From be71795fc558dce100eb954c4de3b5e89d414713 Mon Sep 17 00:00:00 2001
From: Uwe Steinmann <steinm@debian.org>
Date: Wed, 3 Dec 2025 16:41:57 +0100
Subject: [PATCH 01/17] - fix formatting of date input fields

---
 CHANGELOG                               | 1 +
 views/bootstrap4/styles/application.css | 1 +
 2 files changed, 2 insertions(+)

diff --git a/CHANGELOG b/CHANGELOG
index a816da919..f48703689 100644
--- a/CHANGELOG
+++ b/CHANGELOG
@@ -15,6 +15,7 @@
 - use table sorter on clear cache page and conversion services page
 - droping an url in the drag&drop area will download the url
 - add button to all password fields to make password visible
+- fix formatting of date input fields
 
 --------------------------------------------------------------------------------
                      Changes in version 5.1.42
diff --git a/views/bootstrap4/styles/application.css b/views/bootstrap4/styles/application.css
index 951425d14..804e82272 100644
--- a/views/bootstrap4/styles/application.css
+++ b/views/bootstrap4/styles/application.css
@@ -283,6 +283,7 @@ a.accordion2-toggle:focus, a.accordion2-toggle:hover {
 }
 .datepicker {
 	border-radius: 0px;
+	padding: 0.375rem 0.75rem;
 }
 span.datepicker {
 	padding: 0px;

From 2db5c33fa64ee2423c677dac2bafc80fecc42687 Mon Sep 17 00:00:00 2001
From: Uwe Steinmann <steinm@debian.org>
Date: Thu, 4 Dec 2025 10:40:42 +0100
Subject: [PATCH 02/17] remove empty option when allow-empty is set

---
 views/bootstrap4/class.Bootstrap4.php | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/views/bootstrap4/class.Bootstrap4.php b/views/bootstrap4/class.Bootstrap4.php
index b2f366967..8d355c6ad 100644
--- a/views/bootstrap4/class.Bootstrap4.php
+++ b/views/bootstrap4/class.Bootstrap4.php
@@ -1197,8 +1197,8 @@ background-image: linear-gradient(to bottom, #882222, #111111);;
 						echo ' '.$a[0].'="'.$a[1].'"';
 				echo ">";
 				if(isset($value['options']) && is_array($value['options'])) {
-					if($allowempty)
-						echo "<option value=\"\"></option>";
+//					if($allowempty)
+//						echo "<option value=\"\"></option>";
 					foreach($value['options'] as $val) {
 						if(is_string($val)) {
 							echo '<optgroup label="'.$val.'">';

From 8dd79092671266fc75fa9256b4355f525f142e58 Mon Sep 17 00:00:00 2001
From: Uwe Steinmann <steinm@debian.org>
Date: Thu, 4 Dec 2025 18:16:44 +0100
Subject: [PATCH 03/17] use complete to file loaded by pdf viewer

---
 views/bootstrap/class.DocumentVersionDetail.php | 3 ++-
 views/bootstrap/class.ViewDocument.php          | 4 ++--
 2 files changed, 4 insertions(+), 3 deletions(-)

diff --git a/views/bootstrap/class.DocumentVersionDetail.php b/views/bootstrap/class.DocumentVersionDetail.php
index 99317fe7c..d4256223a 100644
--- a/views/bootstrap/class.DocumentVersionDetail.php
+++ b/views/bootstrap/class.DocumentVersionDetail.php
@@ -83,6 +83,7 @@ class SeedDMS_View_DocumentVersionDetail extends SeedDMS_Theme_Style {
 
