b56f2c9ed0
basic lockdown logic
...
Signed-off-by: Robin Appelman <icewind@owncloud.com>
2016-11-16 15:24:23 +01:00
6047493b6d
Fix integration tests
...
Signed-off-by: Joas Schilling <coding@schilljs.com>
2016-11-16 09:25:46 +01:00
030118cd85
Merge pull request #2111 from nextcloud/oc_26549
...
Remove unused $view from FilesPlugin (#26549 )
2016-11-14 17:00:04 +01:00
506ccdbd8d
Introduce an event for first time login based on the last login time stamp
...
Use firstLogin event to trigger creation of default calendar and default address book
Delay login of admin user after setup so that firstLogin event can properly be processed for the admin
Fixing tests ...
Skeleton files are not copied over -> only 3 cache entries are remaining
Use updateLastLoginTimestamp to properly setup lastLogin value for a test user
2016-11-14 14:50:10 +01:00
17ea1bfb75
Remove unused $view from FilesPlugin ( #26549 )
...
The Sabre FilesPlugin never uses the view so remove it.
2016-11-14 14:45:33 +01:00
fdd904414f
Merge pull request #2068 from nextcloud/sharetypesinfolder-no-getdirectorycontent
...
remove unneeded getDirectoryContent when getting share types for a folder
2016-11-14 11:49:24 +01:00
4b3b562c4f
Fixes files_drop for sabre 3.2
...
In the new sabre (3.2) the order of beforeMethod is switched. it used to
be that beforeMethod:METHOD was called after beforeMethod. But now it is
called before. Since we need the view this was broken.
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2016-11-10 20:44:41 +01:00
d1291f7aee
remove unneeded getDirectoryContent when getting share types for a folder
...
Signed-off-by: Robin Appelman <robin@icewind.nl>
2016-11-09 17:04:44 +01:00
dc5c7d2b04
First list tags the user used lately
...
Signed-off-by: Joas Schilling <coding@schilljs.com>
2016-11-07 14:56:31 +01:00
1e6175dfcb
Fix CalendarTest
...
* Made sure delete from self works again (and is tested)
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2016-11-04 15:40:59 +01:00
c016d947e2
Fix plugin
...
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2016-11-04 15:10:38 +01:00
6d1c0be47d
Minor fixes
...
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2016-11-04 15:10:15 +01:00
9fa3a22ddd
Fix tests
...
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2016-11-04 13:37:00 +01:00
c778b1bade
Update sabre dav to 3.2 ( #26115 )
...
* Update sabre/dav to 3.2.0
* Adjust code to work with sabre/dav 3.2.0 and it's dependencies
* Adding own CalDAV plugin to fix calendar home property
* Test if there is a user logged in when listing files home
* Update sabre version used by integration tests
* Disable unauthenticated DAV access
This is needed to make Sabre 3.2 behave like we did before.
Eventually we should integrate better with the ACL plugin which itself
should implement an auth failure when appropriate.
=====
* Fixed so cherry-pick was succesfull
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2016-11-04 13:35:10 +01:00
f6ff624e3d
Merge pull request #1733 from nextcloud/dav-events
...
Activities for calendars, events and todos
2016-11-03 19:31:20 +01:00
52dd27892b
Use the event dispatcher
...
Signed-off-by: Joas Schilling <coding@schilljs.com>
2016-11-03 12:07:59 +01:00
d3e8463de2
Use a different type for events and todos
...
Signed-off-by: Joas Schilling <coding@schilljs.com>
2016-11-03 12:07:59 +01:00
43b46bcc6a
Activities for events and todos
...
Signed-off-by: Joas Schilling <coding@schilljs.com>
2016-11-03 12:07:58 +01:00
07f6747305
Move the methods into a new class
...
Signed-off-by: Joas Schilling <coding@schilljs.com>
2016-11-03 12:07:58 +01:00
776622f3de
Add activities for shares
...
Signed-off-by: Joas Schilling <coding@schilljs.com>
2016-11-03 12:07:58 +01:00
35ce4c772c
Fix unshare actions for author != owner
...
Signed-off-by: Joas Schilling <coding@schilljs.com>
2016-11-03 12:07:58 +01:00
9a7c522cc6
Add activity for unshare from group
...
Signed-off-by: Joas Schilling <coding@schilljs.com>
2016-11-03 12:07:58 +01:00
83d51afab1
Unshare user activities
...
Signed-off-by: Joas Schilling <coding@schilljs.com>
2016-11-03 12:07:57 +01:00
90578327d5
Start working on calendar activities
...
Signed-off-by: Joas Schilling <coding@schilljs.com>
2016-11-03 12:07:57 +01:00
6a4ea2c15a
Upload autorename on client side
...
Removes the need for POST to collection which would hit against upload
limits.
The client tries to auto rename the file by adding a suffix "(2)".
It tries to use the file list on the client side to guess a
suitable name. In case a file still cannot be uploaded and creates a
conflict, which can happen when the file was concurrently uploaded, the
logic will continue increasing the suffix.
2016-11-02 22:15:03 +01:00
fc4d0a86ef
Fix merging backend results
...
* Merge share types correctly
* Filter share types
* Order share types
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2016-11-01 12:16:05 +01:00
3692769b0a
Add getShareTypesInFolder to optimize folder listening
...
Signed-off-by: Robin Appelman <icewind@owncloud.com>
2016-10-31 15:55:40 +01:00
cde7f535bd
Merge pull request #1738 from nextcloud/comments-provide-displaynames-with-mentions
...
comment mentions: show displayname not uid
2016-10-26 14:02:49 +02:00
d89c1a49c1
Merge pull request #1913 from nextcloud/downstream-26441
...
Require to use at least desktop client 2.0 by default
2016-10-25 22:04:15 +02:00
1c39b30d50
Require to use at least desktop client 2.0 by default
2016-10-25 18:01:25 +02:00
726994ecae
Remove any detailed information about the exception in the browser error plugin
2016-10-25 14:47:33 +02:00
c0adc3c2cf
Merge pull request #1883 from nextcloud/downstream-26145
...
