opencloudeu
d8859757d9
[tx] updated from transifex
2025-11-06 00:02:59 +00:00
Ralf Haferkamp
8a7d51ca88
Apply typo fixes from code review
...
Co-authored-by: Michael Barz <michael.barz@zeitgestalten.eu >
2025-11-04 16:45:08 +01:00
Ralf Haferkamp
a2f9cadd9f
feat(collaboration): Set IsAnonymousUser flag for Collabora
...
Closes : #796
2025-11-04 16:45:08 +01:00
Ralf Haferkamp
30ef495c92
feat(collaboration): Set IsAdminUser property for Collabora
...
This set the 'IsAdminUser' Property correctly in the CheckFileInfo
Response. For that a new Permission 'WebOffice.Manage' is introduced. By
default this permission is only assigned to the Admin role.
User with this permission get access to certain admin features in
Collabora (e.g. the 'Server Audit' dashboard)
Closes : #796
2025-11-04 16:45:08 +01:00
Ralf Haferkamp
37609e52df
feat!: Make the url signing secret a mandatory config option
...
This is required for allowing the web office to download images to
insert into documents.
The secret is generated by `opencloud init` and the server refuses
to start now without a secret being set. (Breaking Change)
Also the setting is now moved to the shared options as all involved
services need the same secret to work properly.
Related: https://github.com/opencloud-eu/web/issues/704
2025-11-04 16:01:00 +01:00
Ralf Haferkamp
589cee4ab3
collaboration: Enable InsertRemoteImage option
...
Related: https://github.com/opencloud-eu/web/issues/704
2025-11-04 16:01:00 +01:00
Viktor Scharf
c05c740fa6
bump web 4.2.0 ( #1765 )
2025-11-03 15:55:36 +01:00
opencloudeu
790c6b165f
[tx] updated from transifex
2025-11-02 00:03:10 +00:00
opencloudeu
a2935abe3d
[tx] updated from transifex
2025-11-01 00:02:51 +00:00
opencloudeu
e270cdbfd2
[tx] updated from transifex
2025-10-29 00:03:02 +00:00
Ralf Haferkamp
e2441696c2
graph(education): 'primaryRole' and 'identities' should be optional
...
Related: #1597
2025-10-28 12:56:42 +01:00
Ralf Haferkamp
28ec9c3282
graph(education): Make 'schoolNumber' attribute optional
...
It's already optional in the spec. For mulit-tenant provisioning
we want it to be optional as well.
Related: #1597
2025-10-28 12:56:42 +01:00
Shawn Wilsher
920a6916c4
fix: only search LDAP group by name
2025-10-28 10:22:54 +01:00
Thomas Schweiger
e7a4cbaae5
fix: fix #1698 - Notification email doesn't contain Message-ID header
2025-10-27 18:56:37 +01:00
opencloudeu
c887947a85
[tx] updated from transifex
2025-10-27 00:01:43 +00:00
opencloudeu
ac8be264f0
[tx] updated from transifex
2025-10-26 00:01:09 +00:00
opencloudeu
6e4e533e2c
[tx] updated from transifex
2025-10-23 00:01:41 +00:00
Alex
f12a433b85
chore: add groupware capabilities ( #1661 )
2025-10-21 22:31:45 +02:00
opencloudeu
3874c3e0d3
[tx] updated from transifex
2025-10-20 00:02:20 +00:00
opencloudeu
254f999382
[tx] updated from transifex
2025-10-16 08:04:58 +00:00
Ralf Haferkamp
b099dcdf6e
fix: 'readyz' enpdoint check only required service
...
The readyz endpoint contained unconditional checks for the LDAP and nats
endpoints. Depending on configuration neihter LDAP nor NATS might be
required.
2025-10-14 16:49:46 +02:00
Ralf Haferkamp
d1a6cc22c1
graph: Allow the service to run without a NatsJS server
...
For running the Graph Education API we want to keep it possible
to run the service standalone. With an LDAP server as the only
external dependency.
2025-10-14 16:49:46 +02:00
Viktor Scharf
6c387336e1
chore/bump-web-4.1.0 ( #1652 )
...
CI shows a false failure. merge it
2025-10-13 16:09:44 +02:00
opencloudeu
d080d7415e
[tx] updated from transifex
2025-10-13 00:01:42 +00:00
opencloudeu
4b2e6e4695
[tx] updated from transifex
2025-10-12 00:01:38 +00:00
Ralf Haferkamp
e9a2ba8afc
fix(settings): env var precedence
...
Fix the ordering of the env vars for the 'set_default_assignments'
setting. The service specific variable ('SETTINGS_SETUP_DEFAULT_ASSIGNMENTS')
should take precedence over other variable ('IDM_CREATE_DEMO_USERS' in
this case).
