17:02 +01:00
418e304ab9
build(deps): bump follow-redirects in /services/idp
...
Bumps [follow-redirects](https://github.com/follow-redirects/follow-redirects ) from 1.15.2 to 1.15.4.
- [Release notes](https://github.com/follow-redirects/follow-redirects/releases )
- [Commits](https://github.com/follow-redirects/follow-redirects/compare/v1.15.2...v1.15.4 )
---
updated-dependencies:
- dependency-name: follow-redirects
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-01-09 17:02:46 +01:00
dca0c653fb
Removed deprecated envars scheduled for removal with 5.0.0
...
Fixes : #8025
2024-01-09 11:28:31 +01:00
01ca237764
[tx] updated from transifex
2024-01-09 00:39:56 +00:00
9af780fda9
fix idp cs3 backend session refresh ( #8142 )
...
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de >
2024-01-08 11:05:52 +01:00
09e8bed619
[tx] updated from transifex
2024-01-08 00:05:14 +00:00
ac8676fff4
enhancement: enable icap preview mode and fix client according to the spec ( #8062 )
...
* enhancement: enable icap preview mode and use a forked icap client which fixes tcp socket keepalive
* enhancement: make use of human time for the icap timout config option
* enhancement: update icap-client
* enhancement: bump icap client library and deprecate ANTIVIRUS_ICAP_TIMEOUT env
* chore: vendor icap library
* enhancement: set preview size only if greater than 0
* Update services/antivirus/pkg/config/config.go
Co-authored-by: Martin <github@diemattels.at >
* enhancement: add changelog
---------
Co-authored-by: Martin <github@diemattels.at >
2024-01-05 20:52:26 +01:00
fd388653a9
the race conditions in tests
2024-01-04 13:14:42 +01:00
a3583118a4
[tx] updated from transifex
2024-01-03 04:27:09 +00:00
Ralf Haferkamp