 	function preview() { /* {{{ */
 		$dms = $this->params['dms'];
+		$settings = $this->params['settings'];
 		$document = $this->params['document'];
 		$timeout = $this->params['timeout'];
 		$xsendfile = $this->params['xsendfile'];
@@ -130,7 +131,7 @@ class SeedDMS_View_DocumentVersionDetail extends SeedDMS_Theme_Style {
 			case 'application/pdf':
 				$this->contentHeading(getMLText("preview"));
 	?>
-				<iframe src="../pdfviewer/web/viewer.html?file=<?php echo urlencode('../../op/op.ViewOnline.php?documentid='.$version->getDocument()->getID().'&version='.$version->getVersion()); ?>" width="100%" height="700px"></iframe>
+				<iframe src="<?= $settings->_httpRoot ?>ext/pdfviewer/res/web/viewer.html?file=<?=  urlencode(getBaseUrl().$settings->_httpRoot.'op/op.ViewOnline.php?documentid='.$version->getDocument()->getID().'&version='.$version->getVersion()); ?>" width="100%" height="700px"></iframe>
 	<?php
 				break;
 			case 'image/svg+xml':
diff --git a/views/bootstrap/class.ViewDocument.php b/views/bootstrap/class.ViewDocument.php
index c650418a7..93475228b 100644
--- a/views/bootstrap/class.ViewDocument.php
+++ b/views/bootstrap/class.ViewDocument.php
@@ -615,7 +615,7 @@ $(document).ready( function() {
 					$this->contentHeading(getMLText("preview"));
 ?>
 			<div style="width:100%; height: 0; position:relative; padding-top: 141%;">
-			<iframe src="<?= $settings->_httpRoot ?>ext/pdfviewer/res/web/viewer.html?file=<?php echo urlencode($settings->_httpRoot.'op/op.ViewOnline.php?documentid='.$latestContent->getDocument()->getID().'&version='.$latestContent->getVersion()); ?>" _width="100%" _height="100%" style="position: absolute; top: 0; left: 0; bottom: 0; right: 0; width: 100%; height: 100%"></iframe>
+			<iframe src="<?= $settings->_httpRoot ?>ext/pdfviewer/res/web/viewer.html?file=<?php echo urlencode(getBaseUrl().$settings->_httpRoot.'op/op.ViewOnline.php?documentid='.$latestContent->getDocument()->getID().'&version='.$latestContent->getVersion()); ?>" _width="100%" _height="100%" style="position: absolute; top: 0; left: 0; bottom: 0; right: 0; width: 100%; height: 100%"></iframe>
 			</div>
 <?php
 					break;
@@ -652,7 +652,7 @@ $(document).ready( function() {
 					$this->contentHeading(getMLText("preview_pdf"));
 ?>
 				<div style="width:100%; height: 0; position:relative; padding-top: 141%;">
-				<iframe src="<?= $settings->_httpRoot ?>ext/pdfviewer/res/web/viewer.html?file=<?php echo urlencode($settings->_httpRoot.'op/op.PdfPreview.php?documentid='.$latestContent->getDocument()->getID().'&version='.$latestContent->getVersion()); ?>" _width="100%" _height="700px" style="position: absolute; top: 0; left: 0; bottom: 0; right: 0; width:    100%; height: 100%"></iframe>
+				<iframe src="<?= $settings->_httpRoot ?>ext/pdfviewer/res/web/viewer.html?file=<?php echo urlencode(getBaseUrl().$settings->_httpRoot.'op/op.PdfPreview.php?documentid='.$latestContent->getDocument()->getID().'&version='.$latestContent->getVersion()); ?>" _width="100%" _height="700px" style="position: absolute; top: 0; left: 0; bottom: 0; right: 0; width:    100%; height: 100%"></iframe>
 				</div>
 <?php
 				}

From 9c05a0ee3a9af8d8803cef083578a5a72cfa3e9c Mon Sep 17 00:00:00 2001
From: Uwe Steinmann <steinm@debian.org>
Date: Thu, 4 Dec 2025 18:29:48 +0100
Subject: [PATCH 04/17] use pdfviewer only if extension is enabled

---
 views/bootstrap/class.DocumentVersionDetail.php | 4 +++-
 views/bootstrap/class.ViewDocument.php          | 2 ++
 2 files changed, 5 insertions(+), 1 deletion(-)

diff --git a/views/bootstrap/class.DocumentVersionDetail.php b/views/bootstrap/class.DocumentVersionDetail.php
index d4256223a..f70279745 100644
--- a/views/bootstrap/class.DocumentVersionDetail.php
+++ b/views/bootstrap/class.DocumentVersionDetail.php
@@ -129,10 +129,12 @@ class SeedDMS_View_DocumentVersionDetail extends SeedDMS_Theme_Style {
 	<?php
 				break;
 			case 'application/pdf':
+				if (!$settings->extensionIsDisabled('pdfviewer')) {
 				$this->contentHeading(getMLText("preview"));
 	?>
 				<iframe src="<?= $settings->_httpRoot ?>ext/pdfviewer/res/web/viewer.html?file=<?=  urlencode(getBaseUrl().$settings->_httpRoot.'op/op.ViewOnline.php?documentid='.$version->getDocument()->getID().'&version='.$version->getVersion()); ?>" width="100%" height="700px"></iframe>
-	<?php
+<?php
+				}
 				break;
 			case 'image/svg+xml':
 			case 'image/jpg':
diff --git a/views/bootstrap/class.ViewDocument.php b/views/bootstrap/class.ViewDocument.php
index 93475228b..f50ac24be 100644
--- a/views/bootstrap/class.ViewDocument.php
+++ b/views/bootstrap/class.ViewDocument.php
@@ -612,12 +612,14 @@ $(document).ready( function() {
 <?php
 					break;
 				case 'application/pdf':
+					if (!$settings->extensionIsDisabled('pdfviewer')) {
 					$this->contentHeading(getMLText("preview"));
 ?>
 			<div style="width:100%; height: 0; position:relative; padding-top: 141%;">
 			<iframe src="<?= $settings->_httpRoot ?>ext/pdfviewer/res/web/viewer.html?file=<?php echo urlencode(getBaseUrl().$settings->_httpRoot.'op/op.ViewOnline.php?documentid='.$latestContent->getDocument()->getID().'&version='.$latestContent->getVersion()); ?>" _width="100%" _height="100%" style="position: absolute; top: 0; left: 0; bottom: 0; right: 0; width: 100%; height: 100%"></iframe>
 			</div>
 <?php
+					}
 					break;
 				case 'image/svg+xml':
 				case 'image/jpg':