Storage 503 message improvements
2016-10-25 13:19:46 +02:00
c8a13f644e
Only enable files_drop plugin when we actuall do files_drop
...
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2016-10-24 21:45:00 +02:00
7a6dbeb398
Make files_drop work
...
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2016-10-24 21:45:00 +02:00
e73a11d106
Fix permision mask
...
If we move a file from the temp part file to the original file we don't
need update permissions.
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2016-10-24 21:45:00 +02:00
c68e273664
Goodbye Iframe transport !
...
Not needed any more in IE >= 11
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2016-10-24 21:45:00 +02:00
59c5be1cc5
Use Webdav PUT for uploads in the web browser
...
- uses PUT method with jquery.fileupload for regular and public file
lists
- for IE and browsers that don't support it, use POST with iframe
transport
- implemented Sabre plugin to handle iframe transport and redirect the
embedded PUT request to the proper handler
- added RFC5995 POST to file collection with "add-member" property to
make it possible to auto-rename conflicting file names
- remove obsolete ajax/upload.php and obsolete ajax routes
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2016-10-24 21:45:00 +02:00
44cf67accd
Storage 503 message improvements
...
"Storage not available" is now "Storage temporarily not available".
Exceptions are now logged in DEBUG level, not FATAL.
2016-10-24 15:43:15 +02:00
bf85139f53
Adding capability about new chunking - refs #25682 ( #26368 )
...
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2016-10-21 16:33:37 +02:00
2b76d14330
Merge pull request #1834 from nextcloud/downstream-26186
...
Add more files plugins to new DAV endpoint
2016-10-21 09:44:15 +02:00
50b6ee67cb
Merge pull request #1806 from nextcloud/karakayasemi_1767
...
Update file.php put function posthook calls
2016-10-21 08:45:51 +02:00
73e216e0a7
Add more files plugins to new DAV endpoint ( #26186 )
...
* Add more files plugins to new DAV endpoint
Also fix report plugin to properly retrieve the path from the
prolongated URL
* In case the report is not for this plugin -> simply return to allow other plugins to get executed
* Adjust onReport tests to match new behavior
2016-10-20 21:36:15 +02:00
33cee3502a
Update file.php put function posthook calls
...
Logicaly, postHooks should emit after touch. For chunking file it is already emitting after touch.
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2016-10-20 21:07:15 +02:00
246bb9f33d
Move OC\Files\Storage\Shared to the right namespace
2016-10-20 20:27:44 +02:00
98c8464564
Merge pull request #1821 from nextcloud/downstream-26366
...
Code style changes from downstream
2016-10-20 20:18:47 +02:00
0864f53675
Merge pull request #1796 from nextcloud/oc_fav-report
...
Make it possible to filter by tags with REPORT method
2016-10-20 18:32:51 +02:00
08d6884107
Sanitize length headers when validating quota
2016-10-20 15:15:48 +02:00
361f008c70
Make it possible to filter by tags with REPORT method
...
Enhanced the REPORT method on the Webdav endpoint and added a
"oc:favorite" filter rule. When set, it will return a flat list of
results filtered with only favorite files.
The web UI was also adjusted to use this REPORT method instead of the
private API endpoint.
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2016-10-19 11:06:29 +02:00
05223a39f9
Make sure we only use numbers as length
...
Signed-off-by: Joas Schilling <coding@schilljs.com>
2016-10-19 09:28:54 +02:00
5d98ab83e9
resolve displayname via manager and registerable resolvers
...
Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
2016-10-19 00:34:00 +02:00
fea3e20a80
move mention extraction to (I)Comment and report mentions via DAV
...
Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
2016-10-19 00:33:55 +02:00
0923d2665f
Merge pull request #1742 from nextcloud/us_sync-date-of-death
...
[oc] Sync deathdate and anniversary to birthday calendar
2016-10-18 17:14:53 +02:00
96f8f209b9
Merge pull request #1449 from nextcloud/comments-user-mention
...
Notifications for simple @-mentioning in comments
2016-10-17 09:30:47 +02:00
3b055b160e
fix typo
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2016-10-14 11:48:18 +02:00
5cd90d4116
[9.2] Sync deathdate and anniversary to birthday calendar ( #25655 )
...
* Sync deathdate and anniversary to birthday calendar (which should be renamed maybe)
* Sync deathdate and anniversary to birthday calendar (which should be renamed maybe)
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2016-10-14 10:12:43 +02:00
1bcd2ca8e3
emit pre-update event for comments
...
* notifications can be cleaned up, no polluted DB
* updating comments will re-notify users or remove notifications, depending on the message
Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
2016-10-12 18:06:22 +02:00
6278d3bbfd
Merge pull request #1144 from nextcloud/translate-default-calendar
...
translate default calendar & default address book displaynames & add …
2016-10-06 23:00:26 +02:00
ce964f0a10
Translate the Contacts addressbook when it's default
...
Signed-off-by: Joas Schilling <coding@schilljs.com>
2016-10-06 14:20:01 +02:00
a4f82f13f3
Translate the personal calendar
...
Signed-off-by: Joas Schilling <coding@schilljs.com>
2016-10-06 14:19:58 +02:00
f6e8da186d
Merge pull request #1525 from nextcloud/newdav-tagsplugin
...
Newdav tagsplugin
2016-10-06 11:13:48 +02:00
ff3e8c2139
Merge pull request #1518 from nextcloud/dav-fileshome-directory-properties
...
FilesHome now also returns DAV properties
2016-10-06 00:21:44 +02:00
5d25563634
New dav endpoint register tags plugin
...
