Dominik Schmidt d18c1a1edb fix(graph): advertise only what the public link grants ...

Navigating by id bypasses the publicstorageprovider, so the permission sets
are the owner's: a view-only link advertised delete and upload on items below
the root. Intersect with the link's permissions, the same reduction the
publicstorageprovider applies on its own responses; enforcement was always
intact through the token scope.

2026-09-08 11:21:02 +02:00

..

activitylog

[tx] updated from transifex

2026-09-06 23:16:18 +00:00

antivirus

actually log error on exit

2026-08-18 17:17:30 +02:00

app-provider

chore: replace interface with any

2026-04-23 09:31:11 +02:00

app-registry

switch to go-viper/mapstructure

2026-06-02 13:57:37 +02:00

audit

add tls support for all nats connections

2026-06-10 17:04:18 +02:00

auth-app

maint: clean-up auth-app documentation

2026-07-20 10:37:57 +02:00

auth-basic

chore: replace remaining version placeholders for 7.5.0

2026-08-25 14:57:45 +02:00

auth-bearer

chore: replace interface with any

2026-04-23 09:31:11 +02:00

auth-machine

chore: replace interface with any

2026-04-23 09:31:11 +02:00

auth-service

chore: replace interface with any

2026-04-23 09:31:11 +02:00

clientlog

enhance: send events for adding/removing favorite items

2026-08-14 10:16:57 +02:00

collaboration

feat: move the collaboration mentioning api to graph

2026-08-17 15:44:04 +02:00

eventhistory

chore: set introduction version to 7.5.0 for new env vars

2026-08-25 12:53:03 +02:00

frontend

granular notifications enabled by default in config

2026-09-01 15:48:03 +02:00

gateway

drop unused datagateway service and gateway config

2026-08-21 07:34:46 +02:00

graph

fix(graph): advertise only what the public link grants

2026-09-08 11:21:02 +02:00

groups

chore: replace remaining version placeholders for 7.5.0

2026-08-25 14:57:45 +02:00

idm

incorporate requested changes

2026-06-03 16:28:44 +02:00

idp

chore(idp): bump dependencies

2026-08-03 13:20:03 +02:00

invitations

chore: replace interface with any

2026-04-23 09:31:11 +02:00

nats

chore: set introduction version to 7.5.0 for new env vars

2026-08-25 12:53:03 +02:00

notifications

[tx] updated from transifex

2026-09-07 23:17:03 +00:00

ocm

make ocm internally expose the dataprovider

2026-08-21 07:34:47 +02:00

ocs

set 7.3.0 version placeholder (#3132)

2026-07-14 18:12:24 +02:00

policies

chore(graph): use metrics tools introduced in 8821053ff8

2026-09-01 10:57:54 +02:00

postprocessing

chore: set introduction version to 7.5.0 for new env vars

2026-08-25 12:53:03 +02:00

proxy

feat(proxy): authenticate graph requests carrying a public link token

2026-09-08 11:21:01 +02:00

search

chore(search): trim the live photo comments

2026-09-03 03:34:33 +02:00

settings

[tx] updated from transifex

2026-09-07 23:17:03 +00:00

sharing

clean up frontend configs after the event consumer move to sharing service

2026-08-26 23:52:46 +02:00

sse

Handle events asynchronously

2026-06-18 15:05:49 +02:00

storage-publiclink

chore: replace interface with any

2026-04-23 09:31:11 +02:00

storage-shares

chore: replace interface with any

2026-04-23 09:31:11 +02:00

storage-system

set 7.3.0 version placeholder (#3132)

2026-07-14 18:12:24 +02:00

storage-users

cli: restore single item from trash bin, listing on empty thrash bin

2026-09-01 10:03:34 +02:00

thumbnails

Merge pull request #3386 from opencloud-eu/feat/extend-thumbnail-service-resolutions

2026-08-21 14:03:23 +02:00

userlog

[tx] updated from transifex

2026-09-07 23:17:03 +00:00

users

chore: replace remaining version placeholders for 7.5.0

2026-08-25 14:57:45 +02:00

web

chore: bump web to v7.4.0

2026-08-25 09:55:39 +02:00

webdav

Dynamically adapt the URL prefix depending on the request

2026-05-27 10:04:01 +02:00

webfinger

enhance: fix typos in webfinger service description

2026-06-16 17:54:51 +02:00