From bfb1edfb5b6d9cb4beb4c2ceb00d257b228670f0 Mon Sep 17 00:00:00 2001
From: Uwe Steinmann <steinm@debian.org>
Date: Fri, 5 Dec 2025 08:01:30 +0100
Subject: [PATCH 05/17] fix php error when checking access rights

---
 out/out.EditMarkdown.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/out/out.EditMarkdown.php b/out/out.EditMarkdown.php
index 2ba54550d..a85c2038f 100644
--- a/out/out.EditMarkdown.php
+++ b/out/out.EditMarkdown.php
@@ -79,7 +79,7 @@ if (!isset($settings->_editOnlineFileTypes) || !is_array($settings->_editOnlineF
  */
 
 /* Create object for checking access to certain operations */
-$accessop = new SeedDMS_AccessOperation($dms, $document, $user, $settings);
+$accessop = new SeedDMS_AccessOperation($dms, $user, $settings);
 if(!$accessop->mayEditVersion($version)) {
 	UI::exitError(getMLText("document_title", array("documentname" => $document->getName())),getMLText("access_denied"));
 }

From 042bdb311f117eb44392690a4c5b99f457710c46 Mon Sep 17 00:00:00 2001
From: Uwe Steinmann <steinm@debian.org>
Date: Fri, 5 Dec 2025 09:43:08 +0100
Subject: [PATCH 06/17] show help-cursor when moving mouse over label of config
 var

---
 views/bootstrap/class.Settings.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/views/bootstrap/class.Settings.php b/views/bootstrap/class.Settings.php
index a69ebe078..a63942d97 100644
--- a/views/bootstrap/class.Settings.php
+++ b/views/bootstrap/class.Settings.php
@@ -169,7 +169,7 @@ class SeedDMS_View_Settings extends SeedDMS_Theme_Style {
 	protected function showConfigPlain($title, $title_desc, $rawdata) { /* {{{ */
 		$settings = $this->params['settings'];
 ?>
-      <tr title="<?= htmlspecialchars($title_desc) ?>">
+			<tr <?= ($title_desc ? 'title="'.htmlspecialchars($title_desc).'" style="cursor: help;"' : '') ?>>
 				<td><?= $title ?></td>
 				<td><?= $rawdata ?></td>
 			</tr>

From 84511a7eda6b62681abc9c221046a7e43bf0ab5c Mon Sep 17 00:00:00 2001
From: Uwe Steinmann <steinm@debian.org>
Date: Fri, 5 Dec 2025 09:54:10 +0100
Subject: [PATCH 07/17] use help-cursor for all labels of config vars

---
 views/bootstrap/class.Settings.php | 32 +++++++++++++++---------------
 1 file changed, 16 insertions(+), 16 deletions(-)

