Pydio 6.2.2 Release Note

Pydio Core 6.2.2 is another bugfix release providing compatibility fixes for non-standard plugins to the core. See complete changelog below.
Thanks to the following contributors for this release: cdujeu, c12simple, Isma91, floffel03, rbrdevs, DepaMarco, Ellega. Olivier Paroz, Stéphane Chadeyron.

[Noticeable changes]

Over-agressive caching could end up creating issues in IE when switching workspaces
Security: sanitization strengthen for potential XSS attacks.
Fix regression on "Remember Me" switch
Fix Video Player for FireFox
Joomla Bridge Compatibility (broken by last Joomla version).

[Detailed Changelog]

Update Italian translation for plugins: 'access.ajxp_conf', 'action.compression', 'action.share', 'core.ajaxplorer', 'core.notifications' (details)
Take the active mailer plugin , not the first that comes (details)
[core.mailer] Update the class which takes the active mailer plugin (details)
[conf.sql / access.ajxp_user] Improve Team management. (details)
Websocket: if there's an internal BIND address, it's most likely the address the php server will have to connect to. Added a Todo to handle REST auth. (details)
Unserialization can fail on some systems, make sure to reload role if it's not an object after waking up object. (details)
Fix SFTP username containing dash character (git issue #1014) (details)
[gui.user] Fix display & i18n message (details)
[gui.ajax] Create a "legacy" version of the bundle without ReactDND, and add fallbackCondition and fallbackFile in the js/css ressources to load alternative versions. (details)
Make test on personalRole stronger if there is an error at deserialization time. (details)
IE Caching policy is too agressive, we have to add some random ID to force reload sometime. (details)
Renamed constructor for PHP7 compatibility (details)
Update CLA URL (details)
Handle repository with deleted parent. Should fix #1025 (details)
Typo in getRelatedNotifications() method (not used). (details)
Update CONTRIBUTING.md (details)
[core.notifications] fix getRelatedNotifications() (details)
Fix #1019 (details)
Util function to get user label either from role directly or from user object. (details)
Fixed recursive indexation issue with FTP workspaces. (details)
Wrappers must declare isSeekable() to enable listing optimizations in fsAccessDriver. (details)
Make sure not to load an indexed document if the meta.change event comes from a "delete" operation. (details)
Enforce sanitization of user id when sending to error log. (details)
Update window.MessageHash when changing i18n. Alternative fix #1021 (details)
Typo in rest parameter for role_update_right (details)
Pass optional parameters to the node->load() method. (details)
Pass optional cursor parameter to the logs. SQL logger can use it as a query limiter to only load data starting from a given id. Return cursor attribute in XML as well. (details)
Use udevil to mount instead of sudo (details)
Improve performance: caching ldap search result in class static variable (details)
Improve notifications on shared resources - Separate Location from the notifications - Avoid empty label in Alerts feed. (details)
Better catch of imagick call error. (details)
Fix tmp folder for unoconv (details)
Strip only left space on dirname - Fix #1023 (details)
Imagick: Parameters should follow convert command. (details)
Fix rewind on SchemeTranslator wrapper - Prevent editing meta on non-writeable resource. (details)
[auth.remote] Make sure to keep the initial session.save_handler - Fix Joomla connector. (details)
Joomla plugin: make sure to switch back to previous session, as the session content is saved in register_shutdown_handler. (details)
Compute locationType when setting node, so that it can be serialized/unserialized (details)
Do not cache Sharing configs - Fix #1013 (details)
Make sure to use === when comparing to constants, or repo 0 can be considered as repo_scope_all. Enable kvcaching in non-rest controller. (details)
[ShareCenter] Fix unshare workspaces from My Account zone - Fix readonly mode not being switched correctly in some case. (details)
Registry Cache Key : repo can be null. (details)
Fix Exif metadata display in InfoPanel when no GPS parameter is defined in the plugin or no GPS data is present in photo. (details)
Fix regression on contextual menu content and default item display. (details)
Fix regression on "Remember Me" feature. (details)
Replace pydio.getController().parseXmlMessage() by PydioApi.getClient().parseXmlMessage. Same for triggerDownload() moved as static method on PydioApi. (details)
Fix Eml Attachment Download. (details)
Replace all Controller.parseXmlMessage calls by PydioApi.getClient().parseXmlMessage in manifests. (details)
Replace ' by " to avoid label truncating on users/teams listing. Better sanitization and error catching on Team creation. (details)
Prevent editor.browser to open SVG files directly, always force as attachment. (details)
Pass the $url to isSeekable(), allowing to return different value depending on the path (=> return false for Zip files in fsAccessWrapper, or it's messed up when browsing zip subfolders). (details)
Declare restParams on compress in action.powerfs, otherwise API is not working for this action when plugin is active. (details)
Fix ChangesTracker for filter + mask management. Fix indexation issue when copying folders. (details)
Specific fix for video player for Firefox (details)
Update sdk generator: do not skip already parsed actions. (details)
* Setup wizard can now be translated completely * Added german translations for setup wizard (details)
Fix display quota on FreeBSD (details)
Fix file/folder message on move. Close and replace PR #1000 ($dirRes is never set in that case) (details)
Update .travis.yml (details)
Updated ca/es files (details)
PHP7 Constructors fixes (details)
PHP7 Constructor fixes (details)
Missing Comma in ca.php (details)
Add Travis Badge (details)
Fix #1010 Zip Browsing on Windows Server (details)
Add new parameter for signature - Add Frankfurt & Seoul Regions. Close #846 (details)
Fix log grouping Fix Copy Selection action (details)
Fix google shortner api key - Close #1030 (details)
Make sure to not return an empty value. (details)
Fix some specific zip extraction case on Windows Server. (details)
Fix multimode value : check instance_name OR group_switch_value (details)
Fix MacOS Yosemite / El Capitan Detection (details)
Fix italian "Invite" button: missing translation strings. (details)
HTML Base Tag is not correctly applied in IE10 when dynamically inserting "link". Add an data-hrefRebase tag to be processed (prepending the base) on ie10 only. (details)
Close session when sending binary files. Could create a race condition with tryLogUserFromCookie. (details)

--------------------------
Pydio Core 6.2.1 is a bugfix release providing compatibility fixes for non-standard plugins to the core. See complete changelog below.

Some servers do not return the "." value, send a fake stat in that case by grabing the stat from AJXP_DATA_PATH. (details)
Fix tab char in sql script (details)
[action.disclaimer] Make sure to invalidateLoadedRepositories() after updating the lock value. (details)
[access.fs] Fix is_readable call for folders inside API. Fix #988 (details)
try catch every single file when we extract an archive (details)
Update website (details)
Update README.md (details)
[meta.syncable] Fix a wrong flatten case when deleting/restoring to/from the recycle bin. (details)
Fix shortcuts disabling on SearchEngine. Fix #994 (details)
Fix Root Group management issues. (details)
Change DefaultRights management: update Root Group, do not update personal roles anymore, otherwise it always takes precedency on parent groups/roles. Do not skip the AJXP_CLEAR_VALUE, set to the merged role. (details)
Fix display in search engine leaving the group headers on empty result. (details)
Observable: make a copy of observers otherwise if there are many observeOnce ones they are not correctly applied. (details)
Typo in EmptyNodeProvider Fix user history and ?goTo= mechanism. If skip_user_history is fale, use goTo, otherwise use URL directly. (details)
User dashboard, switch action bars to dataModelElementId instead of global events. (details)
Admin Panel: to not list Templates in group/roles ACL - Fix Legacy shares listing not properly filtered. (details)
Core.* plugins should be appended at the beginning of active lists. Fix compatibility of remote logout with 6.2.X : add a forbidOverride attribute to block further merge in registry, otherwise session_login logout action will always take precedency. (details)
Fix load binary (details)
Make too short string smaller in french (details)
Add include Hook for to load and update user info (details)
Fix update template label (details)
Pass a scope string or a repository object to getFilteredOption() to test on the AJXP_REPO_SCOPE_SHARED scope if necessary. (details)
Fix typo in ENABLE_FOLDER_SHARING value testing Fix check for USER_SHARED_USERS_LIMIT on mergedRole instead of personalRole (details)
Update getFilteredOption signature (details)
Unused images - Fix #1001 (details)
Glob can return false on error, we should check before running a foreach. (details)
[action.share] Reset max download and max expiration time Fix #1004 (details)
Fix CAS button in login interface in 6.2 (details)
Add method groupExists() instead of using listChildrenGroups() as it can create a recursivity in auth.ldap. (details)
Add method groupExists() implement in serial and sql confdriver (details)
Fix loop in creation of groupPath (details)
[editor.pdfjs] Fix for IE when Pydio is inside an iFrame. (details)
[auth] When guest is enabled, make sure to invalidateLoadedRepositories() at login time, otherwise they are already in the session. Fix #1002 (details)
[gui.ajax] FilesList: add bulkUpdating mode to avoid triggering initRows() on each child_added event. (details)
[gui.ajax] Always limit search engine to 100 results by default, use bulkUpdating when parsing results, and display the total count plus a "show all" link. (details)
[index.lucene] Send a tag in results if limit is set and number of hits is cut. (details)
Compiled version of css (details)
[editor.pdfjs] Add fake file name parameter to the file url passed to pdfjs, to have a correct info in the pdfjs properties viewer. (details)
[phpversion test] Update php version to 5.4. (details)
[gui.ajax] InfoPanel : display node label instead of basename if set. (details)
Revert previous core plugins reordering issues (details)
Fix actions disabling merging (details)
[core.ajaxplorer] Update default WEBDAV_BASEURI as it was still /ajaxplorer/share. (details)
[meta.git] Remove dependency to meta.svn plugin (details)
[css] Fix contrast on history browser (details)
[action.scheduler] Create simple react dashboard for enterprise admin panel. Just trigger same ol' actions. (details)
[utils] getWorkspaceShortcutUrl use "?goto=" or "/ws-" depending on the skip_user_history status. (details)
[AuthService] Avoid error if trying to execute tryToLogUser(). Log to error though. [authfront.webftp] Fix login form not closing after successfull login. (details)
[ConfService] Use a dedicated UserAlertException to send back OAuth message and avoid removing temporary failing workspace from the list. Use it in access.dropbox driver. (details)
Update package.json versions (details)
[action.updater] Point to new update site (details)
[access.ajxp_conf] Fix strange horizontal scrolling (details)

