-------------------------------------------------------------------------------- Changes in version 6.0.24 -------------------------------------------------------------------------------- - add task to send list of recent changes by email - merge changes up to 5.1.31 -------------------------------------------------------------------------------- Changes in version 6.0.23 -------------------------------------------------------------------------------- - fix setting recipients and revisors - check in of a document is allowed for the user having done the check out or those users with unlimited access rights on the document - merge changes up to 5.1.30 -------------------------------------------------------------------------------- Changes in version 6.0.22 -------------------------------------------------------------------------------- - merge changes up to 5.1.29 -------------------------------------------------------------------------------- Changes in version 6.0.21 -------------------------------------------------------------------------------- - merge changes up to 5.1.28 - add new check for documents with identical sequence numbers in a folder -------------------------------------------------------------------------------- Changes in version 6.0.20 -------------------------------------------------------------------------------- - merge changes up to 5.1.27 - fix triggering workflow (Closes: #542) - create original file name from new document name when uploading document from the library folder. Used to be the original file name -------------------------------------------------------------------------------- Changes in version 6.0.19 -------------------------------------------------------------------------------- - merge changes up to 5.1.26 - fix deletion of tasks when using bootstrap4 theme - fix deletion of documents when clicking on icon in document list (my documents) -------------------------------------------------------------------------------- Changes in version 6.0.18 -------------------------------------------------------------------------------- - finish op/op.Cron.php, returns json - merge changes up to 5.1.25 - fix sending trigger workflow notification (Closes: #522) - fix updating und deleting items in document lists - call hook 'filenameDownloadItem' in search export and transmittal download - fix possible xss attack in UsrMgr (CVE-2022-28479) -------------------------------------------------------------------------------- Changes in version 6.0.17 -------------------------------------------------------------------------------- - merge changes up to 5.1.24 - send notification when a receiption of a document was submitted -------------------------------------------------------------------------------- Changes in version 6.0.16 -------------------------------------------------------------------------------- - cancel checkout needs confirmation - add input field to filter list of recipients if more then 10 - add task for creating missing preview images - no longer use old PHPExcel classes, use PhpOffice\PhpSpreadsheet\Spreadsheet instead -------------------------------------------------------------------------------- Changes in version 6.0.15 -------------------------------------------------------------------------------- - merge changes up to 5.1.22 - add a new task for checking the checksum of all document versions - add searching for revision date - list of open tasks will no longer contain expired documents but MyDocuments page still list them - fixed downloading approval file (Closes: #503) - regular users can no longer set owner of document while uploading -------------------------------------------------------------------------------- Changes in version 6.0.14 -------------------------------------------------------------------------------- - show debug menu only if debug mode is on - merge changes up to 5.1.21 - document links can be added by regular users again - add list of checked out documents to tasks - issue a warning when removing a document which is checked out - checked out can be discarded if it was changed -------------------------------------------------------------------------------- Changes in version 6.0.13 -------------------------------------------------------------------------------- - merge changes up to 5.1.20 - create download file for transmittal in system tmp (Closes: #478) - sync source code of checkin with update document -------------------------------------------------------------------------------- Changes in version 6.0.12 -------------------------------------------------------------------------------- - merge changes up to 5.1.19 - fix various errors concerning workflows - show menu tasks even if not admin (Closes: #485) -------------------------------------------------------------------------------- Changes in version 6.0.11 -------------------------------------------------------------------------------- - merge changes up to 5.1.18 - fix access restriction for roles (content of documents was visible even if the role and status didn't allow it) - fix missing Content-Type in UserList (Closes: #480) -------------------------------------------------------------------------------- Changes in version 6.0.10 -------------------------------------------------------------------------------- - merge changes up to 5.1.17 - fix list of previous document versions (Closes: #471) - fix uploading files with fine uploader (Closes: #472) - clear revision date when all revisors have been deleted - improve scheduler task management, tasks can be deleted, fix setting parameters - add op.Cron.php for running all scheduled tasks -------------------------------------------------------------------------------- Changes in version 6.0.9 -------------------------------------------------------------------------------- - merge changes up to 5.1.16 - fix removal of roles (Closes: #465) - fix password forgotten process - fix setting role of new user and retrieving role of existing user - processes of users can be deleted again, instead of only transfered to another user - fix export of search results, headers of excel file can be translated - fix arcordeon for folder filters on search page - fix upload from dropfolder - fix adding new calendar event -------------------------------------------------------------------------------- Changes in version 6.0.8 -------------------------------------------------------------------------------- - merge changes up to 5.1.15 - fix syntax error in op/op.EditComment.php - fix use of private variable in op/op.SetRecipients.php and op/op.SetRevisors.php - fix triggering a transition in advanced workflow mode -------------------------------------------------------------------------------- Changes in version 6.0.7 -------------------------------------------------------------------------------- - fix editing of document attachments - make receipt summary look like approval/review summary - merge changes up to 5.1.14 - do not show the updating user in a revision workflow if the status is 0 this is misleading because the user starting the revision workflow is the one first accessing the document - rejection of document receipts are turned off by default, but can be turned on in the settings - documents in DocumentChooser are sorted by name - instead of just removing a user from all processes it can be replaced by a new user -------------------------------------------------------------------------------- Changes in version 6.0.6 -------------------------------------------------------------------------------- - fix setting attributes when checking in a new document version - setting a document revision to 'needs correction' will no longer set the documents status to 'needѕ correction' if this was turned off in the settings - a document will not leave draft status when setting the approver/reviewer without setting a reviewer/approver - tasks to be counted in menu can be configured - add number of documents which need correction to menu - minor 2 factor auth. fixes when initially setting the secret - remove ѕome unneeded code from AddDocument which just caused php warnings - do not set the uploader of new documents to owner if the owner is different from the uploader - add scheduler - add hook showVersionComment in out.ViewDocument.php - Various minor corrections of database tables tblWorkflowLog and tblWorkflowDocumentContent - merge changes up to 5.1.7 -------------------------------------------------------------------------------- Changes in version 6.0.5 -------------------------------------------------------------------------------- - sync form for updating document by upload and checkin - add list of documents which need correction on MyDocuments page -------------------------------------------------------------------------------- Changes in version 6.0.4 -------------------------------------------------------------------------------- - merge changes up to 5.1.5 -------------------------------------------------------------------------------- Changes in version 6.0.3 -------------------------------------------------------------------------------- - add list of documents without a receiver on MyDocuments page - propperly calculate number of documents for each value of value set in attribute mgr - output of progress bar for reception of a document can be controlled by access list - recipientof a document version can be set when uploading the file - fix export of search and display of 2nd, 3rd, ... search page - speed up creation of document lists if reception progress bar is shown - status of rejected documents can be overriden - do not add users from group as recipients if they are the uploader or reviewer of a document - add list of documents without a receiver, list of drafts, and list of absolete documents on MyDocuments page - add callback onCheckAccessDocument to SeedDMS_Core_Document - add new document status 'needs correction', revised documents which do not pass will no longer be in status 'rejected' but 'needs correction' - better error handling when indexing documents fails - apache xsendfile module is used for downloading documents when installed - add view access check for ApprovalSummary, ReviewSummary, ReceiptSummary, WorkflowSummary, DocumentAccess, GroupView, UsrView, WorkflowSummary - filter out reviewers and uploader of a document version when setting recipients by user group -------------------------------------------------------------------------------- Changes in version 6.0.2 -------------------------------------------------------------------------------- - check if user has access on document and is not disabled if set as receiver, revisor - check if group has members if set as reviewer, approver, receiver, revisor - fix bug in notification of approver after successful review - add document check for docs in revision and missing access rights of revisor - add document check for docs requiring receptions but user lacks access right - fix Acl manager when using pgsql - list all open tasks of user in user info of user manager - owner of document may see review/approval/receipt/revision log - fix sending mails to reviewer/approvers after check in - downloading of review/approval files works again - optimizing retrieval of open tasks - do not show user which has been removed from a process except for admins - show scheduled revisions in calendar - merge changes up to 5.1.5 -------------------------------------------------------------------------------- Changes in version 6.0.1 -------------------------------------------------------------------------------- - call hook 'rawcontent' when downloading transmittal list or search content - speed up list of locked documents on MyDocuments page - sql queries and execution times can be written to file in database layer -------------------------------------------------------------------------------- Changes in version 6.0.0 -------------------------------------------------------------------------------- - merge changes up to 5.0.10 - filter documents by status 'draft' on search page - list of documents to look at now contains documents in revision - add list of documents waiting for reception on MyDocuments page - group document lists on MyDocuments page into three sections - show progressbar and comments for reception of document in documentlist - restructure page for document/folder check, add check for missing access on documents by recipient or revisor - overhaul revision workflow, add hook after revision workflow was finished - add two factor authentication based on google authenticator - set timeout for ajax call 'mytasks' from 200ms to 1000ms - use a similar layout for document list on the ViewDocument page - add RSS feed of timeline - put more operations under access control - add receipent list for documents - add revision of documents - add substitute user command for regular users - add access controll list for many functions - add document list which can be exported as an archive - search results can be exported -------------------------------------------------------------------------------- Changes in version 5.1.31 -------------------------------------------------------------------------------- - rest api returns error msg and not just http status - comment of document, documentcontent and folder can be rendered as markdown - fix preview for file in drop folder - fix export of search result - use openssl instead of mcrypt - search form shows 'from' and 'to' field for integers and floats - show preview of document in EditAttributes page - major overhaul of fulltext search, add new search tab for a more facetted based search - add initial version of Dashboard - default public status of attachments can be configured -------------------------------------------------------------------------------- Changes in version 5.1.30 -------------------------------------------------------------------------------- - conversion from pdf to png replaces alpha channel with white - add list of conversion services in debug menu of admin tool - use chosen select for custom attributes - color category (use first 6 chars of md5(category name) as hex color) - create missing preview images in category or attribute manager - support README of extension in different languages - do not force password change if in substitute user mode -------------------------------------------------------------------------------- Changes in version 5.1.29 -------------------------------------------------------------------------------- - fix php errors in restapi - fix 'maximum size' error when uploading a file with drag&drop - update jquery to 3.6.1 (only bootstrap4 theme) - introduce authentication service - new hook in restapi to add middleware - previews for png, txt, pdf in different directories. This will enforce a recreation of all cached preview images, pdf and text files! - various improvements of fulltext service - show number of documents per category in category manager - show number of keywords per category in keyword manager - improve drag&drop with clipboard - old pear packages SeedDMS/Core, SeedDMS/Lucene, SeedDMS/Preview are now based on composer and has moved into vendor dir -------------------------------------------------------------------------------- Changes in version 5.1.28 -------------------------------------------------------------------------------- - user information in user manager failed to load when a document content with 0 bytes was created by the user - fix repair of wrong file extension - fix regression in password forgotten function - fix security issue when creating hash in password forgotten operation - add initial support for logging and notifications in rest api - add rest api calls to get attributes of a document version and to set attributes of folders, documents, and document versions - fixed various errors in swagger.yaml - use methods in inc/inc.ClassNotificationService.php for webdav - clear login failures when login by webdav succeeds - output log of restapi in LogManagement - new hook to add more tabs for sections in LogManagement - rest api returns version attributes as 'version_attributes' (was 'version-attributes'), each attribute also contains the name - new hook in rest api to add more routes in extensions - uploaded several documents at once by fast upload will assign random sequence number to allow manually sorting the documents afterwards - fix counting of login failures if both ldap and db authentication is done -------------------------------------------------------------------------------- Changes in version 5.1.27 -------------------------------------------------------------------------------- - fix adding new attribute definition if object type is 'all' - EmptyFolder runs callbacks to remove objects from index and remove preview images - skip internal conversion service for images if imagick extension is missing - running the controller will always call the hooks preRun and postRun - add tabs on ViewFolder page - link behind logo in header can be set in extension - move attributes for documents and folders on search page into own accordion - search page uses conversion mgr for preview images - backport export of search result from seeddms 6.0.x - ldap authentication used 'uid' instead 'cn' in distinguished name if the initial bind failed and a second bind with the user's credentials is done - fix sorting in search result - import of users can handle hidden and disabled flag - image conversion falls back to gd library if imagick extension is not loaded -------------------------------------------------------------------------------- Changes in version 5.1.26 -------------------------------------------------------------------------------- - add hook additionalDocumentContentInfo - add restapi function 'statstotal' - custom attributes of type 'date' regard the date format - check extension dependency on shell commands - log reason for notification - add list of notification services - clicking on the file selection button no longer submits the form in firefox - fix clear clipboard link in menu - add conversion service from tiff, gif to png - do not use logger in notification service if it was not initialized - fix editing of custom date fields - fix listing files/folders with umlauts when using webdav - fix upload with fine-uploader -------------------------------------------------------------------------------- Changes in version 5.1.25 -------------------------------------------------------------------------------- - certain fields in configuration can be disabled for editing, also works for configuration fields of extensions - send notification mail to owner of document and uploader of a version - new mail body for changing a version comment - add hook documentListPreview - various improvements for workflows - output splash message when removing, editing, adding a category or keyword - extensions cannot be disabled/enabled if configuration file is not writeable - prevent cross site scripting in views/bootstrap/class.DefaultKeywords.php (CVE-2022-28051) - fix possible DoS in op/op.RemoveLog.php (CVE-2022-28478) - show only calendar events of logged in user - show expired documents in calendar - call new hook 'cleanUpDocument' after uploading or updating a document - pass 'add' or 'update' to hook 'addDocumentContentFile' - more access restrictions on files in extensions - fix check of extensions available in repository -------------------------------------------------------------------------------- Changes in version 5.1.24 -------------------------------------------------------------------------------- - fix sending of some notification mails to groups - major overhaul of notifications - check view access for FolderAccess and DocumentAccess - more settings to disable import and download of extensions - add new configuration for excluding sequence and comment when creating a folder - get zendframework from pkgist - auto generate path if not set in settings.xml - add document conversion service - send request email for next workflow step only if that step is actually reached - send mails to owner of document/folder only if not logged in or already in list of notifiers - improve fulltext search - improve validation of change password form - better error checking if uploading or adding a document failed due to size limits -------------------------------------------------------------------------------- Changes in version 5.1.23 -------------------------------------------------------------------------------- - output path of parent folder in many document/folder lists - list affected documents when transfering processes to another user - check for quota and duplicate content in restapi - remove preview images before removing document - fixed error due to multiple declared function when controller method RemoveFolder::run was called more than once - fix php error setting mandatory workflow when uploading documents via webdav - typeahead search for folders can search in subfolders - new theme based on bootstrap 4, including many improvements on small displays - propperly check for translation of html email body (Closes: #510) - set mandatory group reviewer/approver when adding a new document or version - fix sending notification mails to group when uploading document via drag&drop - guest login can use any user account - issue warning if document cannot be approved/reviewed anymore, because it has expired - much better form validation based on jquery validation - secure unlocking/locking of a documents with form token to prevent CSRF attacks - append referuri to base url to prevent redirects to arbitraty sites in op.Login.php - theme can be set in user manager - fields in configuration can be omitted from display and saving - comment of document version may not be modified when document has expired - attributes of document version may be edited if enableVersionModification is true even if the document has been released, obsoleted or has been expired - reviews and approvals can be removed by admin - links are all created absolute based on _httpRoot instead of relative to the current page. This fixes a potential security hole cased by malformed links. - add chart with number of folders per document - add number of links, attachments, versions of a selected user in the user manager - add support for drag and drop of attachments - show all folders in tree when selecting a target folder for move operations even if they are not writable, otherwise sub folders may not appear in the tree, because parent folders are not writable -------------------------------------------------------------------------------- Changes in version 5.1.22 -------------------------------------------------------------------------------- - remove document/folder from index before adding a new one after editing the meta data - fix potential clickjacking attack with manipulated email address of a user - loading more items on ViewFolder page obeys sort order - fix possible csrf attacks due to missing form token (CVE-2021–26215, CVE-2021–26216) - show an error msg on the documents detail page if the checksum of version mismatch - overhaul notifications, type of receiver is now passed to notification service which allows a more fine grained filtering - show difference in number of documents on chart page - list users on Folder Notifiy page which has been disabled - use two column layout on AddDocument page - initial support for sending html mails (not used yet) - fix security hole which allowed under certain conditions to access arbitrary files - use mandatory reviewers/approvers when adding files by webdav - set some http security headers in .htaccess - add searching for last date of a document status change - fix a potential problem when remove a document with files attached to previous versions - search hits in typeahead search are now links to the folder/document. Only the first item in the list still opens the search page. - make sure encryption key is always, prevents error when settings are first saved and encryption key was not set initially -------------------------------------------------------------------------------- Changes in version 5.1.21 -------------------------------------------------------------------------------- - new api to fulltext search - do not offer to export users of group if there are no users - config file can be set in env var SEEDDMS_CONFIG_FILE - fix error when searching for a boolean attribute value - extension may contain a conf varіable to select a workflow - do not set max_execution_time for scripts run by php-cli - add link to document/folder details in each list row if onepage mode is on - add list of rejected documents to tasks - fix .htaccess file in restapi - restapi: add setDocumentOwner, owner can be set when uploading a document - theme in configuration can override theme of user - saving the settings will no longer reenable an extention with no configuration - put a red/green bullet before the extension name in the settings - escape value of dropfolderfile in input form field created by SeedDMS_Bootstrap_Style::getDropFolderChooserHtml() (CVE-2020-28726) - prevent cross site scripting in views/bootstrap/class.DropFileChooser.php folderid wasn't checked propperly for being an integer (CVE-2020-28727) - output format for dates can be configured - add filter function to notification service - reindex document after it was edited - show preview images in drop folder menu on mouse over - add support for indexing folders in fulltext search - add support for start folder in fulltext search - always call hook postAddSubFolder and postEditDocument - call each notification service even if one of them fails - support partial content downloads (useful for embedding videos) - unfold all folders within current path in jqtree -------------------------------------------------------------------------------- Changes in version 5.1.20 -------------------------------------------------------------------------------- - fix import of users - major rework of scripts in utils, unify reading of settings, use PHP_EOL - allow inline editing of document name - import of users does not issue an error if a group column isn't set - removing a document version will not remove attachments of the document anymore - make document details page look like view document page - fix selection of documents/folders - new hooks SeedDMS_View_Document::[startRightColumn|extraVersionsViews|prePreviousVersionsTab|preLatestVersionTab] - add expiration of documents in 3 years - fix setting quota when importing users - export csv file of users of a group -------------------------------------------------------------------------------- Changes in version 5.1.19 -------------------------------------------------------------------------------- - add hooks showDocumentAttribute and showDocumentContentAttribute in Search view - fix layout problems of select2 menu, add option for adding an icon to each option - better import of users from csv file - fix various methods in restapi (Closes: #481) - add hooks showDocumentKeywords and showDocumentCategories - sort versions of extension in extension manager propperly - fix output of help text for config vars in extension - configuring a user id in the settings uses a list of existing users - form elements can have a help text - open the right page or tab after a document version has been removed (go to folder page if the whole document was removed, go to previous tab if an old version was removed and there are other older version, otherwise go to current tab) - expiration of document can be set through webdav - prefix each attribute with 'attr_' when read through webdav - actually set owner as notified user, not the logged in user, check if notified user has access on document not the logged in user. - fix getting group for notification when transition has fired (Closes: #483) - move lots of javascript packages into views/bootstrap/vendors and update them with npm and grunt - update to font-awesome 4.7.1 - add new attribute types 'document', 'folder', 'user', 'group' - overhaul of folder tree which can now be used more than once on a page - fix search of values in attributes of document content - fulltext search finds only documents for which the logged in user has read access -------------------------------------------------------------------------------- Changes in version 5.1.18 -------------------------------------------------------------------------------- - various minor improvements of indexer.php script - minor fix for better behaviour of folder tree ('plus' signs appears if folder has children) - allow to import users from and export users into csv file - skip all fileѕ and directories starting with a '.' when creating an extension's zip file - add support for authentication of the rest api by a key - add support for CORS in the rest api - fix parsing of file size - major rework of restapi which has now a swagger specification - fix indexing of documents by script (Closes: #479) - fix ordering of folders in DocumentChooser and FolderChooser -------------------------------------------------------------------------------- Changes in version 5.1.17 -------------------------------------------------------------------------------- - new version 5.16.2 of fine uploader - obey max_upload_size whenever a file is uploaded - do not list documents in task list, if a previous version is still in workflow. Take only the lastest version into account (Closes: #405) - fix moving documents in clipboard into folder by drag&drop - clipboard can be pinned to fixed position - use standard output for document rows on MyDocuments page - new seeddms logo - fix moving clipboard (Closes: #473) - show access rights of folder/document if user has write access - fix creating preview images of documents in drop folder - fix list of expired documents in admin tools (Closes: #474) - list of expired documents can be sorted - show 'fast upload' always (if turned on), but issue an error msg if the current folder is not writable -------------------------------------------------------------------------------- Changes in version 5.1.16 -------------------------------------------------------------------------------- - initialize categories to empty array. Closes #458 - add new parameter $skipcont to hook folderListitem() - use standard output format for documents and folders on ManageNotify page - allow multiple dependencies on seeddms of extension - add table with chart data below chart - do now show tasks in menu if workflow is turned off completely - do not show hidden users in session list - add norwegian translation - pass configuration to init() of extension (backport from 6.0.x) - place comment of version below version data (remove extra column, backport from 6.0.x) - fix creating folders via restapi (Closes: #469) - custom attributes of type date show up in the calendar -------------------------------------------------------------------------------- Changes in version 5.1.15 -------------------------------------------------------------------------------- - Improved import from file system - HTTP Proxy for access on external extension repository can be set - Do not use unzip in ExtensionMgr anymore - fix version compare on info page - allow one page mode on search page - fix import of older extension versions from repository -------------------------------------------------------------------------------- Changes in version 5.1.14 -------------------------------------------------------------------------------- - allow mimetype to specify documents which can be edited online - show number of indexing tasks in progress bar - fix comparison of last indexing time with creation date of document content - new hooks leftContentPre and leftContentPost - minimize sql queries when fetching sub folders and documents of a folder - custom attributes can be validated in a hook - document attributes comment, keywords, categories, expiration date, and sequence can be turned off in the configuration - workflows can be turned off completely - Extension can be enabled/disabled in the extension manager, the previously used method by setting a parameter in the extension's config file will no longer work. - clean up code for managing extensions - fix renaming of folders via webdav - fix list of expired documents on MyDocuments page - pass showtree to ViewDocument (Closes: #462) - fix upgrade script for sqlite3 -------------------------------------------------------------------------------- Changes in version 5.1.13 -------------------------------------------------------------------------------- - make use of backup dir, do not allow backup if backup dir is not set - the referer parameter in op/op.Settings.php is turned into an url before used for redirect - Import from filesystem can read a file with metadata - drop folder chooser can be put multiple times on a page - add section in README.Install.md on how to secure the configuration - fix php error when removing a version of a document - major rework of ViewFolder page, most parts of the page are now loaded by ajax - do not set mandatory reviewer when document is uploaded and workflow mode is set to 'traditional without review'. - turn off auto complete for date fields - new hook pageNavigationBar in bootstrap, preContent, postContent in ViewDocument - major update of italian translation -------------------------------------------------------------------------------- Changes in version 5.1.12 -------------------------------------------------------------------------------- - fix for CVE-2019-12932 (Persistent or Stored XSS), excaping the search result in the autocompletion search form placed in the header - fix more XSS problems on ViewDocument page - folder/document list can be sorted by name, date, sequence (ascending or descending) - search result can be sorted by name, date (ascending or descending) - do not check for Log.php during installation anymore, it's part of the vendor directory anyway - fix uploading documents from drop folder - replace placeholders in email body header and footer - SeedDMS_EmailNotify::toIndividual() can send attachments - fix for searching a document with the same name, which sometimes found a duplicate name even if it didn't exist - add config option for checking of duplicate subfolder names in the same folder - rest api also checks for duplicate folder/document names if turned on - before moving a document/folder the target folder is checked for an object with the same name, if this is turned on in the configuration - new controller EmptyFolder (currently not used) - check for duplicate mails to the same group when a workflow was triggered - new hook to output clipboard items - turn on load on demand again in the folder tree -------------------------------------------------------------------------------- Changes in version 5.1.11 -------------------------------------------------------------------------------- - fix for CVE-2019-12744 (Remote Command Execution through unvalidated file upload), add .htaccess file to data directory, better documentation for installing seeddms - fix for CVE-2019-12745 (Persistent or Stored XSS in UsrMgr) and CVE-2019-12801 (Persistent or Stored XSS in GroupMgr), propperly escape strings used in Select2 js library used by UsrMgr and GroupMgr - do not show attributes in search results in extra column anymore - fix setting language during login (Closes #437) - fix indexing documents even if no preIndexDocument hook is set (Closes #437) - fix moving documents on the clipboard into the current folder - new hook 'footNote' in class Bootstrap -------------------------------------------------------------------------------- Changes in version 5.1.10 -------------------------------------------------------------------------------- - add new hook on ViewDetails page - running Controller::factory() will include class file only once - use only Packagist for external dependencies - set configured command timeout when creating pdf preview - show numbers of reviews in main menu again - do not send multiple emails after triggering a workflow transition, if a user is involved in more than one of the following transitions - fix javascript errors in out/out.TriggerWorkflow.php - minor corrections in worklflow manager - fix lots of javascript errors when removing, rewinding a workflow and running, returning from a subworkflow - show splash messages after triggering a workflow transition - reindex document version also if time of last indexing is equal to creation time of document version - allow mimetypes (not just file extensions) in config variable viewOnlineFileTypes - added Slim-Framework for a simple router - move most of the login code into a controller, added more hooks in login process - failed login is reported in log file - update of cytoscape library, fix output of workflow on TriggerWorkflowGraph - call hook preIndexDocument and postAddDocument even if the hook addDocument was implemented by a user extension - call hook preIndexDocument and postUpdateDocument even if the hook updateDocument was implemented by a user extension - call hook postEditFolder even if the hook editFolder was implemented by a user extension - whether the apache module xsendfile is used, can be configured - add hooks for filtering tasks shown in the menu bar - allow to set more parameters when upload a document or creating a new folder via restapi - add an input field on the substitute user and extension list page for filtering table rows by string - do not list users/groups in select menu on DocumentAccess page which already has an access right -------------------------------------------------------------------------------- Changes in version 5.1.9 -------------------------------------------------------------------------------- - show messages when access rights for folders are being changed - set date field in mails send (See #334) - fix check for errors when a folder, document or document file is edited - use controller RemoveDocument when delete a document in op/op.Ajax.php (partially solves #408) - catch error when updating a document fails (Closes #410) - use always 'Send from' address as Return-Path when set, only if not set the logged in user's email will be used (Closes #418) - show the debug output when sendind a test mail - add hooks add hooks folderListPreContent and folderListPostContent in class.ViewFolder.php - do not redirect to ForcePassword page if out.Logout.php was opened. This allows to at least logout when the forced password change happens (Closes #421) - set selection menu for expiration to 'date' if date is entered (Closes #423) - check if a new password is identical to the current password and password history check > 0 (Closes #424) - propperly encode url for following pages of search result (Closes $426) - set date of folder in webdav view - fix output of status on approval/review summary page - pass context to getAccessMode() - add opensearch description - make buttons on admin page smaller - pass optional parameter to hook documentListItem() which turns off the surrounding tr tag - do not be strict anymore when checking if config value of extension is in list of possible values (Closes #413) - mtime of files and folders can be taken over when importing from filesystem - fix sending emails in op/op.Ajax.php (Closes #417) - inform subscribers of parent folder if a folder is deleted (Closes #416) - remove duplicate subscribers from notification list (Closes #415) - inform subscriber of a folder which has been added, previously only the subscribers of the parent folder were informed. - do not make subscribers of docs/folders selectable anymore if they are already subscribed (Closes #414) - use the same layout for class.FolderNotify.php as for class.DocumentNotify.php - add another hook for sending the notification email (Closes #419) - fix checking passwords in UsrMgr (Closes #420) -------------------------------------------------------------------------------- Changes in version 5.1.8 -------------------------------------------------------------------------------- - fix javascript errors when an error page was shown - add new extraTabs in ViewDocument for adding more tabs - fix validation of maxuplodsize in fine uploader - do not leak information in calendar about documents the logged in user has no read access on - fix vulnerability when uploading a new file with the fine uploader, make sure the chunk identifier contains only allowed chars '[0-9a-f-]' (CVE-2018-12939 and CVE-2018-12940) - fix vulnerability when clearing the cache, make sure the cache directory to clean actually exists. (CVE-2018-12941) - prevent cross side scripting when loading the dashboard, removed dashboard as it was never finished anyway (CVE-2018-12944) - prevent cross side scripting when url parameter 'action' is manipulated, url parameter is run through htmlspecialchars() before output (CVE-2018-12943) - fix possible sql-injection, do not use integers in sql statement before casting them to int (CVE-2018-12942) -------------------------------------------------------------------------------- Changes in version 5.1.7 -------------------------------------------------------------------------------- - PLEASE READ doc/README.Dist-Layout WHEN UPGRADING!!!! - support for upload/import/download of extensions - extension can have a changelog file - remove ancient code to upgrade from old config file - place all log files in contentDir/log - add readme for new dist layout - do not list empty groups as reviewer/approver - fix sending notification when document attributes change - sending notification when folder attributes change - check if converters are set in out/out.ViewDocument.php at all (Closes #394) - do not remove user when transfering objects - do not periodically count tasks if task list in menu is turned off - use utf8_basename() in op.ImportFS.php - update font-awesome from 3.1.0 to 3.2.1 - merged changes up to 5.0.14 -------------------------------------------------------------------------------- Changes in version 5.1.6 -------------------------------------------------------------------------------- - fix wrong check in restapi (part of #373) - mayApprove() and mayReview() require the status of the document to be S_DRAFT_APP resp. S_DRAFT_REV - add preview for webm videos (Closes #374) - add support for apache mod_xsendfile, minor optimization of file download (see #382) - animate button to download more objects in folder list when loading is active - use converters for creating preview images as configured in settings (Closes #389) - propperly check if user is already in database when doing ldap auth (Closes #388) - list linked documents on the ViewDocument page in the same way as in other document lists - fix 2-factor authentification - configuration variables in extension of type 'select' may have an empty option - default position of documents/folders can be set in configuration (Closes #381) - attribute values can be deleted from all folders, documents - new settings to disallow upload of documents with just a reviewer in traditional workflow mode - webdav and various script use the controller framework instead of calling SeedDMS_Core methods - do not verify peer name and certificate when connecting to smtp server -------------------------------------------------------------------------------- Changes in version 5.1.5 -------------------------------------------------------------------------------- - add controller for AttributeMgr - converters for image previews and pdf previews can be configured in settings - show list of documents having the selected category on page for managing categories - use same layout for group and category manager as already used in user manager - meta data of attachments can be edited - show number of reverse document links in folder/document list - documents can be transfered to another user (Closes partly #368) - list of folders/documents on ViewFolder page can be limited, more objects will be loaded when user scrolls to the end of the page - add more hooks in ViewFolder -------------------------------------------------------------------------------- Changes in version 5.1.4 -------------------------------------------------------------------------------- - fix javascript error when indexing document, because the indexer was also created when the js-code was requested (Closes #340) - new list of expired documents - access on document links and attachments can be controlled by a hook - move AddSubFolder code into controller, add hooks equivalent to AddDocment (Closes #359) - add list of expired documents to MyDocument page - move code of DocumentAccess and EditDocument into controller - make width of preview images in drop folder configurable - hide pager on search page when all folders/documents are listed -------------------------------------------------------------------------------- Changes in version 5.1.3 -------------------------------------------------------------------------------- - add link to search for attribute value in attribute mgr - fix output of validation errors in attribute mgr - check if user has access on document and is not disabled if set as reviewer, approver - notifications are only send to none disabled users - nicer layout in user manager, group buttons, more information - merged changes from 5.0.13 - show number of users where the select user is a mandatory reviewer/approver of - fix upload of attachments - documents, folders, files, events can be moved to a new user - do not show quota information in user manager if quotas are turn off - files in drop folder can be listed in main menu - webdav can use orig. filename of last version instead of document name (experimental) -------------------------------------------------------------------------------- Changes in version 5.1.2 -------------------------------------------------------------------------------- - do not show spinner when clipboard is loaded in menu (prevents flickering of page) - add select menu for predifined expiration dates - add some more hooks - add list of currently logged in users in menu - the owner of a document can see even none public attachments - uploading multiple files can be turned off - add list of tasks in menu - merged changes from 5.0.12 -------------------------------------------------------------------------------- Changes in version 5.1.1 -------------------------------------------------------------------------------- - fix initial creation of postgres database - merged changes from 5.0.11 -------------------------------------------------------------------------------- Changes in version 5.1.0 -------------------------------------------------------------------------------- - added support for postgresql - document attachments can linked to a version and be public or hidden -------------------------------------------------------------------------------- Changes in version 5.0.14 -------------------------------------------------------------------------------- - use cmd timeout when indexing documents (Closes #344) - add change password function to rest api (merge from sebbuku) - merged changes from 4.3.37 -------------------------------------------------------------------------------- Changes in version 5.0.13 -------------------------------------------------------------------------------- - fix php warning if an error occurs in one of the out/*.php pages - merged changes from 4.3.36 -------------------------------------------------------------------------------- Changes in version 5.0.12 -------------------------------------------------------------------------------- - show