diff --git a/views/bootstrap/class.Settings.php b/views/bootstrap/class.Settings.php
index a63942d97..4bb307cec 100644
--- a/views/bootstrap/class.Settings.php
+++ b/views/bootstrap/class.Settings.php
@@ -142,8 +142,8 @@ class SeedDMS_View_Settings extends SeedDMS_Theme_Style {
 	protected function showConfigText($title, $name, $type='', $placeholder='') { /* {{{ */
 		$settings = $this->params['settings'];
 ?>
-			<tr title="<?= getMLText($title."_desc") ?>">
-				<td><?= getMLText($title) ?></td>
+			<tr>
+				<td <?= 'title="'.getMLText($title."_desc").'" style="cursor: help;"' ?>><?= getMLText($title) ?></td>
 <?php
 		if($type === 'array')
 			$value = $settings->arrayToString($settings->{"_".$name});
@@ -169,8 +169,8 @@ class SeedDMS_View_Settings extends SeedDMS_Theme_Style {
 	protected function showConfigPlain($title, $title_desc, $rawdata) { /* {{{ */
 		$settings = $this->params['settings'];
 ?>
-			<tr <?= ($title_desc ? 'title="'.htmlspecialchars($title_desc).'" style="cursor: help;"' : '') ?>>
-				<td><?= $title ?></td>
+			<tr>
+				<td <?= ($title_desc ? 'title="'.htmlspecialchars($title_desc).'" style="cursor: help;"' : '') ?>><?= $title ?></td>
 				<td><?= $rawdata ?></td>
 			</tr>
 <?php
@@ -185,8 +185,8 @@ class SeedDMS_View_Settings extends SeedDMS_Theme_Style {
 	protected function showConfigCheckbox($title, $name) { /* {{{ */
 		$settings = $this->params['settings'];
 ?>
-      <tr title="<?= getMLText($title."_desc") ?>">
-        <td><?= getMLText($title) ?></td>
+      <tr>
+				<td <?= 'title="'.getMLText($title."_desc").'" style="cursor: help;"' ?>><?= getMLText($title) ?></td>
 				<td>
 <?php
 		if($this->isVisible($name)) {
@@ -206,8 +206,8 @@ class SeedDMS_View_Settings extends SeedDMS_Theme_Style {
 //		var_dump($values);
 //		echo $isass ? 'asso' : 'indexed';
 ?>
-      <tr title="<?= getMLText($title."_desc") ?>">
-        <td><?= getMLText($title) ?></td>
+      <tr>
+				<td <?= 'title="'.getMLText($title."_desc").'" style="cursor: help;"' ?>><?= getMLText($title) ?></td>
 				<td>
 <?php if($multiple) { ?>
 					<select class="chzn-select form-control" style="width: 100%;" name="<?= $name ?>[]" multiple>
@@ -232,8 +232,8 @@ class SeedDMS_View_Settings extends SeedDMS_Theme_Style {
 		$settings = $this->params['settings'];
 		$dms = $this->params['dms'];
 ?>
-      <tr title="<?= getMLText($title."_desc") ?>">
-        <td><?= getMLText($title) ?></td>
+      <tr>
+				<td <?= 'title="'.getMLText($title."_desc").'" style="cursor: help;"' ?>><?= getMLText($title) ?></td>
 				<td>
 <?php
 		$users = $dms->getAllUsers();
@@ -263,8 +263,8 @@ class SeedDMS_View_Settings extends SeedDMS_Theme_Style {
 		$settings = $this->params['settings'];
 		$dms = $this->params['dms'];
 ?>
-      <tr title="<?= getMLText($title."_desc") ?>">
-        <td><?= getMLText($title) ?></td>
+      <tr>
+				<td <?= 'title="'.getMLText($title."_desc").'" style="cursor: help;"' ?>><?= getMLText($title) ?></td>
 				<td>
 <?php
 		if(is_array($settings->{"_".$name}))
@@ -292,8 +292,8 @@ class SeedDMS_View_Settings extends SeedDMS_Theme_Style {
 		$settings = $this->params['settings'];
 		$dms = $this->params['dms'];
 ?>
-      <tr title="<?= getMLText($title."_desc") ?>">
-        <td><?= getMLText($title) ?></td>
+      <tr>
+				<td <?= 'title="'.getMLText($title."_desc").'" style="cursor: help;"' ?>><?= getMLText($title) ?></td>
 				<td>
 <?php
 		$groups = $dms->getAllGroups();
@@ -323,8 +323,8 @@ class SeedDMS_View_Settings extends SeedDMS_Theme_Style {
 		$settings = $this->params['settings'];
 		$dms = $this->params['dms'];
 ?>
-      <tr title="<?= getMLText($title."_desc") ?>">
-        <td><?= getMLText($title) ?>:</td>
+      <tr>
+				<td <?= 'title="'.getMLText($title."_desc").'" style="cursor: help;"' ?>><?= getMLText($title) ?></td>
 				<td>
 <?php $this->printFolderChooserHtml($name, M_READWRITE, -1, $dms->getFolder($settings->{"_".$name}), $name);?>
 				</td>

From c5eac169ec1fab9ecdab9e4acc64a732106b99aa Mon Sep 17 00:00:00 2001
From: Uwe Steinmann <steinm@debian.org>
Date: Tue, 9 Dec 2025 12:14:09 +0100
Subject: [PATCH 08/17] use password field for encryption key