-------------------


[Summary]

Pydio 6.2.0 brings massive performance improvements, many bug fixes from previous version, and a couple of new features:
 * Performances: we gained an average 5 times in performance on every request. Using optional in-memory KeyValue Caching adds a tremendous improvement for Rest calls (sync).
 * Tar gz / bz2 support: creation and extraction of archives
 * Web UI: Better mobile support. Under the hood, we started migrating our whole JS platform from legacy libraries to Ecma Script 6. We now use Grunt tasks to compile/minify the JS
 * Packaging: Rework of our Linux packages from ground up, splitting plugins into separate packages, with packaging best-practice in mind.
 * PHP7-Ready: we chased language issues that could compatibility problems with PHP7.
 * And many many bug fixed on all parts of the application, see Changelog below.

Contributors: cdujeu, svetlemodry, rimckenney, c12simple, Isma91, leobouilloux, huzergackl, DepaMarco, ecappa, sespivak, Uggy, sim1st. Thanks to all for making this happen!

[Upgrade notes: please read]

. This new version now requires a php version greater or equal to 5.4. We also dropped support for IE7. Yes we did. Make sure that you meet these requirements before upgrading!
. If you are using the meta.mount plugin, we removed entirely the "sudo" options for security reasons. If you were relying on that, you will have to hack-it-yourself.
. The ROOT_ROLE was replaced by a "Root Group" role concept: a role corresponding to the root of all groups, and as such applied automatically to every users.

For archive deployments, upgrade should be straightforward, but for Linux make sure to check our online How-To.

[Detailed Change Log]