This makes it possible to retrieve and PROPPATCH the favorite info
Signed-off-by: Lukas Reschke <lukas@statuscode.ch>
2016-10-05 08:19:41 +02:00
60cab0d73e
Unset user PHOTO before setting new one in OCA\DAV\CardDAV\Converter::updateCard ( #26243 )
...
Signed-off-by: Olivier Mehani <shtrom@ssji.net>
#26242
2016-09-29 17:09:24 +02:00
85301df817
Merge pull request #1513 from nextcloud/fix-etag-on-move
...
Return ETag and OC-ETag in case of a move (#25683 )
2016-09-28 21:46:51 +02:00
ef0760f84f
Merge pull request #1545 from nextcloud/delete-calendars-with-their-users
...
Delete calendars with their users
2016-09-28 21:42:55 +02:00
bd96c6aa38
Return ETag and OC-ETag in case of a move ( #25683 )
...
Downstreaming of https://github.com/owncloud/core/pull/25683
Signed-off-by: Lukas Reschke <lukas@statuscode.ch>
2016-09-28 21:12:50 +02:00
6c8bcb38f1
Rename deleteAllSharesForUser() to deleteAllSharesByUser()
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2016-09-28 15:32:03 +02:00
06e969cb74
Merge pull request #1197 from nextcloud/oc-public-sharing
...
CalDAV calendar public sharing
2016-09-27 18:51:40 +02:00
da1543eef7
fix deletion of calendars
...
Signed-off-by: Lukas Reschke <lukas@statuscode.ch>
2016-09-27 18:33:56 +02:00
5215833fe4
delete shares to an user
...
Signed-off-by: Lukas Reschke <lukas@statuscode.ch>
2016-09-27 18:30:19 +02:00
97a47f49a1
Adjust delete logic and ann unit tests
...
Signed-off-by: Lukas Reschke <lukas@statuscode.ch>
2016-09-27 18:30:10 +02:00
18c07f0692
delete also addressbooks on user deletion
...
Signed-off-by: Lukas Reschke <lukas@statuscode.ch>
2016-09-27 18:30:02 +02:00
7db01ff805
delete calendars when users are deleted
...
Signed-off-by: Lukas Reschke <lukas@statuscode.ch>
2016-09-27 18:29:53 +02:00
4f4286932f
Merge pull request #1457 from nextcloud/upstream-fix-birthday-calendar-component
...
[Upstream] fix birthday calendar component
2016-09-26 13:21:08 +02:00
dcc23114e9
fix annotations & copyright headers
2016-09-26 11:55:43 +02:00
17d5dfdeb1
add in same request
2016-09-26 11:55:43 +02:00
8360222554
fix public calendars
2016-09-26 11:55:42 +02:00
d884370844
Use true random string as uri for public calendars - as a result we can no longer return the pre-publish-url
2016-09-26 11:55:42 +02:00
4659e3ab59
Add new constructor args
2016-09-26 11:55:42 +02:00
3e9a346223
add calendarserver-sharing to the list of advertised features
2016-09-26 11:55:41 +02:00
ad0eeaaf1c
use AllowedSharingModes for can-be-published & can-be-shared
2016-09-26 11:55:41 +02:00
6378dbca7e
fix can-be-published
2016-09-26 11:55:41 +02:00
f16ea48e96
add can-be-published property
2016-09-26 11:55:40 +02:00
a4fe596a21
add space between calendarname and owner name
2016-09-26 11:55:40 +02:00
8433c3ca31
fix getChild()
2016-09-26 11:55:40 +02:00
691b3ab448
Add publicuri to oc_dav_shares table and start working with it
2016-09-26 11:55:39 +02:00
dd248caa09
fix some bracket positions
2016-09-26 11:55:39 +02:00
1899116509
move getPublicCalendar inside the caldav backend
2016-09-26 11:55:39 +02:00
762726d988
fix indent once and for all
2016-09-26 11:55:39 +02:00
3921385ed3
fix things (indentation, tests, comments, backend custom implementation
2016-09-26 11:55:39 +02:00
d0ec6b9c15
Disable OPTIONS handling - done by sabre
2016-09-26 11:55:38 +02:00
e783d01da7
Allow public access to the principals/system/public
2016-09-26 11:55:37 +02:00
aadb56dfcc
Fix wrong way to get publish status
2016-09-26 11:55:37 +02:00
2df69ec7f4
correct get published status and minor fixes
2016-09-26 11:55:37 +02:00
aca305332a
Fix DB call for MySQL databases
2016-09-26 11:55:37 +02:00
994001c480
Dirty hack to disable dav plugins on public calendar urls
2016-09-26 11:55:36 +02:00
00dc157b19
Fix requests for browser plugin as well as for the public calendar root folder
2016-09-26 11:55:36 +02:00
e7085aab38
Allow not-authenticated access to specific urls
2016-09-26 11:55:36 +02:00
90ab6e4fd9
Add new root collection public-calendars which holds all public calendars
2016-09-26 11:55:36 +02:00
8da2100e7d
Start work on returning CalDAV published calendars
2016-09-26 11:55:35 +02:00
bd0aae8636
No need to call database twice
2016-09-26 11:55:35 +02:00
7e5a82b968
Use urlgenerator to generate an absolute url
...
And pass Config the correct way too
2016-09-26 11:55:35 +02:00
72f35f8862
Use ressource ID instead of name
2016-09-26 11:55:35 +02:00
f89961ddba
Fix annotations
2016-09-26 11:55:34 +02:00
4a0e6e2ad0
Remove unnecessary line
2016-09-26 11:55:34 +02:00
1652a74feb
Fix publish-url property & getPublishStatus() fct
2016-09-26 11:55:34 +02:00
981c38f6d9
Remove unnecessary implementation
2016-09-26 11:55:34 +02:00
5824c2493b
Make little corrections
...
Function getPublishedStatus) is not working atm.
2016-09-26 11:55:34 +02:00
69d3601dcb
Proper work on Publishing
2016-09-26 11:55:33 +02:00
b17e836e45
FilesHome now also returns DAV properties
...