name and parent folder of document/folder in search list on different lines - check for guest login, admin ip and disabled accounts in webdav server - update last access time in session only once a minute - set Return-Path in emails if from_address in settings is set - pass more arguments to hooks (pre|post)UpdateDocument and searchListHeader - show help messages on settings page if available - fix regex expression in op/op.Settings.php (Closes #317) - better debugging of sql statements in SeedDM_Core - move css for timeline into Timeline view - merged changes from 4.3.35 -------------------------------------------------------------------------------- Changes in version 5.0.11 -------------------------------------------------------------------------------- - merged changes from 4.3.34 - added some more hooks -------------------------------------------------------------------------------- Changes in version 5.0.10 -------------------------------------------------------------------------------- - merged changes from 4.3.33 - new javascript base calendar - overhaul indexing of documents -------------------------------------------------------------------------------- Changes in version 5.0.9 -------------------------------------------------------------------------------- - merged changes from 4.3.32 - add hooks for previewing documents -------------------------------------------------------------------------------- Changes in version 5.0.8 -------------------------------------------------------------------------------- - merged changes from 4.3.31 - fix saving online editing file - replace some php short tags by response()->header() in restapi.php - set filetype propperly after uploadind a new document with the restapi - add new method getDocumentPreview() to restapi - replace lots of tables in forms by bootstraps control-group - add remove button to folder selector - editing of an exiting review/approval can be turned off - add searching for id of folder/document (Closes #302) - admin may set owner of document when uploading it - default access rights for documents can be set in configuration -------------------------------------------------------------------------------- Changes in version 4.3.31 -------------------------------------------------------------------------------- - use bootstrap classes for some forms - show transitions in WorkflowActionMgr and WorkflowStateMgr where actions and states are used - remove file from dropfolder when updating a document and requested by configuration - another check if dropfolder is accessible when opening the dialog box - add preview of pdf documents and conversion to pdf - replace some more php short tags - list of available languages can be set in configuration - check for cycles in workflows and issue warning - major update of russian language (Thanks to r3code) - when updating or adding a document do not send request for approval if review needs to be done before - uncheck checkbox for expiration date if date is selected. - remove some old references to Lucene when indexing a document uploaded by fast upload - show workflow state in list of documents instead of just 'in workflow' - overhaul notification system. Do not send extra notifications to owner anymore. Send notifications to users/groups watching the old and new folder if a document/folder is moved. - drop alternative themes blue, hc, and clean -------------------------------------------------------------------------------- Changes in version 4.3.30 -------------------------------------------------------------------------------- - fix adding new workflows - fix moving documents/folders via drag&drop in Edge (Closes #286) - update folder tree after moving a document/folder with drag&drop (Closes #288) - trim each value of a value sets of attribute definitions before saving - assign role 'user' instead of 'admin' to accounts automatically created during ldap authentication -------------------------------------------------------------------------------- Changes in version 4.3.29 -------------------------------------------------------------------------------- - started greek translation (thanks to ank-99) - move guest authentication from inc/inc.ClassDbAuthentication.php into op/op.Login.php - use jquery.validate for form validation - new graph layout for workflow manager using cytoscape - show current workflow and highlight possible transitions on workflow tab of ViewDocument page - webdav checks authentication against ldap and uses the authentication classes -------------------------------------------------------------------------------- Changes in version 4.3.28 -------------------------------------------------------------------------------- - add expiration in list of documents - fix SetReviewersApprovers if reviewer/approver is an admin or the owner - full text index documents after upload if they are smaller than a configured size - reindex documents when versions were added or removed in order to keep the full text index up to date - show only those groups in GroupView the current user is a member of (partly fixes #239) - make UserView look similar to UserList - log correct ip even after a reverse proxy (Closes #206) - fix sql error in table creation if sql mode is set to STRICT_TRANS_TABLE - menu entry 'Clear clipboard' will call ajax function and no longer redirects to new page - apply all login restrictions like guest login, restrict to ip address, disabled account when authenticating by ldap - place all authentication methods into its own class - do not cache output of op/op.Ajax.php (Closes #280) - major update of italian translations - search also in comment of document versions -------------------------------------------------------------------------------- Changes in version 4.3.27 -------------------------------------------------------------------------------- - check for minimum number of attribute values for each attribute type - fix selection of imported folder in ImportFS, add it to the admin tools - file from drop folder can be removed after successful upload - remove preview images when document or document content is removed (Closes #262) - add clear cache operation in admin tools - fix strict standard error in SeedDMS_Lucene (Closes #263) - fix some sql statements, because they didn't work for mysql 5.7.5 anymore (Closes #273) -------------------------------------------------------------------------------- Changes in version 4.3.26 -------------------------------------------------------------------------------- - move some left over javascript from html code into application.js (Closes #253) - take out last empty line from view/bootstrap/class.Search.php which causes a header to be send to early (Closes: #252, #254) - regular users with sufficient access rights may remove documents via webdav - fix error in utils/indexer.php when new documents were indexed - set url in approval request email after reviewing a document (Closes #259) - inform groups and users watching a new document too (Closes #260) - use bootstrap theme for all steps in install tool -------------------------------------------------------------------------------- Changes in version 4.3.25 -------------------------------------------------------------------------------- - much more consistent drag & drop - various translation updates - take out file deletion because it was not (and probabbly never has been) useful - send notification if folder is deleted by ajax call - add page ImportFS for mass importing files from drop folder - add initial version for editing text files online - further pages with content security policy turned on -------------------------------------------------------------------------------- Changes in version 4.3.24 -------------------------------------------------------------------------------- - fixed possible XSS attack in user substitution - users can have mor than one mandatory workflow, in that case the user can select one - completed MyDocuments page for advanced workflows - guest user can be automatically logged in - get/set custom attributes by webdav, better handling of different attribute types - default search method can be set (fulltext, database) - further pages with content security policy turned on - various translation updates - check for document expiration when showing search result and folder content - more rest api functions - do not send notification mails to disabled users -------------------------------------------------------------------------------- Changes in version 4.3.23 -------------------------------------------------------------------------------- - send notification if document is delete to those users watching the folder - fix editing of customer attributes of type checkbox - disallowed read access for a group didn't prevent the users from being selected as a reviewer/approver - move the last bits of plain sql code from op/*.php into the core - group manager uses ajax like user manager - start to enforce content security policy - fixed possible XSS attack in user manager - ldap search can be filtered (Thanks to Tobias for the patch) -------------------------------------------------------------------------------- Changes in version 4.3.22 -------------------------------------------------------------------------------- - fix lots of HTTP-Headers in op.Ajax.php (Closes: #233) - Timeline will be updated by ajax call, clicking on an item in the timeline will output some document information - Timeline now ends at end of the last day. Previously this day wasn't included - new attribute type 'date' - all dates are now in format 'yyyy-mm-dd' - fix fatal error when requesting new password - send emails to reviewers/approvers if new document or version was uploaded -------------------------------------------------------------------------------- Changes in version 4.3.21 -------------------------------------------------------------------------------- - fix sql statement when searching for attributes (SeedDMS_Core, Closes: 227) - show preview images file list of drop folder - add timeline for single document and all documents in a given period of time - ensure dates in database are localtime, even if sqlite3 is used - fix document and page count in fulltext search -------------------------------------------------------------------------------- Changes in version 4.3.20 -------------------------------------------------------------------------------- - fix setting expire date when editing a document (Closes: #225) - MyDocumets: list only documents to approve which have passed review - show preview image in Review/Approval summary - timeout for external commands for creating fulltext index can be set - add translations for korean, croation, ukrainian - file can be submitted with approval/review - alternative full text search engine without dependency on Zend - much faster user manager -------------------------------------------------------------------------------- Changes in version 4.3.19 -------------------------------------------------------------------------------- - end date in search form actually ends at the end of the day - allow context sensitive help - document chooser shows docs in root folder again - fixed regression from 4.3.18. Documents can not be approved if review is still pending - polish page for document version details, add review/approval log - take out remaining link to old version info file - new configuration parameter for overriding the mimetype delivered by the browser (Closes #195) - new option -c to force recreation of index (Closes #219) - username can be passed to utils/adddoc.php (Closes #214) -------------------------------------------------------------------------------- Changes in version 4.3.18 -------------------------------------------------------------------------------- - utils/indexer.php uses propper converter settings - search result can be restricted to folders or documents