Massive refactoring of AjaXplorer class into various subclasses (Registry & PydioUI). (details)
Reduce global scope pollution. Fix some destroy implementations missing the cache destruction. (details)
Massive JS refactoring: Core is now Prototype-independant, fully ECMASCRIPT6, transpiled by Babel. Many refactoring to decouple core Model from UI. Basic tests with WebComponents. (details)
New resources for ES6 support. (details)
Fix group listing for shared users when inside a group (details)
Enable API for load_shared_element_data (details)
Re-adapt CartManager to new API (details)
Track ajxpNode.getChildren() usage for new api (Map instead of Hash) (details)
Missing compat file (details)
server_message "require_registry_reload" (details)
More JS modules async loading to avoid loading scripts when they are not necessary (details)
IE 9 & 10 Tweaks. Not working on IE8 Add JS modules dependencies. (details)
Test file to be used with WebComponents (details)
IE8 Support: - TODO: For the moment, disable the protolegacy stuff (drop IE7 support)? - TODO: Add es5 shim & es5 sham. To be detected based on user agent? - Strict usage of window.console, not just console. (details)
Break is unreachable code. (details)
Move loadActionsFromRegistry() (details)
Set forceReload default value (details)
Remove unnecessary images. Fix global variables Remove global delete calls - Normalize prototype class constructions Remove with calls (details)
Avoid unnecessary resources on minisite (details)
UserDashboard: do not load images as iframe. (details)
Use flexbox instead of JS height computing when possible Buffer infopanel update to avoid blinking Optimize display. Avoid multiple $$ calls, avoid updating tree node label/icon if not necessary Defer AjxpDroppables initialization during tree rendering Remove resize listener on window for Scrollbar Still todo: recheck all editors (details)
Split scripts into boot, core and ui. Currently boot is compiled old fashioned way, core is compressed & mangled, ui is compressed only. (details)
Load repositories with a unique query instead of many small queries (details)
Performances: store loaded repositories in session (details)
Performance: user queriesCache for exposed properties list (details)
LangUtils : deepCopy/merge objects, forceJSON array to object. (details)
es6: fix Registry Loading (details)
es6: try using GET and pass a ws_id paramter to use http caching on repository (details)
es6: simple support for web components (details)
Connexion: switch all requests to post by default. Api: put support for file upload / download directly inside api, implement upload inside Connexion (details)
FilesList: use display flex instead of bloc if element has vertical_fit className (details)
Simple React component wrapper inside existing UI. (details)
Prefix all flexbox stuff (details)
Index.php : read tmp_repository_id variable from get or post. (details)
User Dashboard CSS: remove home_account_pane reference (details)
JS Core: es6 transpiled version (details)
Sql Log Driver: server many queries at once. (details)
New parameter frequency on analytics queries (details)
[ajxp_conf] Add some info in the various responses. Add limit & offset parameters on recursiveSearch New method filterFormElementsFromMeta to post data in a different format that standard form parameters. Delete action: grab parameter from window.actionArguments object (details)
PydioApi: handle discrete setting FetchedResultPane: update jsdoc (details)
Insert bundle.js in gui_debug.html (details)
Add new methods to LangUtils (details)
Admin: make main menu builder more modular (details)
Handle Alias in config menus (details)
ShareCenter: Fix authorization checking for various share types. Make sure to register the REQUIRES_INDEXATION flag on syncable shared workspaces to trigger indexation at first changes API call. (details)
UserMetaManager: check metadata is not empty. (details)
Add a MAIL_ENCODING parameter in the phpmailer plugin to eventually switch to 7bit for old Exchange+Outlook configs. (details)
Reload_registry message: make sure to trigger only if required. This can end up in a loop. LangUtils new method for arrayWithout() (details)
index.php test SDK: remove webcomponent reference (details)
Reload_registry message: make sure to trigger only if required. This can end up in a loop. (details)
React Implementation of UserDashboardHome (details)
Adapt share action to window.actionArguments passing (details)
New AjxpReactComponent in _ui list (details)
All necessary exports (details)
React Implementation of UserDashboardHome (details)
Fixed minor layout problems in share dialog: * space for labels in editable_users_header was too small * editable_users_header was moved to left because of the toggle arrow (details)
Imporved german translations of sharing function and added missing keys to all files (details)
Make sure to use (details)
Manifests: make sure to replace keywords not only on label. (details)
Detect Pydio native apps by user-agent. New function renderSimpleListAsNodes Fix updateDefaultRights (from master) (details)
New hook sec.access_ws (details)
Reset content_filter option when saving repository (details)
Avoid using class_exists() in relativeDate, it's too costly for perfs. (details)
Group fields differently (details)
Update client_unregister & client_consume channel actions (details)
Optional parameter on list repositories to get only a specific template children. Editing template: unchecking boxes is broken, make sure to remove not used options from existing repo. (details)
Use applyIncludeHook instead of applyHook otherwise it messed up registry loading. (details)
fseek: $whence parameter is not properly passed to underlying stream. S3 driver: override appendUploadedData() function as the streamWrapper does not support "a+" mode. (details)
Weird cases using ; instead of : (details)
Isolate WelcomeComponents scope (details)
We should get rid of sendSync() wherever possible. (details)
rename folder (details)
Remove modernizr & ajxp_utils from booter. Compile bundle into pydio.min.js (details)
Last compile (details)
Fix IE issues. (details)
Update package (details)
Use correct version of material-ui lib (details)
New interface SqlTableProvider and use it for first install Detect session handler via conf Rest.php: there should be no reason to start the session here (to recheck) (details)
Add info inside log table (details)
Check that class is properly created (could be ignored if php 5.3) (details)
Call session_write_close to speed up the queries processing (details)
Create a pool of callbacks if a file is loaded many times at the same instant, otherwise it may reload the file from cache. (details)
Fix remoteNodeProvider: empty response could end up in the node staying in _loading mode. (details)
Do not disable session for the moment inside rest. We should instead set up a $useSession flag on ConfService similarly to AuthService - TODO (details)
Add a $useSession parameter to ConfService and use in rest.php (details)
Notification: optimize queries for userExists() calls (details)
Repository: avoid error on parentTemplateObject type (details)
PluginsService & Plugin Optimizations: -> Optimize requires file -> Load class only if plugin is enabled -> Lazily unserialize XML manifest -> Cache some xpath query results (details)
New KeyValueCache, following Doctrine/cache interface, we should embed this lib. Currently only supporting APC. Cache plugins_registry always and full xml_registry for rest case only. (details)
Expand clear_plugins_cache action to empty KVCache and eventually opcache as well. (details)
Disable many unnecessary plugins by default, avoiding to load them if not really usefull. (details)
Use $this->getXPath() instead of direct access to $this->xPath as the manifestXML may have to be loaded lazily. (details)
Disable many unnecessary plugins by default, avoiding to load them if not really usefull. (details)
Reduce DB query number for loading repository Log driver: get repository ID from context, avoid to trigger another db call. (details)
Fix es6 (using Map instead of Hash) (details)
Refactor getFilteredXMLRegistry() function Refactor clearAllCaches() function (details)
Remove actions property from AJXP_Plugin, it's useless. (details)
Second call of initActivePlugins() in rest.php seems useless. Commented, to recheck. (details)
Properly invalidate KV cache when updating user / group / role / workspace (details)
Re-enable auth.serial & conf.serial for startup (details)
Remove @internal phpdoc key (details)
Enable updateAdminRights() for the moment. TODO: we should find a way to pass through that only when required. (details)
Add constant to ignore KVCache (details)
Add $admin parameter to the countUsersForRepository function. (details)
Add iconClass and description_template to drivers client_settings XML tag. (details)
Edit meta_sources as bulk data (details)
modified: ca.php modified: cs.php modified: da.php modified: de.php modified: en.php modified: es.php modified: et.php modified: eus.php modified: fi.php modified: gr.php modified: he.php modified: hu.php modified: it.php modified: ja.php modified: kr.php modified: nl.php modified: no.php modified: pl.php modified: pt-br.php modified: pt.php modified: ru.php modified: si.php modified: sv.php modified: tr.php modified: zh-tw.php modified: zh.php (details)
Optional option "iconClass" for userWidget (details)
Remove timer on router (details)
Pass driver label in workspaces list. (details)
Handle remote sorting when trying to guess the page position. (details)
Sync ldap group membership, filter groups from group DN (details)
Documentation authfront.cas (details)
Send PLUGINS_SCOPE to roles and users as well. Add new filters user / repository_id to the sql log queries. (details)
New function usersLastConnection on sqlLogger. New sub_action users_bulk_update_roles to avoid multiple query (details)
Use multiple selector external module New function LangUtils.objectValues() to replace Object.values() (details)
Typo in new code (details)
Fix diagram axis redraw by pointing to a specific git repo instead of official release. To be changed when PR is merged and released. (details)
Fix plugins values instance_name missing parameter. (details)
Reorganize ldap parameters (details)
Remove template workspace from the list (details)
Send query metadata (details)
PrototypeJS: do not override bind method if already native version. (details)
Parameters grouping and defaults (details)
Fix #955 - Clear selection on blur was breaking actions in user dashboard. (details)
Fix #958 - Reset Password is broken due to URL rewriting when guest user is enabled. (details)
Force string comparison for md5 checks (not used most of the cases) Exclude other tags from xss detection (details)
Fix issues in git-log when spaces in folder path. (details)
Update pdfjs to last version - Close #939 (details)
Remove all touch events management, simply disable scroller replacement when on mobile context. Should fix scrolling and button issues on mobile. (details)
Bug video reading issue with the http range Should fix #954 (details)
fix settings/leftpanel in vision theme (details)
Add react-dnd to resources (details)
Add indexes on log table (details)
Set the disclaimer validation in a group (details)
Replace ROOT_ROLE concept by AJXP_GRP_/ : applied to the root of the groups. Add support for groups reordering Fix an old bug where a role could be ordered before the group tree. (details)
Save the roles ordering (details)
Pass sticky info (details)
Update default_avatar image Use no_templates & templates_only attributes to identify the scope (details)
Replace ROOT_ROLE by AJXP_GRP_/ (details)
Massive refactoring introducing a MetaWrapper to avoid encapsulate all nodes url in the pydio:// form. Wrappers specifics (getRealFSReference, getLastRealSize, isRemote, etc...) have been encapsulated as well and should not be called directly anymore. The MetaWrapper can register many subwrappers, once they are all used it will then translate the url to ajxp.XX SchemeTranslatorWrapper is an extendable wrapper simply translating URL to the next available wrapper from the MetaWrapper. Maybe could be simplified. (details)
New unit tests (details)
Fix #952 better logging Fix issue creating a group with same id is not checked Fix #937 Check that file is readable otherwise we cannot compute md5 on it. (details)
Fix issue with .zip.zip extension #953 (details)
Fix slug issue - Close #938 (details)
Better way to detect mount status (details)
Fix 5.4 syntax Remove creation of .ajxp_mount as it's not need since previous commit. (details)
Keep up-to-date with develop (details)
Grab last changes from MetaStreamWrapper branch (details)
Fix Meta.user error after refactoring (details)
Add Test Unit on Permission Mask (details)
Change permission value (details)
Delete function mergetree2 (details)
Fix available permission restriction (details)
Add more assertions (details)
permission (details)
Implements JsonSerializable() : warning this is PHP5.4 ONLY! Fix setDeny() (details)
Fix overrideMethod Init from array with "read", "write", .. object. Implements JsonSerializable, php5.4 ONLY. (details)
Store masks in roles. (details)
Manage masks (details)
Updated ajaxplorer_boot (details)
Do not load a repository that has a parentId pointing to a non-existing repo. Log an error instead. Do not store reference to this->parentTemplateObject, it can end up storing a null reference in the $_SESSION array. (details)
Fix recursive listing broken by defaultOrderField mechanism. (details)
Fix SchemeTranslatorWrapper. Store url instead of path when reading dir. (details)
Fix PermissionMask & checks (details)
Invoke is_readable() at some places to dynamically compute permissions (details)
New method appendMetaWrapper (details)
rmdir was broken due to wrapper (details)
fix preview with unoconv of files with russian names (details)
remove some tests (details)
Fix max overriding order issue Send repo security scope to UI. (details)
Fix typo in write2 function that was preventing correct Log In logging for WebUI. (details)
Allow editing permission mask for non-editable workspace Tweak how we display Root Group role When editing a group, compute a "Parent Role" based on the parent groups (details)
Use classnames module (details)
Revert ajxp_home to non-react implementation Declare build and load React bundle separately, to avoid any compatibility issues with older browsers. (details)
Root group role: do not show "ROLE_..." parameters, even if they have scope "Role". (details)
Wrong call to React library (details)
Fix AjxpTabulator layout when using Flexbox Add Roboto fontface. (details)
Fix vision & umbra theme to make them barely usable. Remove oxygen. (details)
Call isWriteable() on the root node as well, to send correct ajxp_readonly value. (details)