---
 views/bootstrap/class.Settings.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/views/bootstrap/class.Settings.php b/views/bootstrap/class.Settings.php
index 4bb307cec..36e5cc44b 100644
--- a/views/bootstrap/class.Settings.php
+++ b/views/bootstrap/class.Settings.php
@@ -777,7 +777,7 @@ if(($kkk = $this->callHook('getFullSearchEngine')) && is_array($kkk))
 <?php $this->showConfigUser('settings_autoLoginUser', 'autoLoginUser', true); ?>
 <?php $this->showConfigText('settings_quota', 'quota'); ?>
 <?php $this->showConfigUser('settings_undelUserIds', 'undelUserIds', true, true); ?>
-<?php $this->showConfigText('settings_encryptionKey', 'encryptionKey'); ?>
+<?php $this->showConfigText('settings_encryptionKey', 'encryptionKey', 'password'); ?>
 <?php $this->showConfigText('settings_cookieLifetime', 'cookieLifetime'); ?>
 <?php $this->showConfigOption('settings_defaultAccessDocs', 'defaultAccessDocs', array(' 0'=>'inherited', ' '.M_NONE=>'access_mode_none', ' '.M_READ=>'access_mode_read', ' '.M_READWRITE=>'access_mode_readwrite'), false, true); ?>
 

From 5949c4ed358f62aa58ba36b482aaf871015e8e0e Mon Sep 17 00:00:00 2001
From: Uwe Steinmann <steinm@debian.org>
Date: Tue, 9 Dec 2025 12:14:38 +0100
Subject: [PATCH 09/17] add command to return a random string

---
 op/op.Ajax.php | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/op/op.Ajax.php b/op/op.Ajax.php
index bcf3f2da7..9a3c07290 100644
--- a/op/op.Ajax.php
+++ b/op/op.Ajax.php
@@ -30,6 +30,7 @@ require_once("../inc/inc.ClassController.php");
 require_once("../inc/inc.Notification.php");
 
 use Seeddms\Seeddms\Session;
+use Seeddms\Seeddms\Utilities;
 
 require_once("../inc/inc.ClassSession.php");
 require_once("../inc/inc.ClassPasswordStrength.php");
@@ -100,6 +101,12 @@ switch($command) {
 		}
 		break; /* }}} */
 
+	case 'randomstring': /* {{{ */
+		$len = $_REQUEST["len"] ?? 16;
+		header('Content-Type: application/json');
+		echo json_encode(array('success'=>true, 'string'=>Utilities::makeRandomString($len)));
+		break; /* }}} */
+
 	case 'sessioninfo': /* {{{ */
 		if($user) {
 			header('Content-Type: application/json');

From 7c53c1aae424f494d3f7ed36014150257e5cbac7 Mon Sep 17 00:00:00 2001
From: Uwe Steinmann <steinm@debian.org>
Date: Tue, 9 Dec 2025 12:15:14 +0100
Subject: [PATCH 10/17] require symfony/http-client

---
 composer-dist.json | 3 ++-
 composer.json      | 3 ++-
 2 files changed, 4 insertions(+), 2 deletions(-)

diff --git a/composer-dist.json b/composer-dist.json
index 23a4d0311..e1a5fa567 100644
--- a/composer-dist.json
+++ b/composer-dist.json
@@ -72,7 +72,8 @@
         "symfony/console": "^7.2",
         "twig/twig": "^3.0",
         "league/commonmark": "^2.7",
-        "symfony/process": "^7.3"
+        "symfony/process": "^7.3",
+        "symfony/http-client": "^7.4"
     },
     "require-dev": {
         "composer/composer": "dev-main"
diff --git a/composer.json b/composer.json
index 3523f25d2..402d1181e 100644
--- a/composer.json
+++ b/composer.json
@@ -75,7 +75,8 @@
         "symfony/console": "^7.2",
         "twig/twig": "^3.0",
         "league/commonmark": "^2.7",
-        "symfony/process": "^7.3"
+        "symfony/process": "^7.3",
+        "symfony/http-client": "^7.4"
     },
     "require-dev": {
         "composer/composer": "dev-main",

From 55c6a9492a734102b7c5154f62d71627bc27a188 Mon Sep 17 00:00:00 2001
From: Uwe Steinmann <steinm@debian.org>
Date: Tue, 9 Dec 2025 19:29:48 +0100
Subject: [PATCH 11/17] do not remove custom attributes which were not set when
 editing attributes

---
 CHANGELOG                            | 1 +
 controllers/class.EditAttributes.php | 4 ++--
 controllers/class.EditDocument.php   | 2 ++
 3 files changed, 5 insertions(+), 2 deletions(-)

diff --git a/CHANGELOG b/CHANGELOG
index f48703689..833d40122 100644
--- a/CHANGELOG
+++ b/CHANGELOG
@@ -16,6 +16,7 @@
 - droping an url in the drag&drop area will download the url
 - add button to all password fields to make password visible
 - fix formatting of date input fields
+- do not remove custom attributes which were not set when editing attributes
 