2025-10-08 18:06:35 +02:00
fschade
c0244fc977
enhancement(graph): resolve review feedback such as, use fmt for error wrapping, make use of store auth options, use a dedicated jetstream package
2025-10-08 16:45:16 +02:00
Christian Richter
2ca88e66da
add mocks for natskv
...
Signed-off-by: Christian Richter <c.richter@opencloud.eu >
2025-10-08 16:45:16 +02:00
Christian Richter
bcafd97e31
Catch bucket not found error
...
Co-authored-by: Jörn Dreyer <jfd@butonic.de >
Signed-off-by: Christian Richter <c.richter@opencloud.eu >
2025-10-08 16:45:16 +02:00
Christian Richter
351f4e6be2
Mock nats & adapt tests
...
Co-authored-by: Florian Schade <f.schade@opencloud.eu >
Signed-off-by: Christian Richter <c.richter@opencloud.eu >
2025-10-08 16:45:16 +02:00
Christian Richter
5225b66f65
Move keyvalue initialisation to options
...
Co-authored-by: Florian Schade <f.schade@opencloud.eu >
Signed-off-by: Christian Richter <c.richter@opencloud.eu >
2025-10-08 16:45:16 +02:00
Christian Richter
098ed082c8
attempt to fix broken soft delete
...
Signed-off-by: Christian Richter <c.richter@opencloud.eu >
2025-10-08 16:45:16 +02:00
Christian Richter
813edc4a59
use standard errors package
...
Signed-off-by: Christian Richter <c.richter@opencloud.eu >
2025-10-08 16:45:16 +02:00
Christian Richter
f7454e576a
remove obsolete properties
...
Signed-off-by: Christian Richter <c.richter@opencloud.eu >
2025-10-08 16:45:16 +02:00
Christian Richter
800c7bc863
revert faulty replaces
...
Signed-off-by: Christian Richter <c.richter@opencloud.eu >
2025-10-08 16:45:16 +02:00
Christian Richter
ef920b040a
add missing pointer
...
Signed-off-by: Christian Richter <c.richter@opencloud.eu >
2025-10-08 16:45:16 +02:00
Christian Richter
b815a6e0a1
respect ldap settings, add comments
...
Signed-off-by: Christian Richter <c.richter@opencloud.eu >
2025-10-08 16:45:16 +02:00
Christian Richter
cd295dfd9e
add persistance function & userstate
...
Signed-off-by: Christian Richter <c.richter@opencloud.eu >
2025-10-08 16:45:16 +02:00
Christian Richter
07a9308c4c
add nats-js-kv connection to graph
...
Signed-off-by: Christian Richter <c.richter@opencloud.eu >
# Conflicts:
# services/graph/pkg/service/v0/service.go
2025-10-08 16:45:16 +02:00
Christian Richter
63f976cac1
add nats-js-kv persistance to graph
...
Signed-off-by: Christian Richter <c.richter@opencloud.eu >
2025-10-08 16:45:16 +02:00
opencloudeu
38b1a0feb0
[tx] updated from transifex
2025-10-07 00:01:20 +00:00
Ralf Haferkamp
f096285769
feat(groups): Only allow the "null" driver for multi-tenant setups
2025-10-06 11:21:57 +02:00
Ralf Haferkamp
736fb9db1f
fix: make storage system user a service account
...
The reva auth-middleware blocks users without a tenant id, expect
system users.
2025-10-06 11:21:57 +02:00
Ralf Haferkamp
7b5c59e827
feat(reva): Pass the multi-tenancy flag to reva services
...
This allows to pass the multi-tenant enablement flag as a shared config
option to the reva service. This needs to be done for all reva services
since it ends up in a global variable in reva that is only initialized
once, by the service that is the first to parse its config.
See https://github.com/opencloud-eu/opencloud/issues/1563 for details.
2025-10-06 11:21:57 +02:00
Ralf Haferkamp
8cea8c8cfd
feat(proxy): account_resolver multi-tenancy
...
Make the account resolve reject users without a tenantid, when
multi-tenancy is enabled.
2025-10-06 11:21:57 +02:00
Ralf Haferkamp
b1c50ea5a0
feat(graph): validate identity backend value
2025-10-06 11:21:57 +02:00
Ralf Haferkamp
7e86d85d62
feat: Add a global flag to enable multi-tenant support
...
When enabled the graph service refuses to start with the "ldap" backend.
Additional enforcements will follow in subsequent commits.
2025-10-06 11:21:57 +02:00
opencloudeu
bbf30b5802
[tx] updated from transifex
2025-10-05 00:02:32 +00:00
opencloudeu
4e06b0c376
[tx] updated from transifex
2025-10-02 00:02:45 +00:00
Michael Barz
3b27d8f580
change: use 404 as status when thumbnail can not be fetched ( #1582 )
2025-09-30 20:40:31 +02:00