Missing reloadOnServerMessage on shares list (details)
Fix flex issues for minisites (details)
fix smb streamwrapper name conflict (details)
Never call the delete method of a Map directly, for backward IE compatibility. (details)
i18n update (details)
Fix splitter sizing, node insertion on descending sorting mode, remove unused variables Last booter compiler (details)
Fix startup.phtml : prototypejs moved. Booter: make set DB conf by default. (details)
Send also info about the workspaces shared with current user. Fix shares list issue - Ability for admin to list shares of a given user. (details)
Fix typo in JSON breaking the right info panel initial size. (details)
Implement Serializable on permission mask. (details)
Home Dashboard: listen to repository_list_refreshed event and reload the list. (details)
Remove the method call from the foreach() loop. (details)
Fix selectAll() action in GUI - was breaking the recycle bin empty action. (details)
Fix new Image() usage with prototype methods. (details)
Fix RepositorySelect (details)
Pass optional nodePathes on instant message to be later on filtered in channel. (details)
Add many is_readable() checks wherever we send data. Add the logged user id as target for reload_bookmarks and reload_shared_elements messages, otherwise they trigger reload on other users MsObserver: ignore refresh if no repoId change. NotificationLoader: fix comma typo (details)
Filter Changes, Feed and fork mask on shared folders. (details)
!!TODO: Update PG & SQLITE tables and drivers. Add last_updated flag on ROLES, allowing the detection to reload a user repositories list inside a running session. Use AuthService::$bufferedMessage to attach an instant message to be sent once the mq plugin is initialized. (details)
Commit bootstrap_context with KVCACHE_IGNORE by default. (details)
Ignore kv cache (details)
Auto-switch graph frequency to avoid super-heavy graphs. (details)
Create wizard breadcrumb. (details)
Add a "wizard mode" in FormManager for installer dialog. Rewrok the whole boot.conf installer with that. (details)
Add optional "depends" attribute on js ressource. (details)
Update prototypeJS to 1.7.3 - We should remove the legacy version. (details)
Boot.conf generates a simple server uuid that can be used for various identifier (kvcache should use it) (details)
Load JSON polyfill for IE7 (details)
New compression plugin to support TAR, TAR.GZ and TAR.BZ2 archive format (details)
Fix "Pixlr" plugin because they switch to "https" (details)
Revert the second call to initActivePlugins() in rest.php, as it can break some additional plugins loading after loading driver. (details)
Fix share action in rest mode : share worked but metadata was not correctly updated. (details)
Refactorize method(s) loadDriverRepository() (details)
Send back the updated role to make sure the update() was working. (details)
Update i18n messages in action.updater (details)
writeRepositoriesData: remove unnecessary code Definitely skip the admin rights check, just give the access to ajxp_conf (details)
Update restParameters and use UserSelection instead of 'file' variable in ShareCenter. (details)
Remove skip_admin_rights parameter (details)
Update grid-layout Update compression to new naming (pydio.Controller instead of pydio.actionBar) (details)
Update manifest.xml (details)
Fix soundManager load : do not check for registry. (details)
Imap wrapper: fix stat to make sure it responds correctly to the is_readable test. (details)
EmlViewer: remove unnecessary autoload (details)
Fix parseUrl() to detect pydio:// instead of ajxp.xx:// (details)
Do no use flexbox on dialog content (details)
Point to new MetaStreamWrapper Fix mobile flex issues (details)
Massive clean: remove IE7 specific resources plus unused classes or archived classes. (details)
Change check frequencies to 5s, replace "[]" to "array()" to avoid any problems later (details)
Fix is_readable() call to root. (details)
Fix long workspace names (details)
Fix double share button. (details)
Fix super long workspace names: limit to 3 letters for badge, fix CSS to adjust display. (details)
Update gitignore (details)
Adding Grunt task to compile core UI in gui.ajax (details)
Replace the ["extension"] to "PATHINFO_EXTENSION" and change the progress number to whole number (details)
Remove compiled resources. Update move dependencies at top level of gui.ajax. (details)
Ignore specific resources (details)
Updating Gruntfile.js (details)
Add a check if he user try to compress an empty folder to avoid some problems... (details)
Updating Gruntfile.js (details)
Update package.json (details)
Updating Gruntfile.js (details)
Move grunt to devDependencies (details)
Remove compiled files (details)
Ignore core (details)
AJXP_KEY_VALUE_CACHE (details)
Mega-merge from deprototype branch (details)
Double declaration (details)
Fix lucene indexation when copying files accross workspaces. (details)
Fix tag block removal (details)
Add meta watcher by default in access fs (details)
Fix various details on Share Center: display "view parameters" instead of "change parameters" if panel is in readonly mode. Disable some actions if in ajxp_* workspace. (details)
Disable kvcaching by default. (details)
Fix some flexbox issues in IE (details)
Fix IE horizontal scroller in FetchedResultPane (details)
Fix wrong shares list for workspace with id 0 : do not use empty(). (details)
Update Italian translation for plugin 'access.ajxp_conf' (details)
Update Italian translation for plugin 'access.ajxp_home' (details)
Update Italian translation for plugin 'access.ajxp_shared' (details)
Update Italian translation for plugin 'access.ajxp_user' (details)
Italian translation for plugin 'action.antivirus' (details)
Update Italian translation for plugin 'action.cart' (details)
Italian translation for plugin 'action.compression' (details)
Fix smbclient error if filename contents '#' (details)
Translate "Root Group" (details)
Fix tests syntax: use __construct(), remove strange semi-colomn after class creation. (details)
Use __construct instead of AbstractTest constructor (details)
Use __construct instead of AbstractTest constructor (details)
Light revamping of diagnostic tool. (details)
Add dirname and filename in log table to be able to filter on these. Pass a "files" array to the log method when possible. (details)
Fork materialUI and create our own branch as we are using Less framework. Update grunt file to build materialUI before bundling. (details)
Publish permission mask as json. (details)
Inform that a workspace does have a permission mask. (details)
Code Inspection (details)
Update README.md (details)
Error when removing user from share if the workspace does not have meta.watch. (details)
Narrow-down textarea selector for submitting comment, otherwise it takes the wrong one (typically if file/folder is shared). (details)
Fix some notifications issues with shared users. (details)
Fix login dialog positioning. (details)
Pass isHidden to createUser function and send to the hook as well. (details)
Add a small opacity animation on info panel async blocs to avoid heavy blinking. (details)
PhpDocs (details)
Revert specificy parameter type as it creates false negative documentation bug. (details)
Replace run build by babel to avoid dependency to jsx (details)
Add JS compilation step to the build (details)
Test an upgrade with new dev version 6.1.0 (details)
6.1.0 Release Note (details)
Typo in column name Force updating gui.ajax if any modification detected (details)
rootGroup can be empty (details)
Update sql scripts for pg and sqlite, and build script to make sure to include them correctly. (details)
Fix with pgsql file (details)
pg and sqlite sql updates (details)
Fix postgre issues with new fields / indexes. (details)
Fix mergeNodes: use cloneNode() to avoid reference mess up. (details)
Fix BackgroundTaskManager initialisation, and make sure to read the node_diff message. (details)
Tar/gz/bz2 Support : refactor compress action into compress (server) and compress_ui (client): override the latest with the new plugin action. (details)
Fix 404 error on "plugins" image. (details)
Fix message id in span (details)
Some exception can break the search results listing. Catch it. (details)
RepositoryFilter is wrong in alert feed if repo is 0 (details)
Fix opener positioning (details)
Try to skip HTACCESS step : if AJXP_PACKAGING is not zip ( = linux packages ), or if content of the htaccess is already correct. (details)
Settings and welcome were switched. Put them in the right order to fit with dist .htaccess (details)
Forgotten console.log (details)
Chasing Strict Standard issues (details)
Limit Extract action to tar, gz and bz2 files (details)
Refactor the awful JS code for triggering download in a PydioApi.downloadSelection() method. (details)
Add the filename*= header for IE, based on mwehr suggestion. To be tested extensively. (details)
Fix js errors in comments and info panel detection. Add bootstrap.json to the list of files hidden by default. (details)
Fix php parsing error in hu.php. Probably fix #930 (details)
forgotten var_dump (details)
Unused variable (details)
Remove var_dump instruction (details)
Revert the filename*= commit. Definitely not working on IE. (details)
Fix #931 (details)
Fix de language file - Close #933 (details)
Fix EXIF extractor output for XML, and add a format parameter to ask for JSON instead. (details)
Go through unnecessary todos. (details)
Add more check on user before modifying a share. (details)
Refactor minsite_session and download management. (details)
Fix "discrete" parameter passing. Fix small Open Layer map not showing when panel is hidden. (details)
Fix setting/unsetting watch on shared folder. Fix notification grouping in alert feed. (details)
Disable logo click is use is not authorized to switch to the associated workspace ( mostly ajxp_home ). (details)
Refix IE Overflow (details)
Fix metadata breaking json when no searchable is set. Fix #973 (details)
Skip updating embed_code if link is expired (error). Rewrite getFlashVersion() function (removed from Controller) in ajxp_utils. (details)
Avoid error trying to load binary without any user logged - See #946 (details)
Make sure to filter search results with access driver hidden configurations. (details)
Missing translation for desktop notification button. (details)
Add a new parameter for low-resolution background image, and trigger it if viewport width is smaller than 600px ( => mobile ) (details)
Fix FoldersTree config for smb driver (details)
Fix wrong date in search results (details)
Fix branding styling on legacy links. (details)
Make sure to pass a variable as reference (details)
Add english message to the 17th message of the plugin (details)
Add french message to the 17th message of the plugin (details)
Add english message to the 17th message of the plugin (details)
French typo (details)
Change : Now we catch error by sending them to the progress file (details)
Plugin doc of action.compression (details)
Save share after updating watch status for folder sharing (details)
Append optional bootstrap instructions by scanning once (and caching result) the plugins folders looking for bootstrap.php files. (details)
Catching some error in the extract part (details)
Same as previous but for defining / overriding default repositories (details)
Silently try to write the two new cache files, to avoid errors if data folder is not yet writeable (first screen). (details)
Overriding CSS properties in ajxp-mobile.css to improve the navigation (details)
Adding >script< at line 819 to fix JS not interpreted (details)
Set a manager on git actions (details)
Update of widget_sample, contributed by Ecappa (details)
Whitespace breaks git log : do not use --follow option in that case (will not follow renaming). (details)
Check $ctxId is not 0 (considered empty) (details)
Clean Code Deprecated Constructors (details)
Make sure to not throw errors if data/ is not writeable, or it breaks the starting script. (details)
Wrong test for write permission (details)
Do not display RootGroup for groupAdmins (details)
Modularize installer functions. (details)
Update : the message to display the progress of the exraction is compression.13 not compression.12 (details)
Turkish translate of the name and the description of the plugin (details)
Turkish translate of the different messages of the plugin (details)
Refactor Installer (details)
Fix special characters in file name # (details)
Remove oxygen in selector. (details)
Detect El Capitan (details)
Fix imagick generate office files (details)
Fix call to filterNodeName(): pass an "" parameter will trigger the is_file() test. (details)
Fix Favicon for WebDAV, was still using the old one. (details)
Although not active by default and properly documented, we remove the sudo option, it's giving too much power to the server. See discussion in #972 (details)
missing "," character in couple of en.php files - this one is related to my previously submitted PR https://github.com/pydio/pydio-core/pull/851 (details)
uploader.html Czech translation updated continuing as per the previous PRs opened under https://github.com/pydio/pydio-core/pull/843 (details)
uploader.html cs-dropzone png picture created manually in Gimp as similar as possible to the other one's available (details)
Recapitalize result keys for PostgreSQL (details)
Display a small how-to when upgrade is not possible in-app (because of linux packages). (details)
In SERVER_DEBUG mode, try to detect if a DB version is necessary, and log it both in the Pydio logs and generic error_log. (details)
Reorganize some gui.ajax parameters (details)
editor.pdfjs Czech translation (details)
core.uploader Czech translation (details)
Remove react-tap-event, loaded by material-ui (details)
Add support for authenticated upgrade site. (details)
Set package name in an external variable. (details)
Action.compression: fix name stripping on file / folder (details)
meta.simple_lock Czech translation created (details)
meta.git Czech translation created (details)
gui.user Czech translation (details)
Fix encoding issue, especially on Windows: - Parameters passed via url in rest api gets mangled because of urldecode(), make sure to re-apply toUTF8() - Once decoded, we must make sure to apply the correct encoding before inserting / searching the DB. (details)
Add composer.json to install OpenStack SDK at last good commit before the project was declared EOL. (details)
Add some checks - Do not display plugins that are disabled. (details)
action.powerfs Czech translation (details)
action.avatar Czech translation (details)
access.demo Czech translation (details)
Make sure to use a default value on mandatory group_switch field. (details)
Rename test scripts from 6.1.0 to 6.2.0 Update 6.2.0.php to re-enable plugins by default to avoid issues. (details)