The files home node must also return DAV properties like etag,
permissions, etc for the clients to work like they did with the old
endpoint.
This fix makes FilesHome extend the Sabre Directory class, this makes
the FilesPlugin and other plugins recognize it as a directory and will
retrieve the matching properties when applicable.
Downstream of https://github.com/owncloud/core/pull/26066
Signed-off-by: Lukas Reschke <lukas@statuscode.ch>
2016-09-26 11:24:23 +02:00
1f825f0fe8
Adding repair step to fix component of birthday calendars
2016-09-20 11:28:00 +02:00
6eb1bc55ab
The birthday calendar can only hold VEVENT - refs https://github.com/owncloud/tasks/issues/338
2016-09-20 11:26:09 +02:00
1944d9b3ab
Use magic DI
2016-09-20 01:15:24 +02:00
44fbf6f734
Close cursors
2016-09-15 09:47:39 +02:00
08c6ca5a1a
Chunk if you have too many contacts
2016-09-14 16:29:58 +02:00
62f31d67bd
Chunk if you have too many events
2016-09-14 16:29:33 +02:00
1ab472b9ad
Improve chunk upload AssemblyStream performance
2016-09-13 09:29:02 +02:00
94fb5bcbae
Cast query result to int
...
Else we never create the default address book
2016-09-09 19:15:27 +02:00
3fc37b2fc5
Merge pull request #1342 from nextcloud/throw-exceptions-not-printable
...
Don't print exception message in HTML
2016-09-09 14:57:23 +02:00
f715b5ea2e
Don't print exception message in HTML
...
The exception message is potentially influenced by user input and could thus be confusing (e.g. somebody could try to open a file like "Please send a mail to support@foo.com", and then the message would include that string.
It is thus reasonable to not show the exception message by default. Also for the browser view I added an `exit()` at the end, as otherwise the XML exception would be attached.
2016-09-09 13:52:34 +02:00
67439951e6
Filter more mimetypes
...
There's no need to allow more than those defined mimetypes for images.
2016-09-09 12:33:10 +02:00
cf69a2b7eb
UPDATE permissions qualify for renaming a node
2016-09-07 11:22:57 +02:00
4c0665b6ec
Only require CREATE permissions when the file does not exist yet
2016-09-07 11:10:48 +02:00
344945bfe9
more efficient check if addressbook and calendar exists for user
2016-08-31 15:08:29 +02:00
0c4d471c18
Correctly handle multi-values when converting VCards to array
2016-08-30 12:08:39 +02:00
0cb34c2fa5
[master] DAV: Return data-fingerprint always when asked ( #25482 )
...
For owncloud/client#5056
Users can configure arbitrary subfolders for syncing, therefore we should
always return it when asked for.
The sync client makes sure to not always ask for it to save bandwidth.
2016-08-29 14:37:14 +02:00
4d85ffc27c
Merge pull request #1054 from nextcloud/less-cache-hits
...
Reduce the number of cache operations for dav operations
2016-08-27 22:44:29 +02:00
89c78bbce4
Merge pull request #1031 from nextcloud/2fa-infinite-redirect-loop
...
prevent infinite redirect loops if the there is no 2fa provider to pass
2016-08-26 16:03:05 +02:00
7c4d9add0d
reuse the userfolder's fileinfo when possible during dav setup
2016-08-25 17:22:22 +02:00
6af2efb679
prevent infinite redirect loops if the there is no 2fa provider to pass
...
This fixes infinite loops that are caused whenever a user is about to solve a 2FA
challenge, but the provider app is disabled at the same time. Since the session
value usually indicates that the challenge needs to be solved before we grant access
we have to remove that value instead in this special case.
2016-08-24 10:49:23 +02:00
3fbb5de74f
Better displaynames for shared address books
2016-08-24 08:50:25 +02:00
53182fb780
Better displaynames for shared calendars
2016-08-24 08:50:25 +02:00
64ff8ac6fa
Fix phpdoc in Comments
2016-08-16 20:33:09 +02:00
6f34c37cfb
Adding quota plugin to new dav endpoint ( #25615 )
...
* Adding quota plugin to new dav endpoint
* Added integrated test failing in old endpoint
* Added 0B quota test
2016-07-29 10:03:46 +02:00
1fef5d3d06
add dav property to check if a file has a preview available
2016-07-27 12:59:39 +02:00
0215b004da
Update with robin
2016-07-21 18:13:58 +02:00
813f0a0f40
Fix apps/
2016-07-21 18:13:57 +02:00
c385423d10
Merge pull request #479 from nextcloud/add-bruteforce-throttler
...
Implement brute force protection
2016-07-21 00:31:02 +02:00
ba4f12baa0
Implement brute force protection
...
Class Throttler implements the bruteforce protection for security actions in
Nextcloud.
It is working by logging invalid login attempts to the database and slowing
down all login attempts from the same subnet. The max delay is 30 seconds and
the starting delay are 200 milliseconds. (after the first failed login)
2016-07-20 22:08:56 +02:00
a17ba2f488
Merge pull request #466 from nextcloud/escape-special-characters
...
Escape special characters (#25429 )
2016-07-20 21:24:19 +02:00
26cf51403e
Merge pull request #464 from nextcloud/master-change-load-order
...
[master] Change load order of auth backends so that we can throw an exception …
2016-07-20 20:08:22 +02:00
e5c4f53eea
Cast share id to string ( #25402 )
2016-07-20 15:10:10 +02:00
7c0de08cc4
Escape special characters ( #25429 )
...
* Escape LIKE parameter
* Escape LIKE parameter
* Escape LIKE parameter
* Escape LIKE parameter
* Escape LIKE parameter
* Use correct method in the AbstractMapping class
* Change the getNamesBySearch method so that input can be properly escaped while still supporting matches
* Don't escape hardcoded wildcard
2016-07-20 14:46:47 +02:00
e795f7b106
Change load order of auth backends so that we can throw an exception in OCA\DAV\Connector\Sabre\Auth - fixes #25362 ( #25476 )
2016-07-20 14:40:52 +02:00
0a6d95b126
Merge pull request #394 from nextcloud/tags-for-everything
...