 --------------------------------------------------------------------------------
                      Changes in version 5.1.42
diff --git a/controllers/class.EditAttributes.php b/controllers/class.EditAttributes.php
index 1df2c91e6..25caf2dab 100644
--- a/controllers/class.EditAttributes.php
+++ b/controllers/class.EditAttributes.php
@@ -83,7 +83,6 @@ class SeedDMS_Controller_EditAttributes extends SeedDMS_Controller_Common {
 
 							if(!isset($oldattributes[$attrdefid]) || $attribute != $oldattributes[$attrdefid]->getValue()) {
 								if(!$version->setAttributeValue($dms->getAttributeDefinition($attrdefid), $attribute)) {
-									//UI::exitError(getMLText("document_title", array("documentname" => $document->getName())),getMLText("error_occured"));
 									return false;
 								}
 							}
@@ -92,7 +91,6 @@ class SeedDMS_Controller_EditAttributes extends SeedDMS_Controller_Common {
 							return false;
 						} elseif(isset($oldattributes[$attrdefid])) {
 							if(!$version->removeAttribute($dms->getAttributeDefinition($attrdefid)))
-							//	UI::exitError(getMLText("document_title", array("documentname" => $folder->getName())),getMLText("error_occured"));
 								return false;
 						}
 						} else {
@@ -102,12 +100,14 @@ class SeedDMS_Controller_EditAttributes extends SeedDMS_Controller_Common {
 					}
 				}
 			}
+			/* Do not remove any old attributes if they have not be set by the form 
 			foreach($oldattributes as $attrdefid=>$oldattribute) {
 				if(!isset($attributes[$attrdefid])) {
 					if(!$version->removeAttribute($dms->getAttributeDefinition($attrdefid)))
 						return false;
 				}
 			}
+			 */
  
 		} elseif($result === false) {
 			if(empty($this->errormsg))
diff --git a/controllers/class.EditDocument.php b/controllers/class.EditDocument.php
index cd86dfedf..ea77f46da 100644
--- a/controllers/class.EditDocument.php
+++ b/controllers/class.EditDocument.php
@@ -174,12 +174,14 @@ class SeedDMS_Controller_EditDocument extends SeedDMS_Controller_Common {
 					}
 				}
 			}
+			/* Do not remove any old attributes if they have not be set by the form 
 			foreach($oldattributes as $attrdefid=>$oldattribute) {
 				if(!isset($attributes[$attrdefid])) {
 					if(!$document->removeAttribute($dms->getAttributeDefinition($attrdefid)))
 						return false;
 				}
 			}
+			 */
 
 			$sequence = $this->params['sequence'];
 			if(strcasecmp($sequence, "keep")) {

From 73cb39beca195d7a6d2a12e7fbee98c00e075f67 Mon Sep 17 00:00:00 2001
From: Uwe Steinmann <steinm@debian.org>
Date: Wed, 10 Dec 2025 06:46:20 +0100
Subject: [PATCH 12/17] add js for addon with refresh symbol (temp. solution)

---
 views/bootstrap/class.Bootstrap.php    |  2 +-
 views/bootstrap/styles/application.js  | 15 +++++++++++++++
 views/bootstrap4/class.Bootstrap4.php  |  2 +-
 views/bootstrap4/styles/application.js | 15 +++++++++++++++
 4 files changed, 32 insertions(+), 2 deletions(-)

diff --git a/views/bootstrap/class.Bootstrap.php b/views/bootstrap/class.Bootstrap.php
index 27a77c3eb..dd0e50ece 100644
--- a/views/bootstrap/class.Bootstrap.php
+++ b/views/bootstrap/class.Bootstrap.php
@@ -1269,7 +1269,7 @@ background-image: linear-gradient(to bottom, #882222, #111111);;
 					break;
 				default:
 					if(!empty($value['addon']))
-						echo '<span class="input-append'.($value["type"]=='password' ? ' show-hide-password' : '').'">';
+						echo '<span class="input-append'.($value["type"]=='password' ? ' show-hide-password' : '').' '.substr(md5($value['addon']), 0, 6).'">';
 					echo '<input'.
 						(!empty($value['type']) ? ' type="'.$value['type'].'"' : '').
 						(!empty($value['id']) ? ' id="'.$value['id'].'"' : '').
diff --git a/views/bootstrap/styles/application.js b/views/bootstrap/styles/application.js
index 8f32d9bf6..304cd5831 100644
--- a/views/bootstrap/styles/application.js
+++ b/views/bootstrap/styles/application.js
@@ -385,6 +385,21 @@ $(document).ready( function() {
 		}
 	}); /* }}} */
 