-------------------

Pydio 6.0.8 - Security Update & Bug Fixes

[06.26.2015] Pydio 6.0.8 is another security update fixing XSS vulnerabilities discovered by Lane Thames and William Sörderberg.
It also fixes various issues with indexation, sorting, and reverts some changes from previous version.
Upgrade is straightforward and recommended, either in-app (archive deployments) or via Linux repositories (apt-get / yum).

Contributors: cdujeu, Lane Thames, William Sörderberg, c12simple, DepaMarco, FireFoxIXI, Sandoracs

Minor update of german translation (mainly to unify the strings)
Small fixes for the german translation of access.ajxp_conf
Add LDAP support.
Italian translation for plugin 'meta.monitor_fs', 'mq.serial','mq.sql' and FIXED English one
Italian translation for plugin 'shorten.bitly', 'shorten.multi', 'uploader.flex', 'uploader.html', 'uploader.http'
Add delete button on minisite
Fix meta.mount fs on 6.0.7
Reload_registry message: make sure to trigger only if required. This can end up in a loop.
Mysql: Tablename may create an error when getting size and count
Added minor tweaks for getting the S3 driver working with EMC ViPR
Add new DIRNAME mode for sanitization, same as filenames except that it lets the / pass through. Use strpos() instead of deprecated ereg() function.
Should fix #912 (alert on watch broken in some cases)
Fix #919 - Disable right click in FetchedResultPane
Tweaks to support "dot" character in custom links handle - Fix #905
ShareCenter: Fix authorization checking for various share types. Make sure to register the REQUIRES_INDEXATION flag on syncable shared workspaces to trigger indexation at first changes API call (should fix #913)
UserMetaManager: check metadata is not empty. (cherry picked from commit ac99bf4)
Add a MAIL_ENCODING parameter in the phpmailer plugin to eventually switch to 7bit for old Exchange+Outlook configs. (cherry picked from commit 98eebeb)
Perf: load repositories with a unique query instead of many small queries (cherry picked from commit c955991)
Slight doc issue
Italian translation for plugin 'uploader.jumploader'
Italian translation for plugin 'uploader.plupload'
Updated Italian translation for plugin 'core.ajaxplorer'
Hide Native App download panel on Windows Phone
Fix minisite login background by loading configs via JS.
Clean listing code for sorting, get page_position on demand when listing unique file, fixes search results not going to correct page when pagination is on.
Antivirus: make sure to do nothing when node is a folder, do not scan it!
Repository Creation Time was overriden by parent repo when created for sharing.
Fix 2G limitation on windows in many places ( do not use filesize directly )
Repository securityScope() : check the CONTAINER option if it exists for object-based drivers.
Fix auto update via proxy
revert cef1688f1e38830badefa1d147b48400cd09d7f2
Add a default sorting field and direction for server sorting. Set this params via the filesystem mixin instead of access.fs only.
Fix SearchEngine template configuration issue on various remote drivers.
Catch an OpenLayer error.
Fix and improve various sorting aspects. Deselect everything on blur in search engine and fetchedresultpane, otherwise further click on the same item does nothing.
Catch Zip decompression errors.
Fix workspaces securityScope() for templates that predefine a Path (or Container) value.
Make sure to not propagate a share event to a workspace parent if it's a template.