SystemTags for everything not just files
2016-07-19 10:47:12 +02:00
ea470f8777
Merge pull request #405 from nextcloud/theming-fixes
...
Theming fixes
2016-07-18 15:59:47 +02:00
7c039bcbf6
Allow apps to register SystemTags plugins
2016-07-18 10:26:42 +02:00
c2b077e185
Fix doc blocks
2016-07-18 10:26:42 +02:00
8e13ff2c86
Fix TODO and bring in abstraction (similar to comments)
2016-07-18 10:26:36 +02:00
2c988ecbf4
Use the themed Defaults everywhere
2016-07-15 09:17:30 +02:00
059b7435ab
PasswordLoginForbidden is not a FATAL exception
...
It is just a 'Sabre\DAV\Exception\NotAuthenticated' exception
with some special meaning.
So just log it as DEBUG and not as FATAL.
2016-07-14 22:53:12 +02:00
6da066e7be
Fix test using private propertries
2016-07-08 12:36:25 +02:00
f98cb9efa0
Fix type hinting
2016-07-08 12:35:50 +02:00
8f84c99e3f
Fix undefined properties
2016-07-08 12:35:16 +02:00
ba16fd0d33
Merge branch 'master' into sync-master
2016-07-07 11:29:46 +02:00
7d95cde37d
Add all properties while creating a subscription ( #25318 )
...
Fixes #24469
2016-07-01 13:42:35 +02:00
179a355b2c
Merge remote-tracking branch 'upstream/master' into master-sync-upstream
2016-07-01 11:36:35 +02:00
26e14529be
fix error message
2016-06-30 13:50:31 +02:00
c771368c4e
Add proper throws PHP docs
2016-06-30 13:19:50 +02:00
1e7f0f7341
Add required $message parameter
2016-06-30 13:17:53 +02:00
3571207bd9
add some additonal permission checks to the webdav backend
2016-06-30 11:16:49 +02:00
5ace6b53f3
get only vcards which match both the address book id and the vcard uri ( #25294 )
2016-06-29 12:13:59 +02:00
5f6944954b
get only vcard which match both the address book id and the vcard uri
2016-06-28 16:11:06 +02:00
3c399be6ec
fix a ImageExportPlugin Test ( #25215 )
2016-06-27 21:26:56 +02:00
56ad4cdfec
Show error message when posting an invalid comment
...
When an internal server error occurs while creating or updating a
comment, display a proper error notification in the UI.
2016-06-24 10:17:12 +02:00
1452b74de7
Contacts API: replace raw image data with url ( #25081 )
...
* add uri to AddressBookImpl array
* Introduce ImageExportPlugin for CardDav
* add plugin to v1 routes
* replace binary contact photo with link
* update tests
* Adding unit tests
2016-06-21 15:25:44 +02:00
2340660a5b
PasswordLoginForbidden must extend NotAuthenticated
...
The auth code from Sabre will forward NotAuthenticated exceptions but
in the case of a generic exception, it is packaged as "service not
available".
2016-06-17 15:50:24 +02:00
5a8cfab68f
throw PasswordLoginForbidden on DAV
2016-06-17 11:30:24 +02:00
82b50d126c
add PasswordLoginForbiddenException
2016-06-17 11:02:07 +02:00
0b7685d326
Move birthday calendar generation to a live migration job ( #25135 )
2016-06-16 16:14:28 +02:00
331d88bcab
create session token on all APIs
2016-06-13 15:38:34 +02:00
68c3b23e04
Merge pull request #24080 from owncloud/support-calendar-class-property
...
Extract CLASS property from calendar object and store it in the database
2016-06-10 11:22:11 +02:00
67c3a97401
Merge pull request #25046 from owncloud/fix-the-realm
...
Use the correct realm for basic authentication
2016-06-10 10:41:46 +02:00
543545505d
Merge pull request #25043 from owncloud/webdav-download-mimetype
...
DAV now returns file name with Content-Disposition header
2016-06-10 09:55:59 +02:00
1399e87d57
DAV now returns file name with Content-Disposition header
...
Fixes issue where Chrome would append ".txt" to XML files when
downloaded in the web UI
2016-06-09 15:51:41 +02:00
cf06b17df1
Use the correct realm for basic authentication - fixes #23427
2016-06-09 13:53:32 +02:00
f20c617154
Allow login by email address via webdav as well - fixes #24791
2016-06-09 12:08:49 +02:00
bfcd1dc49c
Filter confidential calendar objects in shared calendars
...
Filter private calendar objects in shared calendars
2016-06-09 11:09:14 +02:00
082f456b8b
Added unit testing for the migration step
2016-06-09 11:09:14 +02:00
369c3b5d7e
Implement classification migration as repair step
2016-06-09 11:09:14 +02:00
287e41732c
Bump dav app version and fix variable rename
2016-06-09 11:09:14 +02:00
f013cfc530
Add migration step
2016-06-09 11:09:13 +02:00
fbdec59f22
Extract CLASS property from calendar object and store it in the database
2016-06-09 11:09:13 +02:00
f119769c26
Better handling of forbidden files in dav
2016-06-07 14:01:55 +02:00
371a07e3ab
Fix checkMove() implementation for dav v2 - fixes #24776 ( #24971 )
2016-06-06 17:01:27 +02:00
3ff2bec5fa
Merge pull request #24935 from owncloud/2fa-block-dav
...