+	$('body').on('click', 'div.8cf73c span', function(ev) { /* {{{ */
+		ev.preventDefault();
+		closest = $(this).closest('div.8cf73c');
+		$.get(seeddms_webroot+'op/op.Ajax.php',
+			{ command: 'randomstring', len: 16 },
+			function(data) {
+				if(data.success) {
+					input = closest.children(":first");
+					input.val(data.string);
+				}
+			},
+			'json'
+		);
+	}); /* }}} */
+
 	$('body').on('touchstart.dropdown', '.dropdown-menu', function (e) { e.stopPropagation(); });
 
 	initMost();
diff --git a/views/bootstrap4/class.Bootstrap4.php b/views/bootstrap4/class.Bootstrap4.php
index 8d355c6ad..c841a5816 100644
--- a/views/bootstrap4/class.Bootstrap4.php
+++ b/views/bootstrap4/class.Bootstrap4.php
@@ -1252,7 +1252,7 @@ background-image: linear-gradient(to bottom, #882222, #111111);;
 					break;
 				default:
 					if(!empty($value['addon']))
-						echo '<div class="input-group date'.($value["type"]=='password' ? ' show-hide-password' : '').'">';
+						echo '<div class="input-group'.($value["type"]=='password' ? ' show-hide-password' : '').' '.substr(md5($value['addon']), 0, 6).'">';
 					echo '<input'.
 						(!empty($value['type']) ? ' type="'.$value['type'].'"' : '').
 						(!empty($value['id']) ? ' id="'.$value['id'].'"' : '').
diff --git a/views/bootstrap4/styles/application.js b/views/bootstrap4/styles/application.js
index e0eb3a029..b6d11d8d9 100644
--- a/views/bootstrap4/styles/application.js
+++ b/views/bootstrap4/styles/application.js
@@ -419,6 +419,21 @@ $(document).ready( function() {
 		}
 	}); /* }}} */
 
+	$('body').on('click', 'div.8cf73c span', function(ev) { /* {{{ */
+		ev.preventDefault();
+		closest = $(this).closest('div.8cf73c');
+		$.get(seeddms_webroot+'op/op.Ajax.php',
+			{ command: 'randomstring', len: 16 },
+			function(data) {
+				if(data.success) {
+					input = closest.children(":first");
+					input.val(data.string);
+				}
+			},
+			'json'
+		);
+	}); /* }}} */
+
 //	$('body').on('touchstart.dropdown', '.dropdown-menu', function (e) { e.stopPropagation(); });
 
 	initMost();

From a56528229750e8ecf9c0a20d628cedcaca5413c3 Mon Sep 17 00:00:00 2001
From: Uwe Steinmann <steinm@debian.org>
Date: Wed, 10 Dec 2025 07:41:04 +0100
Subject: [PATCH 13/17] set _enableHiddenReceipt to false by default

---
 inc/inc.ClassSettings.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/inc/inc.ClassSettings.php b/inc/inc.ClassSettings.php
index d386e3c9f..cf62d635d 100644
--- a/inc/inc.ClassSettings.php
+++ b/inc/inc.ClassSettings.php
@@ -209,7 +209,7 @@ class Settings { /* {{{ */
 	// enable/disable listing logged in user as recipient
 	var $_enableSelfReceipt = false;
 	// enable/disable hidden user as recipient
-	var $_enableHiddenReceipt = true;
+	var $_enableHiddenReceipt = false;
 	// enable/disable update of a receipt by the recipient
 	var $_enableUpdateReceipt = false;
 	// enable/disable listing administrator as recipient

From 465b56f05b195b99e0aeac296e514aaa754b006c Mon Sep 17 00:00:00 2001
From: Uwe Steinmann <steinm@debian.org>
Date: Wed, 10 Dec 2025 07:41:34 +0100
Subject: [PATCH 14/17] pass enableselfreceipt to view

---
 out/out.SetRecipients.php | 1 +
 1 file changed, 1 insertion(+)

diff --git a/out/out.SetRecipients.php b/out/out.SetRecipients.php
index 6bee9e9d2..e296cd151 100644
--- a/out/out.SetRecipients.php
+++ b/out/out.SetRecipients.php
@@ -72,6 +72,7 @@ if($view) {
 	$view->setParam('enableownerreceipt', $settings->_enableOwnerReceipt);
 	$view->setParam('enableadminreceipt', $settings->_enableAdminReceipt);
 	$view->setParam('enablehiddenreceipt', $settings->_enableHiddenReceipt);
+	$view->setParam('enableselfreceipt', $settings->_enableSelfReceipt);
 	$view->setParam('accessobject', $accessop);
 	$view($_GET);
 	exit;

From ebbe0b50a76f990bade0a89babab7190ea4027d1 Mon Sep 17 00:00:00 2001
From: Uwe Steinmann <steinm@debian.org>
Date: Wed, 10 Dec 2025 07:42:25 +0100
Subject: [PATCH 15/17] do no show hidden user in lists