--------------------
Pydio 6.0.7

Security Update

Pydio 6.0.7 is a Security Update linked to vulnerabilities discovered by Lane Thames. It also fixes various small bugs.
Upgrade is straightforward and recommended, either in-app (archive deployments) or via Linux repositories (apt-get / yum).
Contributors: Cdujeu, Lane Thames, C12simple.
SMB Auth: include domain name to user name (details)
Get list of repository automatically (details)
Massive refactoring of ElasticSearch plugin. Keyword search and indexed fields is working. (details)
AuthService test userExist and create new (details)
Add new parameter in ShareCenter to force password on public links. (details)
InfoPanel: catch modifier evaluation error - CSS: hack transparent backgrounds for IE8 using \9 symbol. (details)
Correct smb path string (details)
ShareCenter : fix link pointing to a non-existing repository (details)
ShareCenter.js: forgotten console calls (details)
ShareCenter: Catch exceptions when forwarding changes, otherwise it stops the loop. (details)
AjxpUtils::convertBytes : handle comma - Ajxp_VarsFilter::filter : pass an object or an id as resolve user (details)
Major update of ElasticSearch implementation / Refactor some method to common parent with Lucene. (details)
Check userExist to create new user for new sharing (details)
Add a new dependency type phpExtension to avoid loading plugin that have a strong dependency to one or more php extensions. (details)
Remove (beta) from sync clients buttons (details)
ShareCenter: Fix "Preview" checkbox being automagically rechecked. Check template is not ajxp_unique_dl. (details)
Start refactoring major JS resources. Split into subfolders. (details)
Display admin Search Results with USER_DISPLAY_NAME (details)
Webdav error on smb workspace (details)
Shared user watch is not correctly removed when user is removed from "Share with..." list. (details)
Improve sanitization in Mysql driver and locally in XHRUploader. (details)
Limit API connection "Login" logs to one per hour, otherwise it fills the log table, and makes the analytics quite slow. (details)
Better commands sanitization to limit admin rights. (details)
Fix text logger: was broken due to the clone call on object: refresh the fileHandle resource on clone. (details)
Fix group listing for shared users when inside a group (cherry picked from commit a9fdc8c) (details)
Ability to use multiple secure_token in one session, to avoid force reload on new tab. Notify existing windows with <require_registry_reload>. (details)
IE8 Fixes - Fix #899 : remove tooltip when refreshing templates. (details)
Make Etherpad more simple: support only .pad extensions, disable hideExtension() hook. (details)
Refix c0205642045e943c086eb054f3947d5311d9997e : case is different if group listing is allowed on all groups or sub groups only. (details)
Pass AJXP_VALUE_CLEAR as metadata value to force clearing key after array_merge() (details)
Fix un-removed notification by checking ACL when listing the watches and updating metadata accordingly. (details)
Fix Zip options tweaking, by properly separating zipBrowsingEnabled vs. zipCreationEnabled. (details)
Use Dibi syntax for cross-db limit (details)
Fix Jumploader not correctly sending node.change event (thus missing indexation) (details)
Fix PLUploader : new way to get secure_token (details)


------------------
Pydio 6.0.6 - April 9, 2015

Pydio 6.0.6 mostly provides bugfixes and security improvements for the v6 branch, but it also adds some interesting features in the field of metadata and search engine.
Upgrade is straightforward and recommended, either in-app (archive deployments) or via Linux repositories (apt-get / yum).
Contributors: Cdujeu, DepaMarco, C12simple, Ellega, Kluckow, Huzergackl, Raiatea, Garnetius, Svetlemodry. Big up!

## New Features
New Mozilla PDF.JS pdf viewer.
New metadata type "tags" with auto-completion and special display.
Rework of the SearchEngine ergonomy: better list reloading, direct access to advanced mode, better handling of advanced external metadatas.
New filter action in Datagrid for logs: quick filtering on any column value.
Add a button in settings to clear cache
Revert the automatic switch to mysqli, which seems to create problems on some systems.

## Plugins Fixes
[meta.mount] Remove type strict comparison for mount_env_passwd option. (details)
[action.powerfs]PowerFS don't works if Command Line "enable" and accent (Windows OS) (details)
[auth.cas] Fix cas in client mode (click two times for login) (details)
[scheduler] Form validation for Schedule Task at client side (details)
[scheduler] Clean scheduler actions - Fix #838 Fix french translation (run current task, not tasks) (details)
[action.share] Update the plugin JavaScript code for iframe and shared file preview. (details)
[access.s3] Fix setMetadata() on metastore.s3 plugin, broken for non-ascii chars, the CopySource parameter must be urlencoded. (details)
[metastore.s3] Use rawurlencode instead of urlencode (details)
[editor.imagick] Add Illustrator File to Image Magick (details)
[editor.ckeditor] Adding a delay in CKEditor data loading seems to avoid random blank screen. (details)
[auth.cyphered_post] Add a switch to active repository (details)
[authfront.otp] Fix login form display in authfront.otp. (details)
[editor.etherpad-lite] Big update of the Etherpad-lite integration. Seems like we cannot detect pads with no author, we would have to set up a task to clean orphan pads. Should Fix #865 Fix #867 (details)
[meta.mount] Set the "use 32 result code as success" via option (default true for non-regression). Close #824 (details)
[index.lucene] Better error logging when lucene fails to open or create an index. (details)
[index.lucene] Lucene: detect if the tmp index is currently being modified (last 3 minutes) to avoid multiple indexation tasks loaded concurrently. (details)
[index.lucene] Fix meta fields indexation issues (on node.change event). (details)
[action.powerfs] Use DIRECTORY_SEPARATOR in powerfs plugin for operation_id file. (details)
[mq.sql] Notifications queuing: fix SQL implementation that fails selecting the max value as the column is varchar (use sql CAST expression). Remove unnecessary create.sql scripts. (details)
[core.index] Do not call is_dir on trigger node.index on the root node. It can create problems with non-fs workspaces like SMB for indexation. (details)
[access.fs] Internalize setHiddenAttribute in fsAccessDriver instead of AJXP_Utils (details)
[mq.sql] Feedstore: forward "reload_user_feed" event to parent repository if any. Fix i18n issues for "watch/stop watching" button Ignore notif to delete if already deleted. (details)
[sync] Detect when update queries are applied on non-indexed items using getAffectedRows() (details)
[sync] Automatically disable the keystore generate_auth_token action if Session Set Credentials is set in config. This will force systematic basic_auth. (details)

## Core & Performances
Core performances: . AJXP_Controller: Minimize xPath calls by implementating a hookCache . AJXP_Plugin: reduce serialization - AJXP_PluginService: Try to use cache for softLoad operation (still return a cloned version of the cached plugin) . AJXP_Utils: cache the result of cleanDibiDriverParameters() function as it is called many times. (details)
Fix OS detection - Add iPad & iPhone (details)
RunTests: Fix apiPost function() (details)
If a client is posting bad parameters, it can end up copying a file into itself. (details)
Revert the automatic switch to MySQLi, add a parameter instead. (details)
Perfs: avoid reapplying role if already in the user's roles. (details)
Hard reload node data with clearstatcache() call on node update Add a seed with file modiftime to make sure thumbnail is reloaded on change (details)
Fix comparison issue for AJXP_METADATA_ALLUSERS value. Could lead to share metadata. (details)
Typo in mailer, fix #864 (details)
Fix various issues with Forget Password action - Fix #863 (details)
Prevent some plugins to be disabled - Close #873 (details)
Add utils in node for moving meta on node change (details)
Add a hook on node.change to move bookmarks metadata, should fix #870 We should refactor all the bookmarks management into a proper plugin. At the moment, moving to recycle is not considered deleted. (details)
Use protocol in runTests script - Fix #871 (details)
Set nodes as nonLeaf when we know it - Fix #859 (details)
Add the function filterNodeName() to the AjxpWrapperProvider, and use it in the webdav collection to correctly load the hidden files/folders configurations. Alternative to fix #862 and fix #861 (details)
Fix edge-case where user cannot change its starting workspace (details)
Now that we need rewrite rules anyway, set the corresponding option to true by default in action.share (details)
Switch TRANSMIT_CLEAR_PASS to hidden parameter (don't remove it totally for backward compatibility) - Close #875 (details)
Add a getOptionAsBool() function abstractAuthDriver and use everywhere we use TRANSMIT_CLEAR_PASS. Handle all possible values (true, "true", 1, etc...). (details)
Plugin : load global_param and param configs definitions (details)
Do not override __AJXP_VALUE_SET__ value. Typo in AJXP_SAFE_SECRET_KEY. (details)
Move decypher function in AJXP_Utils instead of AbstractAjxpUser. Do not override __AJXP_VALUE_SET__ when parsing standard form. New parameter $complexChars in generateRandomString function. (details)
Unused decodeUserPassword method (use AJXP_Utils instead). (details)
Use AJXP_Utils function for decyphering password (details)
Make sure not to use the repositories cache if not yet initialized. (details)
Meta.quota: make sure to respect hierarchy by trying to get quota of parent repository owner if it exists (can be a template child without owner), then from the currently logged user, then from the repository config. Fix #884 (details)
Hunting while(!feof(..)) calls missing a test on the resource: can trigger an infinite read and a CPU hog. (details)
Default "Cache Master Users" parameter to False instead of True (details)
Remove meta_fields, meta_types, meta_labels from node metadata, use exposed plugins configs instead. Fix CSS labels on detailed view. (details)