only - documents still in review can still be reviewed even if the workflow mode changes to traditional_only_approval - approvals can be submitted, even if document was released/rejected - check for duplicate content on document/folder check page - open tab on ViewDocument page as specified in URL -------------------------------------------------------------------------------- Changes in version 4.3.17 -------------------------------------------------------------------------------- - when adding a document, notifications can be specified - send mail to those users and groups next in the workflow after adding a document or a new version (previously mails were only send when a transition was triggered) - clean workflow log when deleting a document version. - programms for indexing are actually used (Bug #137) - fix take over of reviewers/approvers from previos version - fix calculation of quota in user list - do not show hidden users in select box of search form - notifier can be set when new document is uploaded -------------------------------------------------------------------------------- Changes in version 4.3.16 -------------------------------------------------------------------------------- - propperly take new workflow mode 'traditional without review' into account - fix bug in calculating pages for page browser - updated italian and german translation -------------------------------------------------------------------------------- Changes in version 4.3.15 -------------------------------------------------------------------------------- - ѕend notification to users if they are required to take action in the next workflow transition - escape quotes in workflow graph (javascript threw an error if usernames contains quotes) - fix installation issue on MS Windows - propperly escape quotes in strings to confirm deletion when clicking on the delete icon in the folder/document list (Bug #189, #204) - new language turkish - SeedDMS_Core_DMS::getAllUsers() returns now previously missing language and theme of user - fix setting a group notification only (Bug #201) - old cached preview images will be replaced with a new version - reviewers and approvers can be taken over from the previous version - disabling clipboard will disable all clipboard functions not just the clipboard area on the ViewFolder page - if a user substitution was done, it will be done in the restapi too - doSearch() in restapi applies the limit after filtering the hits by access rights. This slows down search, but at least returns a result set in cases where the user has access to very few documents only. - workflow mode can be set to traditional without review process - add bulgarian translation - propperly obey permissions of documents and folders in search result -------------------------------------------------------------------------------- Changes in version 4.3.14 -------------------------------------------------------------------------------- - add missing start in transaction in SeedDMS_Core_Folder::remove() - pass access object to view in out.ReviewDocument.php (Bug #191) - unset expiration date works again - complete revised italian translate (Thanks to Diego Fiorani) - preset expiration date for documents in settings - fix checking for subfolders when moving folder (Bug #194) -------------------------------------------------------------------------------- Changes in version 4.3.13 -------------------------------------------------------------------------------- - more error fixes when searching for attributes - fix saving multi value attributes without a maximum number of values - webdav sets propper modification time - add button to select all log files for removal - deleted folders and documents on the clipboard don't crash seeddms anymore when moving into a different folder (Bug #186) - Download of documents whose content is gone will not be possible anymore (Bug #185) - allow user to access a locked document via webdav if he/she is the owner of that document - saving a document via webdav will not in any case create a new version anymore. If the user and mimetype hasn't changed the content is just replaced. -------------------------------------------------------------------------------- Changes in version 4.3.12 -------------------------------------------------------------------------------- - log each operation in op/op.Ajax.php - fix another error when search for multi value attributes of folders - do not use strptime anymore (Bug #129) - fix specfying port for database in hostname (Bug #173) - propperly check for min/max values of attributes -------------------------------------------------------------------------------- Changes in version 4.3.11 -------------------------------------------------------------------------------- - translation updates - password expiration can be set to 'never' - fixed saving multi value attributes - do not close browser window anymore when keywords are chosen (Bug #141) - fix almost unrestricted fast upload (Bug #175) - no more php warning on Workflow summary page (Bug #177) - various bug fixes in saving and searching for multi value attributes -------------------------------------------------------------------------------- Changes in version 4.3.10 -------------------------------------------------------------------------------- - various bug fixes (e.g. Bug #171, #165) - translation updates -------------------------------------------------------------------------------- Changes in version 4.3.9 -------------------------------------------------------------------------------- - fix another encoding error when creating/updating full text index (Bug #83) - renew time limit during indexing documents - new file selection input when uploading files - top navigation uses full width of screen (Bug #157) - replace dskspace() with platform independend version (Bug #156) - much better handling of quotas - add list of users in admin menu - delete inactive sessions after configured cookie lifetime or 1 week if cookie lifetime is set to 0 - add more information on user list page - admins can edit their account details even if 'self edit' is turned off - consistent handling of document locking - op/op.ViewOnline.php returns the latest version if version<1 - delete document/folder with ajax call when clicking on cross-icon in document list (ViewFolder and Search) - critical ajax calls require form token to be set - fix drag and drop from clipboard - much improved document handling - list mandatory approvers/reviewers on AddDocument and UpdateDocument page (Bug #154) ₋ search in attributes of folders, reorganize search form, do not search unless a search criteria is given - fix document selection on ManageNotify page - add file upload via Drag&Drop -------------------------------------------------------------------------------- Changes in version 4.3.8 -------------------------------------------------------------------------------- - fix error in xml dump (Bug #114) - all folders with documenst/subfolders in document chooser can be opened (Bug #136) - fix error in command line indexer, now uses converters in settings.xml (Bug #137) - more condensed output of full text info page - use settings for enable theme and language selector in profile (Bug #142) - restrict number of items in pager on search result page - іssue error if end date is before start when adding an event (Bug #146) - blank categories and keywords cannot be saved anymore (Bug #148) - add missing error msg in attribute editor (Bug #149) - better user feedback after reseting password (Bug #139) - add page with statistical data (pie charts) - add mode for showing missing translations (turned off by default) - better checking of posted parameters in op/op.EditDocument.php (Bug #150) - fix login as guest by clicking on 'Login as guest' link (Bug #152) - add check for new version on version info page - preview images are always as wide as configured in the settings (Bug #153, #124) -------------------------------------------------------------------------------- Changes in version 4.3.7 -------------------------------------------------------------------------------- - fix some vulnerabilities discovered by Steven Seeley - fix javascript error when clicking on folder in document chooser (Bug #135) - always sort folders/documents in sequence chooser by sequence -------------------------------------------------------------------------------- Changes in version 4.3.6 -------------------------------------------------------------------------------- - fix mandatory reviewer/approver, if it is the owner or an administrator - fix wrong sort order in second level of folder tree - add missing translation (Bug #130) - update of russion translation (Bug #131) - turn off http only cookies if large file upload is turned on (Bug #132) - list documents having a link to the current document - preview image sizes can be set in configuration (Bug #124) - show missing link to document in list of approvals - update of document version detail page - fix link to folder in clipboard shown in menu (Bug #123) -------------------------------------------------------------------------------- Changes in version 4.3.5 -------------------------------------------------------------------------------- - fix setting of order by sequence in configuration (Bug #127) - fix ordering by sequence in folder listing - list mandatory approvers/reviewers without access on document - login failures will actually increment the failure counter of the user - fix error when doing operations on root folder and notification is turned on (Bug #128) - renew session timeout on each click unless cookie lifetime is set to 0 -------------------------------------------------------------------------------- Changes in version 4.3.4 -------------------------------------------------------------------------------- - clean up and test ldap authentication code - fix handling of multivalue attributes - use same ordering in tree as in list view (Bug #121) - add missing parenthesis in version file (Bug #100) - add missing file views/bootstrap/class.RemoveFolderFileѕ.php (Bug #101) - unlinked documents/folders can be moved into root folder - take out debug echo statement (Bug #125) - fix some errors in notification mails - fix some security holes (found by Craig Arendt, Stratum Security) - add initial version of REST api -------------------------------------------------------------------------------- Changes in version 4.3.3 -------------------------------------------------------------------------------- - theme and language selector can be turned off (Bug #109) turning off the language selector will also turn it off on the login page - default method for sorting folders and documents can be set (#112) - port of database can be set behind hostname (separated by colon) - fix minor compatibility errors in database table creation - fix some php warnings when php 5.5.x is used (Bug #119) - strip slashes from _GET, _POST, _COOKIE, _REQUEST if magic quotes is turned on - use From address from smtp settings when sending mails - major translation update -------------------------------------------------------------------------------- Changes in version 4.3.2 -------------------------------------------------------------------------------- - fix approval of documents by group if owner of document is member of group - make jumploader work with java 1.7 - turning of the language selector will no longer turn off user substitution - use PATH_SEPARATOR and DIRECTORY_SEPARATOR when checking the include path for files - check if target folder is a child of the current folder when moving folders - fix missing documents in tree of document choser (Bug #105) - add another folder/document check -------------------------------------------------------------------------------- Changes in version 4.3.1 -------------------------------------------------------------------------------- - translates