block DAV if 2FA challenge needs to be solved first
2016-06-02 15:31:18 +02:00
942e946f06
Catch the ForbiddenException to make sure it gets handled
2016-06-01 16:17:57 +02:00
da03a85c3c
block DAV if 2FA challenge needs to be solved first
2016-06-01 10:42:38 +02:00
aba539703c
Update license headers
2016-05-26 19:57:24 +02:00
28ce7dd262
do not allow client password logins if token auth is enforced or 2FA is enabled
2016-05-24 17:54:02 +02:00
ad10485cec
when generating browser/device token, save the login name for later password checks
2016-05-24 11:49:15 +02:00
87fa86a69a
Merge pull request #24559 from owncloud/2fa
...
two factor auth
2016-05-23 20:50:03 +02:00
c10d8a37f7
Merge pull request #22690 from owncloud/fix-comments-href-remote.php-files
...
ensure comments-href returns a value also when propfind is done again…
2016-05-23 14:47:03 +02:00
dfb4d426c2
Add two factor auth to core
2016-05-23 11:21:10 +02:00
c9fda84841
Make the root collection neutral so it does not only work for files
2016-05-23 09:03:48 +02:00
3a8e537946
Remove unused UserFolder
2016-05-23 09:03:47 +02:00
5963128342
Adjust DAV SystemTagPlugin unit tests for groups
2016-05-20 17:56:02 +02:00
10fae3994a
Fix system tag update code
2016-05-20 17:56:02 +02:00
d7727cdc74
Add admin-only system tag groups property
...
For setting/getting system tag groups
2016-05-20 17:56:02 +02:00
88740f035d
Act on effective system tag canAssign permission
...
Whenever the server returns true for the can-assign Webdav property of
a system tag, it means the current user is allowed to assign,
regardless of the value of user-assignable.
This commit brings the proper logic to the web UI to make it possible
for users to assign when they have the permission.
2016-05-20 17:56:02 +02:00
03d32bc39b
Fix system tags DAV unit tests
2016-05-20 17:56:02 +02:00
bede872dbc
Bring back admin permissions to change system tag permissions
2016-05-20 17:56:02 +02:00
09b3883d9c
Updated canUser* functions in SystemTagManager to accept objects
2016-05-20 17:56:02 +02:00
8343cfb64b
Add interface methods for permission check
...
Instead of checking for admin perm, use interface method
canUserAssignTag and canUserSeeTag to check for permissions.
Allows for more flexible implementation.
2016-05-20 17:56:02 +02:00
2b30136ae9
ensure comments-href returns a value also when propfind is done against remote.php/files
2016-05-20 16:22:13 +02:00
dd9ee10bc0
Move dav app to PSR-4 ( #24527 )
...
* Move Application to correct namespace and PSR-4 it
* Move dav app to PSR-4
2016-05-12 09:42:40 +02:00
0486d750aa
use the UID for creating the session token, not the login name
2016-05-11 13:36:46 +02:00
5e55dfb2d6
create session token for DAV clients (sync clients)
2016-05-11 13:36:46 +02:00
47157bcd76
Merge pull request #24400 from owncloud/cache_shareManager
...
Cache shareManager
2016-05-06 14:25:30 +02:00
3c2fee8775
Cache shareManager
...
There is no need to call \OC::$server->getShareManager for each Node.
We have it available so better pass it around.
2016-05-02 22:27:24 +02:00
b10dcfc3b7
Fixing local event delivery for calendar events based on the email address
2016-05-02 14:20:59 +02:00
606b756a94
Merge pull request #23918 from owncloud/cruds-for-federated-shares
...
bring back CRUDS permissions for federated shares
2016-04-22 14:50:42 +02:00
3b3cff4f79
Merge pull request #24151 from owncloud/create-personal-calendar
...
Personal calendar should be generated even if the birthday calendar a…
2016-04-22 11:09:45 +02:00
1d1247069f
Birthday calendar should never have write acl - fixes #24154
2016-04-21 13:36:52 +02:00
38c7296867
Personal calendar should be generated even if the birthday calendar already exists - fixes #24082
2016-04-21 12:34:20 +02:00
cd01c440a0
Merge pull request #23919 from owncloud/cyclyc-share-dep-example
...
SharedStorage to new sharing code + cleanup
2016-04-20 20:37:27 +02:00
a86fd873d6
Merge pull request #24076 from owncloud/fix-initial-calendar-and-addressbook-names
...
Fix displayname for initial calendars and address books
2016-04-19 14:30:35 +02:00
afa37d363f
Fix related logic
2016-04-19 14:04:00 +02:00
748134bd90
Fix displayname for initial calendars and address books - fixes #24057
2016-04-18 23:08:37 +02:00
d0ad8e6e69
Revert "Fix displayname for initial calendars and address books - fixes #24057"
...
This reverts commit a5d3e5ed68
2016-04-18 23:07:49 +02:00
a5d3e5ed68
Fix displayname for initial calendars and address books - fixes #24057
2016-04-18 23:06:38 +02:00
dcb2b37e24
Add data-fingerprint property to webdav
2016-04-18 16:08:11 +02:00
52669d0ea3
return correct share permissions on propfind
2016-04-18 12:02:06 +02:00
0cebb16e7c
Move share-permissions property namespace
...
Fixes https://github.com/owncloud/core/issues/23741
2016-04-15 10:22:18 +02:00
55735e1450
Translate contacts birthday - fixes #23982
2016-04-14 16:58:45 +02:00
068e73cc47
Merge pull request #23975 from owncloud/change-default-calendar-and-contacts-names
...
Use better names for the default calendars and addressbooks
2016-04-14 11:57:43 +02:00
439de52534
Remove dav migration for 9.1
2016-04-13 15:53:57 +02:00
353449bff7
Use better names for the default calendars and addressbooks - fixes #23720
2016-04-13 15:44:59 +02:00
3c0a1d4241
Merge pull request #20118 from owncloud/chunked-upload-dav
...