## Authentications & Security
Strip query string part of the url, otherwise using query like ?xdebug=true appends the query part to the base value. (details)
Login: empty the fields values only after response is received. (details)
Pass session credentials to command line via ENV variable. Generate a unique secret key at install for tokenisation of CLI calls instead of using default one. (details)
Prefix cyphered passwords inside role parameters with a specific string. listParameters() removes prefix by default, can either keep it ($preserveCypheredPasswords) or blur passwords ($blurCypheredPasswords) by replacing with __AJXP_VALUE_SET__ value. (details)
Massive changes for better handling parameters values in ajxp_conf driver. (details)
Fix various buttons issues with reset password (fix #885) and handle case insensitive logins. (details)
Add more logs for various "preview" operations (Imagick, Diaporama, etc) (details)
Fix pruneTemporaryKeys for PostgreSql (details)
FINAL_KEY is not used anymore, remove it. (details)
AJXP_Utils: Make sure to remove = from base64encoded string when generating random string. (details)

## GUI
In standard List mode, show additional metadata (like in v5) by hovering rows with mouse. Permanent display can be customized by CSS.
Change place of "Set as default workspace" checkbox as it was no more accessible. (details)
Missing fitParent creates resizing issue in IE for My Account pane. (details)
Rework of the SearchEngine ergonomy: better list reloading, direct access to advanced mode, better handling of advanced external metadatas. New filters feature in FilesList to dynamic filter contents. In table mode, adds headers with input texts. In standard List mode, show additional metadata (like in v5) by hovering rows with mouse. (details)
Activate the new filter action in datagrid for logs (details)
Add a "filter" button using the new FilesList feature in ajxp_datagrid : applicable to logs directly. (details)
Fix Search input opening when media queries are applied (details)
Reset MetaSource selector after adding (to focus on the new instance). (details)
Fix scroller issue (details)
Fix message box blinking and style. (details)
User.js Detect and log circular references Fix circular references in AjxpTabulator (init Tab with object clone). (details)
Fix small glitch in PreviewFactory (details)

## Internationalisation (i18n)
Update de.php (details)
missing "," character in various en.php files (details)
Fix workspace display when using russian language on IIS. (details)
Italian translations (details)
Updated german translations, fixed translation keys and made more plugins translatable (details)

Pydio 6.0.5 - Bugfix Release, again

This is fixing some annoying issues introduced by 6.0.4. Upgrade is recommended and simple. Changes described below.

Revert "close search engine on context change" as it breaks results pane in admin (details)
Move Multi & WebFTP login screen into dedicated authfront plugin, as previous fixes in AJXP_PluginsService changes the plugins loading order. (details)
Prevent FTP login screen modal closing (details)
Fix #847: share link with non-ascii filename on windows IIS (details)
Fix scrolling issue: use a fixed scrolling step instead of a fraction, could make it hardly usable for long listings (details)
Upgrade instructions

In-app upgrade: automatic.
Linux Packages: automatic via yum / apt-get


Pydio 6.0.4 - Bugfix Release

Date: March, 3rd 2015
License: Affero GPL
Download: Sourceforge Project
Source Code: Github Project
Copyright: Abstrium SAS / Charles du Jeu 2015
Upgrade: In-app upgrade for archives installs - RPM/DEB update
Contributors: Charles du Jeu, Tran The Cuong, Andypmuc, Ndeet, Flauschbaellchen - Thanks to all of you!

Update de.php
Fix #834 - Wrong message on group deletion
CartManager is triggering the old-fashion public link
Make sure to push the newly activated plugins at the end of the list. Should fix #822
Transport a contextual user ID as a node property or through the URL. Pass a contextual user to the VarsFilter::filter() function Fix shareEventsForwarding when in a personal workspace (shared events not going to parents, preventing sync for example)
Performances: do not call getRole() again if role is already loaded in the loop
Meta.mount: New option to delete mount point on unmount
Fix #803
Open search box when clicking on magnifier.
Modal: handle case where dialogTitle is positioned absolute. Modify CSS accordingly.
Typo prevented shared users deletion when not logged as admin
Try base64_decode for legacy - Was breaking the mp3 player in a shared minisite
Fix repository exposed property, values not correctly retrieved
Error in slug generation, make sure to look at the reserved slugs when building new ones
Share users list: Add an option to not trigger any listing if no regexp is sent
Fix error if msgExchanger is not set.
Use loadNodeInfo() instead of stat in ChangesTracker, otherwise eventForwarding can end up indexing a folder as file.
[index.lucene] Typo calling getUser() on wrong object
Introduce an AJXP_METADATA_ALLUSERS metadata users scope to gather meta from all users. Used in eventForwarding for ShareCenter.
Big refactoring to decouple meta.syncable from index.lucene: core.index is now responsible for triggering a recursive indexation and sending corresponding events.
Fix #842 : API issue on IIS when in root folder.
Fix inZip detection for UserSelection built without "dir" parameter.
Set pydio global variable from within AjaXplorer class, not only Bootstrap (skip updating bootstrap)
Consume_channel: avoid repeating query if previous query is not yet finished
Make sure to unset currentIndex to trigger the __destruct function and release all handlers on files. Prevented the cleaning of the TMP index on Windows.
Fix Quota computation on MacOS server
The indexIsSync() feature can be triggered with bad value, creating issues in synchro
Comment out debugs from authfront.keystore , too verbose.
Refactor upload method to make it more readable. Fix wrong event sent after partial uploads.
Translate PHP errors
Move fsAccessDriver functions to its parent AbstractAccessDriver
Update "Observe Storage" mechanism to make it more reliable and less frequent.
Do not set default plugin value if not in meta source.
Fix Analytics Dashboard for Sqlite and PostgreSQL drivers
New parameter in Index.Lucene to hide the "My Shares" section
Close SearchEngine on context_changed
Mark a repository for REQUIRES_INDEXATION at share time. Trigger indexation if necessary when requiring changes - Fix auto-indexation on first search.
Trigger events on workspace before/after create/update/delete Hook indexers (lucene & meta.syncable) to the after_delete event to clear the indexes.
Sync: trigger client last_seq reset if the sequence ID is greater than the current max of the changes table. Foresee the need to vacuum the changes table.
Search results are limited by max-height (ndeet)
Fix Dav configuration when Server URL is set (andypmuc)
Sanitize function: trim spaces only no the left, or it can break when syncing files with trailing space
Secure error message on rename operations by catching the result

Pydio 6.0.3 - Important Bugfix release

Date: Feb, 10th 2015
License: Affero GPL
Download: Sourceforge Project
Source Code: Github Project
Copyright: Abstrium SAS / Charles du Jeu 2015
Upgrade: In-app upgrade for archives installs - RPM/DEB update
Contributors: Charles du Jeu, Tran The Cuong, Nicolas Pouliquen, DepaMarco, Elangenhan, Gerald ST, NHellFire, Anael Mobilia, Dmitri Bosenko, Jaroslav Lichtblau - Thanks to all of you!