strings (Bug #86, #87, #88, #90) - add icon for rar files (Bug #85) - webdav: PROPFIND returns only released documents (just like GET did already) - folder tree can be completely expanded again if set in configuration - add missing div to header and fix folding of main menu - consistent implementation of approval/release of document owner -------------------------------------------------------------------------------- Changes in version 4.3.0 -------------------------------------------------------------------------------- - create preview images for attachted document files - expiration date cannot be set for the version as indicated by the gui. Even in the past it was set for the document, but this was not clear for the user. - reorganization of ViewDocument page - maximum execution time of php scripts can be set in the settings and is now actually used. - replaced folder tree view with a tree based on jquery which loads subfolders on demand - attribute value must match regular expression if given (Bug #49) - show more information about attributes in attribute manager - set url in notification mail after document review (Bug #56) - new configuration setting specifying a list of user ids that cannot be deleted - fix output of breadcrumbs on some pages (Bug #55) - do not take document comment for version if version comment is empty. The user must explicitly force it. - combine full text and database search in one form, filtering search result by document status or category will no longer return folders - update of translation for zh_CN, fr_FR, sv_SE, es_ES - added new language arabic (Egypt) (Bug #63) - turn on foreign key constraints for sqlite3 databases - update to bootstrap 2.3.2 - better checking of valid search term for fulltext search (Bug #61) - moving several documents/folders at a time (Bug #64) - set encoding of terms when adding document to full text index (Bug #66) - droped support for myisam database engine - add support for connecting to ldap servers without anonymous bind - if a user has a mandatory workflow, don't allow him/her to set a workflow on insert/update of a document - fixed calculation of password strength when simple password strength is set and user data is saved (Bug #69) - better handling of invalid query terms in full text search. - check for minimum php version 5.2.0 in install tool (Bug #74) - fix missing url params of paginator in search result - fix missing email header in password forgotten mail (Bug #81) - use POST request for password strength checking -------------------------------------------------------------------------------- Changes in version 4.2.2 -------------------------------------------------------------------------------- - admin can be set as reviewer/approver again and do the review/approval - fixed minor layout problem in folder tree (Bug #51) - close folder choose dialog when folder is selected (Bug #52) -------------------------------------------------------------------------------- Changes in version 4.2.1 -------------------------------------------------------------------------------- - fixing jumploader upload, added missing file for uploading attachments - various improvements of user interface - fixed bug when adding individual approver (Core) -------------------------------------------------------------------------------- Changes in version 4.2.0 -------------------------------------------------------------------------------- - sqlite3 database can be updated - use awesome font for icons - currently logged in user can be changed temporarily if being admin - count documents/folders recursively for output in folder list (Bug #43) - remove multiple log files at once (Bug #35) - return to same tab on LogManagement page as before removing a log file (Bug #30) - new bootstrap datepicker with localization (Bug #36) - users can be assigned to a group when edited or added (Bug #39) - place a message on ViewDocument page if the document needs an action in the workflow (Bug #4) -------------------------------------------------------------------------------- Changes in version 4.1.3 -------------------------------------------------------------------------------- - fixed setting document link (no more PHP fatal error) - fixed typo in variable name which cause a PHP warning when sending the notification mail after updating a folder comment - fixed code to determine required approver and reviewer - fixed wrong language setting in installer (Bug #45) -------------------------------------------------------------------------------- Changes in version 4.1.2 -------------------------------------------------------------------------------- - set propper internal folder path of sub folders after moving a folder to a new place -------------------------------------------------------------------------------- Changes in version 4.1.1 -------------------------------------------------------------------------------- - fixed update of folders (no more php error) -------------------------------------------------------------------------------- Changes in version 4.1.0 -------------------------------------------------------------------------------- - minor fixeѕ in german help file (Bug #27) - fixed various php warnings and errors due to strict error checking - database update from 3.4.x to 4.0.x doesn't issue an error anymore (Bug #26) - new configuration variables to enable owner and logged in user to review and approve documents - global menu will be turned in a drop down menu if screen width decreases - overall better support for mobile devices with small screens - reworked notification system: notification will be send in the language of the receiver. - fixed multiple file upload (Bug #40) - use bootstrap icons in folder tree -------------------------------------------------------------------------------- Changes in version 4.0.0 -------------------------------------------------------------------------------- - completely new user interface based on bootstrap - quota support on user basis - support for sqlite3 - added pdo database abstraction as an alternative to adodb, pdo is not the default - search by expiration date - completely new and much more powerful workflow engine - language can be switched at any time - check for duplicate document names in a folder - document/folder chooser allows to search - added clipboard and drag&drop for moving documents - show used disk space of a document and all files of a user - show access rights and id for folders and documents on info page (admin only) - added checksum to document versions - webdav: saving an identical document several times will not create new versions but just update the modification time - check and cancel upload if a new version of a document is identical to the last one -------------------------------------------------------------------------------- Changes in version 3.4.3 -------------------------------------------------------------------------------- - fixed saving of multiple values field for attribute definitions -------------------------------------------------------------------------------- Changes in version 3.4.2 -------------------------------------------------------------------------------- - fixed database update script (second trial) - fixed jumploader upload - updated dutch language file - fixed list on MyDocuments page -------------------------------------------------------------------------------- Changes in version 3.4.1 -------------------------------------------------------------------------------- - fixed database update script - check if full text index is available before added new document - minor translation settings -------------------------------------------------------------------------------- Changes in version 3.4.0 -------------------------------------------------------------------------------- - check for password strength - passwords can expire after a given number of days - prevent passwords from being reused - user can be disabled after n login failures - added autocompletion to document chooser - do not list documents in search result which cannot be accessed by the user - more database constraints and transaction management - documents, folders and document content can have user defined attributes - update of swedish language (Thanks to Thorsten M.) - update of french language (Thanks to Yves) -------------------------------------------------------------------------------- Changes in version 3.3.11 -------------------------------------------------------------------------------- - fixed output of status in full text search result - do not allow to insert categories with an empty name -------------------------------------------------------------------------------- Changes in version 3.3.10 -------------------------------------------------------------------------------- - fixed stupid error in addDocumentCategory -------------------------------------------------------------------------------- Changes in version 3.3.9 -------------------------------------------------------------------------------- - more security fixes for preventing XSS - minor fix in spanish translation - do not show document on mydocuments page twice -------------------------------------------------------------------------------- Changes in version 3.3.8 -------------------------------------------------------------------------------- - more security fixes for preventing CSRF, XSS and sql injection attacks - fixed search for special chars (e.g. german umlaute) in fulltext search -------------------------------------------------------------------------------- Changes in version 3.3.7 -------------------------------------------------------------------------------- - major security update which fixeѕ lots of possible XSS and CSRF attacks - comment is no longer needed when adding a user, email is now required (this time it is really changed) -------------------------------------------------------------------------------- Changes in version 3.3.6 -------------------------------------------------------------------------------- - fixed deletion of files over WebDAV for some clients - updated russian language - comment is no longer needed when adding a user, email is now required - added debug mode in DBAccess class - list of users/groups on 'Edit Access' page does not contain users/groups which are already on the acl - if a document/folder has access rights based on a group, then the highest access right will be used (not the one first assigned) - added configuration of path to stop words file - fixed creation of database dump file -------------------------------------------------------------------------------- Changes in version 3.3.5 -------------------------------------------------------------------------------- - extend the php include path with ADOdb path much earlier. This fixeѕ problems with Log.php if installed in the same as ADOdb. -------------------------------------------------------------------------------- Changes in version 3.3.4 -------------------------------------------------------------------------------- - fixed another issue of incorrect document access if masDirID != 0 - updated README - use common way to check for configuration file -------------------------------------------------------------------------------- Changes in version 3.3.3 -------------------------------------------------------------------------------- - fixed incorrect document access if masDirID != 0 - added swedish translation (thanks to Thorsten Michelfelder) -------------------------------------------------------------------------------- Changes in version 3.3.2 -------------------------------------------------------------------------------- - minor bugfixes -------------------------------------------------------------------------------- Changes in version 3.3.1 -------------------------------------------------------------------------------- - added missing