---
 views/bootstrap/class.SetRecipients.php | 14 ++++----------
 1 file changed, 4 insertions(+), 10 deletions(-)

diff --git a/views/bootstrap/class.SetRecipients.php b/views/bootstrap/class.SetRecipients.php
index bf8998c76..a573242d0 100644
--- a/views/bootstrap/class.SetRecipients.php
+++ b/views/bootstrap/class.SetRecipients.php
@@ -13,11 +13,6 @@
  * @version    Release: @package_version@
  */
 
-/**
- * Include parent class
- */
-//require_once("class.Bootstrap.php");
-
 /**
  * Class which outputs the html page for SetRecipients view
  *
@@ -37,8 +32,9 @@ class SeedDMS_View_SetRecipients extends SeedDMS_Theme_Style {
 		$folder = $this->params['folder'];
 		$document = $this->params['document'];
 		$content = $this->params['version'];
-		$enableownerreceipt = $this->params['enableownerreceipt'];
 		$enableadminreceipt = $this->params['enableadminreceipt'];
+		$enableownerreceipt = $this->params['enableownerreceipt'];
+		$enableselfreceipt = $this->params['enableselfreceipt'];
 		$enablehiddenreceipt = $this->params['enablehiddenreceipt'];
 
 		$overallStatus = $content->getStatus();
@@ -90,7 +86,8 @@ class SeedDMS_View_SetRecipients extends SeedDMS_Theme_Style {
 						break;
 				}
 			} else {
-				if(!$enablehiddenreceipt && $usr->isHidden()) continue;
+				if (!$enableselfreceipt && $usr->getID()==$user->getID()) continue; 
+				if (!$enablehiddenreceipt && $usr->isHidden()) continue;
 				$options[] = array($usr->getID(), htmlspecialchars($usr->getLogin() . " - ". $usr->getFullName()));
 			}
 		}
@@ -106,7 +103,6 @@ class SeedDMS_View_SetRecipients extends SeedDMS_Theme_Style {
 				'options'=>$options
 			)
 		);
-
 		$options = [];
 		foreach ($docAccess["groups"] as $group) {
 			$optopt = [];
@@ -159,7 +155,6 @@ class SeedDMS_View_SetRecipients extends SeedDMS_Theme_Style {
 				'options'=>$options
 			)
 		);
-
 		$this->contentContainerEnd();
 		$this->formSubmit("<i class=\"fa fa-save\"></i> ".getMLText('update'));
 ?>
@@ -169,4 +164,3 @@ class SeedDMS_View_SetRecipients extends SeedDMS_Theme_Style {
 		$this->htmlEndPage();
 	} /* }}} */
 }
-?>

From f78460f81594cfa317da8ad378f5eca405bd220e Mon Sep 17 00:00:00 2001
From: Uwe Steinmann <steinm@debian.org>
Date: Wed, 10 Dec 2025 07:42:54 +0100
Subject: [PATCH 16/17] minor formating issue

---
 views/bootstrap/class.SetRevisors.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/views/bootstrap/class.SetRevisors.php b/views/bootstrap/class.SetRevisors.php
index 9bef66cb0..b40af30ed 100644
--- a/views/bootstrap/class.SetRevisors.php
+++ b/views/bootstrap/class.SetRevisors.php
@@ -124,7 +124,7 @@ runValidation();
 				}
 			} else {
 				if (!$enableselfrevapp && $usr->getID()==$user->getID()) continue; 
-				if(!$enablehiddenrevapp && $usr->isHidden()) continue;
+				if (!$enablehiddenrevapp && $usr->isHidden()) continue;
 				$options[] = array($usr->getID(), htmlspecialchars($usr->getLogin() . " - ". $usr->getFullName()));
 			}
 		}

From a6899c574c3fb84f2321456212d5555aeadb378e Mon Sep 17 00:00:00 2001
From: Uwe Steinmann <steinm@debian.org>
Date: Wed, 10 Dec 2025 12:56:27 +0100
Subject: [PATCH 17/17] add some { and }

---
 op/op.ExtensionMgr.php | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/op/op.ExtensionMgr.php b/op/op.ExtensionMgr.php
index 9df8b72b6..d67871ddd 100644
--- a/op/op.ExtensionMgr.php
+++ b/op/op.ExtensionMgr.php
@@ -157,10 +157,11 @@ elseif ($action == "toggle") { /* {{{ */
 		else {
 			$ret = $extmgr->migrate($extname, $settings, $dms, $logger);
 			if($ret !== null) {
-				if($ret === true)
+				if($ret === true) {
 					echo json_encode(array('success'=>true, 'msg'=>getMLText('extension_migration_success')));
-				else
+				} else {
 					echo json_encode(array('success'=>false, 'msg'=>getMLText('extension_migration_error')));
+				}
 			} else {
 				echo json_encode(array('success'=>true, 'msg'=>getMLText('extension_is_on_now')));
 			}