Probably found the root cause of "Ooops your language file is empty..."
Admin Delegation: fix various criteria filtering and workspace listing conditions that were breaking template-created workspaces for group Admin, as well as returning wrong users count (although correct users list).
Fix various customization options: logo height/width + add a class to the main element observing the current workspace slug, can be used for specific welcome, settings, etc styling.
Changed action name
Changed action name
Added Plugin Parameters
Added configuration parameters
meta.user plugin translation into Czech
meta.comments plugin translation into Czech
core.ajaxplorer Czech translation update, as there was already something available
FIX: Changed some translations to convert accented letters
FIX: Some other little changes in Italian translations
Fixed some little translation error
FIX: Italian little fixes
Italian translation for plugin 'editor.imagick'
Italian translation for plugin 'editor.openlayer'
Italian translation for plugin 'editor.other'
Italian transtaltion for plugin 'editor.pixlr'
Make sure to use the dirDefault attribute when overriding the ls action, or it can be lost by XML merging. Was breaking folder opening in guest user mode.
Fix video player overlap with menu in FF and IE
Fix wrong typing for settings leftpane initA value, was making the right pane disappear if folded.
Fix positioning problems that could lead to the right panel totally disappearing
Stop observing click after clicking on a workspace to avoid multiple loading Replace margin-top by top positioning to use window height instead of window with as reference. z-index and width fix in gui.ios
Faster Loading GUI
conf.sql plugin Czech translation
Update ru.php
access.mysql Czech translation
missing "," character in access.mysql en.php file causing missing string via php2po transition
Fix cpane_container positioning for minisites
Update ru.php
Create ru.php
Update ru.php
Update ru.php
Update french translation
Expand a simple diagnostic tool to test REST API on a given workspace. Call runTests.php?api=true to trigger.
Filter the for(var k in ...) entries with hasOwnProperty() call in RoleEditor. Fixes #789
Do not include shared repositories in updateAdminRights or it can end up filing the role with tons of repos.
Fix sqlite deleteRepository case - Use better error message and log SQL error. Fix #779
The return of the QRCode - Fix #783
Add an optional parameter to use a specific header value (e.g. X-Forwarder-For) instead of local detected IP in the logs. Fix #763
Do not trigger error on fopen (it is catched later).
Experimental feature to monitor underlying storage changes. To be tested.
access.fs: Sort filenames case insensitive
Index new detected items recursively
Move folder operation for s3: get all keys with prefix, copy objects to new key and delete old ones.
Make sure to catch exception on S3Client->headObject calls. Could lead to NoSuchKeyException in some cases (minisites).
Make sure to use minisite_session parameter in plUploader
Plupload Fix Minisite-Problem
Italian translation for plugin 'editor.soundmanager'
Italian translation for plugin 'editor.text'
Italian translation for plugin 'editor.video'
Italian translation for plugin 'editor.webodf'
Italian translation for plugin 'editor.zoho'
Fix videos tutorial zIndex issue
Fix #807 - Change language on Public minisite Error
In some case it's possible to hit save on non-writeable workspace, which creates duplicates. Fix #806
UI bug, fix #796
Issue in static repository id was creating a bug in updateAdminRights, inflating admin role until DB error.
Disable guest user detection for minisite. UpdateAdminRights : do not call method in foreach loop
Display a new panel in My Account to manage api keys. Let this plugin active for all protocols otherwise it will not appear in web interface. Ability to manually revoke one or all keys. Hook to the new user.after_password_change event to revoke all keys automatically. New osFromUserAgent function for prettier display. Minor tweaks in core js/css
Fix guest login screen
Drop IE6 support (png hack, useless) Clean parameters passed to bootstrap using exposed plugin configs instead. Create aliases in window: pydio and pydioBootstrap objects:
fix typo
Clean legacy hard-coded gui preferences, and use get/setUserPreference method in classes. Make sure display pref is loaded at init time for FilesList, shoud fix #777
Fix "Share folder as workspaces only" parameter
Re fix #777 : hidden columns were broken
Little Charset bug in User Feed
Italian translation for plugin 'gui.ajax'
Italian translation for plugin 'gui.ios'
Italian translation for plugin 'gui.light'
Italian translation for plugin 'gui.mobile'
Italian translation for plugin 'gui.user'
Replace dibi minified by latest head to fix #610 Add autoloader for dibi and remove requires
Display issue in non-writeable workspaces
Performance issues with innerText usage
Make sure to re-display the authorization URL in case of step 2 error.
getFilteredOption() : pass an optional userObject to be used as mergeRole resolver
Quota filtered Option: grab values from parent repository owner, not current user.
Better response for update_user_group - Fix #725
Add IPTC support, inspired by and close #577
ZIP with SMB Access don't work
Fix tree issue when domain name contains 'plus'. Manual merge & close #681
Fix #819 (missing log refresh button) and fix #820 (restore old "Copy as Text" button)
Fix the way scheduler handle the "*" users to make it less consuming (not necessary to load whole user objects, jst their ID.). Always use queue mechanism.
Perf issues with massive ldap directories: divide listing time by 2
Add an option to disable the bruteForce test (and thus the Captcha)
New option "leavesOpenOnSelect" on search engine used in the admin panel, to avoid never-ending searching on the correct user page. Fix #814
Catch handle erros on purge operations
Use background-size: cover when possible (fix #821)
Fix login header in multi mode. Remove login_patch.xml that was not used anymore
Fix api test script
Make sure db is connected for serial-based setup that would use the DB only for indexation.
Fix API Auth form some server+php configs
Add the comment SetEnvIf instruction for PHP-FPM setups.
When fake MemberOf enabled, depend ldap system, the member/memberUid value (attribute of group) is cn (short) or dn (full name). In general, this value is dn but in ldap of Apple, he use cn
Do not set write persmission on stat_hash, or it prevents the sync of readonly workspaces


Pydio 6.0.2 - Microfix for install screen

Previous release fixed XML problems by xml-encoding some messages, which breaks the HTML display of the install wizard.
Please see 6.0.1 for release note.

Pydio 6.0.1 - Bugfix & Security Release

This is a bugfix & security release for v6. Upgrade is recommended. Main bugs fixed are:

White-screen on upgrade if Server URL is manually set
Italian language breaking workspace creation
New ldap_paged_control php functions can issue warnings on php 5.6
Fix WebDAV root listing and authentication problems on REST api.
A potential vulnerability reported by Axel Hinrichs

Date: Dec, 12rd 2014
License: Affero GPL
Download: Sourceforge Project
Source Code: Github Project
Copyright: Abstrium SAS / Charles du Jeu 2014
Contributors: Charles du Jeu, Tran The Cuong, Axel Hinrichs

Changelog

Fix SQL. insert on update a role (improve performance only for mysql)
Add script to upgrade 525 to 600
Fix ldap_paged_control issues and warnings
Fix Regexp for parsing minisite_session, could break IE & FF downloads for password protected links
Make sure that stream is correctly opened, otherwise it can fill the log with errors.
Fix html base if set via SERVER_URL parameter
Fix authentication on rest api
Missing translation on the first 3 fields of the create user dialog (via sharing).
Fix root listing of webdav (accessing to /shares/)
Add a parameter to open workspace by simple click in the home page.
Make sure to xmlEntities() the CONF_MESSAGE and MIXIN_MESSAGE values as we are inside attributes.
Update share.php template


------------------------------
Last Major release Pydio 6.0.0
------------------------------

The Pydio Team is thrilled to announce Pydio 6, a major stable release. Main features include a full UX reloaded, new
server capabilities to enable sync with the future PydioSync client, an analytics dashboard for admins, and many, many
more. You can have a complete product tour here.

IMPORTANT: if you are using the following plugins: auth.serial_otp, auth.cas, auth.basic_http, PLEASE DO NOT UPGRADE
NOW as they must be replaced by their new 'authfront' counterparts. Please read more on this How-To.

Release Data

Date: Dec, 3rd 2014
License: Affero GPL
Download: Sourceforge Project
Source Code: Github Project
Copyright: Abstrium SAS / Charles du Jeu 2014
Upgrade: In-app upgrade for archives installs - RPM/DEB require manual script upgrade
Contributors: Thomas Nicot (UX), Charles du Jeu, Tran The Cuong, Nicolas Pouliquen, Pär Strindevall, Martin Schaible,
Lawrence Ho, Arnold van Blanken, Marco De Pardi, Anael Mobilia, Dmitri Bosenko, Florian Vogt, Gerrit Pannek, Max Ruman,
Stefan Huber, Christian Foellmann, John Regan, Sylvain Mandon, Gerald Me, Matthieu Simon, Florian Huwyler,
Aaron Guggisberg, Stefan Wüthrich, Teki Imai, Nicola Mustone, Mike Rhuner, Mike Smorul, Pablo Daniel Rey, Steve Ludovicy,
Lukasz Lis.


Upgrade Process

Archive-based installs (zip/tar.gz):
From 5.2.5: automatic with in-app upgrade. Make sure to backup both your DB and your files.
From 5.3.4(dev): automatic with in-app upgrade, only files are impacted.
Linux packages (deb/rpm) - Please READ
Please read the detailed upgrade how-to. Baseline is that the apt-get/yum will not update DB, but there is a script ready for that, that you can run manually.

--
See core/doc/PREVIOUS_RELEASES file to learn more about previous releases.