Initial implementation of the new chunked upload
2016-04-13 14:37:10 +02:00
499d131a09
always return the complete permissions the file was shared with
2016-04-12 17:56:56 +02:00
e21642ca31
Fix unit test of file plugin
2016-04-12 15:51:09 +02:00
bb2e68f72b
Fix chunk file move
2016-04-12 14:26:42 +02:00
72f5c539e8
Initial implementation of the new chunked upload - as specified in https://dragotin.wordpress.com/2015/06/22/owncloud-chunking-ng/
2016-04-12 12:32:04 +02:00
8652ef28aa
Merge pull request #23868 from owncloud/scrutinizer-patch-2
...
Scrutinizer Auto-Fixes
2016-04-11 10:38:02 +02:00
24c2252ff4
Adding VCFExportPlugin
2016-04-10 12:43:15 +02:00
3ebeb07a30
Scrutinizer Auto-Fixes
...
This commit consists of patches automatically generated for this project on https://scrutinizer-ci.com
2016-04-08 15:11:37 +00:00
6f3eeeeb36
Merge pull request #23510 from owncloud/birthdays-on-shared-addressbooks
...
Propagate birthdays of shared addressbooks to the sharee's birthday c…
2016-04-08 15:19:38 +02:00
375f6fcab1
Move public webdav auth over to share manager
...
The public webdav auth should use the shiny new share manager.
2016-04-08 14:17:13 +02:00
dda739c0cc
Merge pull request #23501 from owncloud/alarms_for_birthdayevents
...
add VALARM for birthday events
2016-04-06 14:31:07 +02:00
f6cea3c9c4
Merge pull request #23557 from owncloud/sabre-plugin-browser-error-page
...
In case of exception we return an html page in case the client is a b…
2016-04-04 13:51:23 +02:00
63b01a3616
Merge pull request #22834 from owncloud/webdav_property_for_share_permissions
...
Add sharePermissions webdav property
2016-03-31 23:18:53 +02:00
89478a0961
Fix unit tests
2016-03-31 21:25:23 +02:00
5334bcce66
Correct share permissions for external storages
2016-03-31 20:17:59 +02:00
8c0ef4c4bd
Add sharePermissions webdav property
...
This property can be queries by the clients so they know the max
permissions they can use to share a file with. This will improve the UX.
The oc:permissions proptery is not enough since mountpoints have
different permissions (delete + move by default).
By making it a new property the clients can just request it. On older
servers it will just return a 404 for that property (and thus they know
they have to fall back to their hacky work arounds). But if the property
is returned the client can show proper info.
* unit tests
* intergration test
2016-03-31 20:12:34 +02:00
ba69a90ab5
Enforce type
2016-03-31 19:32:30 +02:00
262547ba3d
Return 401 DummyBasicAuth in case of ajax call
2016-03-31 19:31:31 +02:00
65b0127241
apps/dav: Fix typos in comments (found and fixed by codespell)
...
Signed-off-by: Stefan Weil <sw@weilnetz.de>
2016-03-30 10:14:26 +02:00
cd850dc325
Merge pull request #23568 from owncloud/finally-fix-23328-now-for-addressbooks-as-well
...
Handle group shares of addressbooks on v1 as well ... now FINALLY ....
2016-03-29 18:41:40 +02:00
596a8416c2
Merge branch 'master' into alarms_for_birthdayevents
2016-03-26 14:27:38 +01:00
ab0db65b23
Merge pull request #23549 from owncloud/dav-sharetypes-remote
...
Return remote shares in oc:share-types Webdav property
2016-03-24 22:44:19 +01:00
95820fbd5b
Add magical regex to catch browsers
2016-03-24 19:02:16 +01:00
c46f480031
In case of exception we return an html page in case the client is a browser
2016-03-24 19:02:16 +01:00
89cd6e228d
Handle group shares of addressbooks on v1 as well ... now FINALLY ....
2016-03-24 17:11:07 +01:00
3d51682440
Merge pull request #23342 from owncloud/fix-group-sharing-for-v1-caldav-and-carddav
...
Fix group shares on v1 caldav and carddav
2016-03-24 12:47:18 +01:00
9ee1f506f2
Return remote shares in oc:share-types Webdav property
...
Fixes web UI to properly display the share status icon when an outgoing
remote share exists
2016-03-24 12:16:57 +01:00
06e8c70400
Fix acls for calendar objects and cards - fixes #23273
2016-03-24 09:53:36 +01:00
8c2b19d2bc
Return proper current-user-principal on v1 endpoints - fixes #23306
2016-03-24 09:53:36 +01:00
4c738ea9c4
Fix group shares on v1 caldav and carddav - fixes #23328
2016-03-24 09:53:36 +01:00
cc8c0b6a90
Check if request is sent from official ownCloud client
...
There are authentication backends such as Shibboleth that do send no Basic Auth credentials for DAV requests. This means that the ownCloud DAV backend would consider these requests coming from an untrusted source and require higher levels of security checks. (e.g. a CSRF check)
While an elegant solution would rely on authenticating via token (so that one can properly ensure that the request came indeed from a trusted client) this is a okay'ish workaround for this problem until we have something more reliable in the authentication code.
2016-03-24 08:59:56 +01:00
4b2f9e4027
add VALARM for birthday events
...
ACTION=DISPLAY *should* prevents audible alarms.
2016-03-23 23:21:10 +01:00
c8d6a9594a
Propagate birthday to group shares as well
2016-03-23 14:12:50 +01:00
e979b9c735
Propagate birthdays of shared addressbooks to the sharee's birthday calendar as well
2016-03-23 12:29:45 +01:00
24331be991
Merge pull request #23431 from owncloud/use-dav-sabre-plugin-for-browser-2
...
Fix display of vcard and calendar object details page in browser plugin
2016-03-23 11:03:55 +01:00
164282c72e
Fix display of vcard and calendar object details page in browser plugin
2016-03-23 10:35:21 +01:00
48ec8ab3d3
Merge pull request #23404 from owncloud/fix-22988
...
adjust PrincipalUri as returned from Sabre to effective username
2016-03-22 14:49:54 +01:00
9fc371e436
Merge pull request #23320 from owncloud/early-creation-of-birthday-calendar
...
Create the contact birthday calendar right away as soon as the comman…
2016-03-22 10:31:01 +01:00
f28f538029
Do not fire pre/post hooks twice on chunk upload
2016-03-21 15:14:58 +01:00
8852fdaee3
Merge pull request #22789 from owncloud/dav-sharesproperty
...
Add webdav property for share info in PROPFIND response
2016-03-21 11:15:00 +01:00
e983bd7db0
Merge pull request #23368 from owncloud/use-dav-sabre-plugin-for-browser
...
In debugging mode we enable Sabre's browser plugin since it helps a l…
2016-03-21 10:13:27 +01:00
117c1bffa7
adjust PrincipilUri as returned from Sabre to effective username
2016-03-18 23:31:11 +01:00
6e6e002280
Remove duplicated copyright
2016-03-17 19:24:25 +01:00
520724d757
Necessary code changes to make browser plugin properly work
2016-03-17 18:00:06 +01:00
7d638fdb34
In debugging mode we enable Sabre's browser plugin since it helps a lot when debugging
2016-03-17 16:51:19 +01:00
f778e48ee5
Add webdav property for share info in PROPFIND response
2016-03-17 15:35:21 +01:00
533fdb4075
Set proper public webdav permissions when public upload disabled
...
Fixes #23325
It can happen that a user shares a folder with public upload. And some
time later the admin disables public upload on the server.
To make sure this is handled correctly we need to check the config value
and reduce the permissions.
Fix is kept small to be easy backportable.
2016-03-17 11:35:31 +01:00
fdb7c59e6c
Create the contact birthday calendar right away as soon as the command is executed once - fixes #23203
2016-03-16 17:23:02 +01:00
d188ed938c
Merge pull request #23082 from owncloud/contacts_calendar_name_color
...
add title and color to birthday calendar
2016-03-16 17:17:21 +01:00
e9eeb3607f
Merge pull request #23074 from owncloud/issue-22835-correctly-use-querybuilder-api
...
Correctly escape join statements and use selectAlias
2016-03-15 12:14:17 +01:00
750ec93394
Merge pull request #23080 from owncloud/use-non-localized-birthday-title
...
Use a birthday title which does not require translation because we ha…
2016-03-11 11:49:13 +01:00
07a1313114
Merge pull request #23119 from owncloud/fix-getOwner-on-fileshome-master
...
getOwner is not available on FileHome
2016-03-10 23:12:51 +01:00
e0210058ef
Merge pull request #23094 from owncloud/fake-lock-for-windows-7-8-10
...
Fake LOCK statement for Windows 7, 8 and 10 network mounts
2016-03-10 23:07:45 +01:00
856ca641d1
add title and color to birthday calendar
2016-03-10 21:02:54 +01:00
b7adf371c6
getOwner is not available on FileHome - fixes #23116
2016-03-10 20:53:56 +01:00
7f16aaefc8
Merge pull request #23048 from owncloud/no-fatal-error-if-DSTART-is-not-set
...
No fatal error if dstart is not set
2016-03-10 17:58:01 +01:00
48e03e0c49
Fake LOCK statement for Windows 7, 8 and 10 network mounts
...
* fixes #22596
2016-03-10 15:02:37 +01:00
85521879cd
The birthday_calendar is read-only
2016-03-10 12:50:07 +01:00
fe7103506b
Use a birthday title which does not require translation because we have no idea about the target device language and forcing English upon all users is kind of bad
2016-03-10 12:41:37 +01:00
6b4117df34
Correctly escape join statements and use selectAlias
2016-03-10 10:24:08 +01:00
6133253a2c
fixes #23004
2016-03-10 09:20:53 +01:00
bc434b252c
fixes #23020
2016-03-09 18:12:39 +01:00
20db92c71a
Fix group sharing and sharing permissions - fixes #22932
2016-03-08 11:22:07 +01:00
3b25ccef65
Handle addressbook migration issue by writing the faulty event to the log and continue
2016-03-07 15:04:19 +01:00
d32b35fc7f
Handle calendar migration issue by writing the faulty event to the log and continue
2016-03-07 15:04:19 +01:00
bd4b61f52b
Merge pull request #22896 from owncloud/fix-v1-carddav-endpoint
...
Correctly default to null and add type hint
2016-03-07 13:50:53 +01:00
296a46cc38
Merge pull request #22244 from owncloud/dont-update-shared-resource-properties
...
For 9.0 we don't have the possibility to store calendar and addressbo…
2016-03-07 12:42:52 +01:00
c99ae62c33
Correctly default to null and add type hint
2016-03-07 10:48:16 +01:00
3bdafc2122
Rename and move permissions are set when a file is updatable
...
* Fix unit tests
2016-03-03 20:03:06 +01:00
4d69e562a0
Merge pull request #22757 from owncloud/apply-license
...
Update copyright information and author file
2016-03-01 15:36:37 -05:00
c353d51810
Remove Scrutinizer Auto Fixer
2016-03-01 17:48:23 +01:00
c430f5ba53
Map Maci
2016-03-01 17:45:05 +01:00
Robin Appelman
Joas Schilling
Roeland Jago Douma
Thomas Müller
Vincent Petry
Morris Jobke
Roeland Jago Douma
Robin Appelman
Thomas Müller
Semih Serhat Karakaya
Joas Schilling
Lukas Reschke
Arthur Schiwon
Thomas Citharel
Olivier Mehani
Markus Goetz
Christoph Wurst
Aaron Wood
Björn Schießle
Lukas Reschke
Georg Ehrke
Christoph Wurst
Arthur Schiwon
Joas Schilling
Roeland Jago Douma
Björn Schießle
Scrutinizer Auto-Fixer
Stefan Weil
Achim Königs
Achim Königs
C. Montero Luque