check for access right in webdav server - update.sql creates table tblUserPasswordRequest - minor changes in language files - fixed link to login page on password forgotten page -------------------------------------------------------------------------------- Changes in version 3.3.0 -------------------------------------------------------------------------------- - all data is saved into the database without prior modification - smoother installation process with less manual interaction - support multi level content directory to overcome the limitations of recent filesystems - better approval/review workflow - do not allow any operation on a document if is locked (unless you are the owner) - searching for folders (run the new consistency check function!) - initial consistency check of database with repair function - group managers are allowed to remove and delete users from their group - withdraw rights from a group if the group access is set to none - added password forgotten function -------------------------------------------------------------------------------- Changes in version 3.2.2 -------------------------------------------------------------------------------- - fixed unallowed access on documents and folders -------------------------------------------------------------------------------- Changes in version 3.2.1 -------------------------------------------------------------------------------- - large file upload with jumploader can be turned off -------------------------------------------------------------------------------- Changes in version 3.2.0 -------------------------------------------------------------------------------- - select keywords from list in advanced search form - support for full text index lucene - much better support for uploading several files at once and huge files - put configuration into xml file - added installation script -------------------------------------------------------------------------------- Changes in version 3.0.1 -------------------------------------------------------------------------------- - Fixed license in package.xml - Removed some php short tags - updated czech translation (Thanks to Radek Žufan Tichý ) - do not ask for a filename if _strictFormCheck is set to false - do not erase file selection fields if a new document is added - fixed problems with expiry system -------------------------------------------------------------------------------- Changes in version 3.0.0 -------------------------------------------------------------------------------- Major reorganisation of code Split LetoDMS into a core module, webdav server, and the known web application -------------------------------------------------------------------------------- Changes in version 2.0.1 -------------------------------------------------------------------------------- ADDED A GRAPHIC LOGO The user can personalize it changing the image in styles/logo.png Reviewed the style to accomplish with the logo New settings' flag "_expandFolderTree" to start with the navigation tree hidden, expanded or expanded at the first level The tree status (hide/show) will be preserved through folder actions The witdh of open/closed tree can be defined using CSS (in "clean" CSS style "tree-open" and "tree-closed" ) DIFFERENT COMMENTS FOR DOCUMENT AND VERSION Creating a document user can insert a different comment for version and for entire document. If the version comment is leaved empty the document comment will be used for both Added a warning about the maximum upload file size in the upload pages (add document and add files). The size is a server setting and does not depend by letoDMS Better allignment in the view document page (Thanks to alekseyn). Better allignment in the view document version page. Note: the allignement is simply suggested setting width in table columns, thus can be modified by very long strings. Now checking none between keywords,name and comment in search form means searching all. That's a more logical way (same as behaviour of status checks) Added a settings var for default calendar view (week,month or year) Simplified the "Related documents" table: now the public yes/no is visible only to the user tha can edit it Removed a small bug with calendar function inclusion (thanks to c8900219) Bugfixed the control of empty document names (thanks to turkeburgr) Fixed a compatiblity bug in log management page (removed the unused readlink function) Restyled the warnings appearance in clean style Fixed a bug with empty vars on user management Fixed a small bug when trying to download deleted files from folder view Fixed a smal bug with logging on version removing (Thanks to larppaxyz) Reviewed print css according to folder tree and logo In print view the status was hide by css. Fixed EXPERIMENTAL: review the LDAP autentication by Doudoux. The old code is leaved commented in op.Login.php and in inc.Settings.php. the submit review/approval has moved in the reviewer/approvers list -------------------------------------------------------------------------------- Changes in version 2.0.0 -------------------------------------------------------------------------------- ADDED MULTIPLE DOCUMENT INCLUSION in "Add document" page there's a new switch to add multiple files for every file a new document will be created in the folder the size limit depends on server settings if multiple file are added: - the file name is used to name the document - expiration, reviewers, approvers, comment, etc will be the same for every document ADDED HUMAN-READABLE OPTION ON ARCHIVE CREATION: with a flag in the "archive creation" tool the archive can be created using DMS paths and original file names. The archive contains only the last version of every file. Clearly a human readable archive cannot be used to restore a server backup but they are handyer for external uses. ADDED A SIDEBAR WITH TREE VIEW on the folder browsing the feature is optional an there's a new settings flag var $_enableFolderTree = true; The sidebar shows only folders (a complete tree wich includes document would be very heavy on most installation) ADDED A SHARED CALENDAR for DMS users - there'a new menu item ("calendar") to access the calendar - the starting view is current week - calendar has 3 view : year, month and week - every event has start/end time (only date), user, creation and date, name and comment - no hour/minute management (is not intent as personal/daily calendar) - events can be added and viewed by everyone (are public) - the event can be edit and delete by the user who insert it or by administrators - the feature is optional (can be deactivated in inc.Settings) ADDED A SIMPLE DB DUMP UTILITY in the Admin-Tools/Backup tools - the feature should complete the backup utilities toolkit - THE DB DUMP IS EXPERIMENTAL AND MUST BE TESTED WITH YOUR DB - The created will require an empty existing db to restore data (content only) IMPROVED THE DOCUMENT SEARCH FOR DOCUMENT STATUS now one can search all document rejected, expired, obsolete, ecc. reordered and restyled search form and result list Beautyfied e-mail messages The document expiration date (if any) is now showed near the status lined up the reviewer approvers table in view document and document details fixed a bug with group notify list administration reverse alphabetical order (newer first) for log list, backup list, dump list minor bugfix in versioning file creation/notification list editing added confirmation page for user/group deletion improve some log lines in user/group management minor bugfix in myDocuments view Now when editing a user the password can be leaved unchanged (if nothing is inserted the password will not be changed) Completed (not translated) some languages files fixed some bug with user deletion (there were some tables not updated) Fixed a bug with the time picker improved the folder chooser dialog Now the "view on line" works regardless to the case of the extension string (the extension can be upper, lower or mixed case) Same bugfix for the icon used in folder/document view Removed the javascript hide/show for reviewers/approvers list (buggy with some browser) Resolved a bug with hidden user flag Improved the log view page Reordered document action casistics (lock/unlock, permissiones, ecc.) Removed the js source folder and file (not used) Added new features description to the on-line help On update operation the mandatory users/reviwers where not used: fixed Bugfix again on View online function Bugfix in personal keyword list editing Removed a lot of php notice (viable only on some servers with php Notice enabled) Removed a bug with direcotry creation and safe_mod activated Reordered the theme folders Fixed a not define accessmode in document chooser -------------------------------------------------------------------------------- Changes in version 1.9 -------------------------------------------------------------------------------- This is a first major release with a lot of changes, then some new features can contain new bugs. The DB require a small change: update.sql is included in the folder UPDATE-v1.9 ADDED THE MANDATORY REVIEWERS AND APPROVERS LIST (per user): Administrator can associate to every user one or more users as mandatory reviewer/approver. Every document inserted by that user will be forced to be reviewed/approved by the users in that list. Note that if document is not readable by the mandatory approver/reviewer then the appoval/review will not be required (for example will not be required for private documents). ADDED A LOGGING SYSTEM: - works with plain files - administrator tools includes a page to view/download/delete log files - log files are rotated with a time parameter in settings ($_logFileRotation) The logging system is an experimental feature and must be carefully tested in large multiuser environments. There are two new parameters in inc.Settings to enable. USERS CAN NOW BE HIDDEN FROM USERS LISTS viewed by all (there's a "hide" checkbox in user manager page) this function works with the "user view" list shown to all users clearly if "$_enableUsersView = false" in configuration the option is useless Restyled and improve the notify management: - the new personal administration is included in "myAccount" menu of every user - ADDED RECURSIVE INCLUSION (folder with all subfolders and/or all documents) Viewonline now works (but should be tested again with different platforms) Owner of a document is now emailed if someone else rename/move/update the document When a document is reviewed/approved the mail is now correclty sent to the document updater (the user who update the version) not necessarly to the owner. ADDED SWITCH BETWEEN ALPHABETICAL OR ORIGINAL ORDER in the folder view clicking on the "name" column header The archive includes an older version of adodb working with MySQL-4 The downloadable text file with versioning infos is now updated immediatly before download Bugfixed the create_table.sql Removed a bug in english language file Removed last references to the old name "myDMS" Restyled and improved the "backup tools" page Bugfixed the datechooser (was limited to 2010) ADDED THE EDITABLE "MANAGER" FLAG TO GROUP MEMBER now one (or more) user can be flagged as "manager" group member Currently group notification are editable only by group managers but the flag will be required for future use IMPROVED THE GROUP/USER MANAGEMENT PAGES - operation are ordered in a more clear way - the "add new" operation uses the hide/show javascript - now the page refresh immediatly when new data are saved Restyled and improve the "edit access permission" pages Improved the keyword category editing - operation are ordered in a more clear way - the "add new" operation uses the hide/show javascript - now the page refresh immediatly when new data are saved - the keyword category operation has been removed from administration personal account menu (the operation has gone in administration tool's menu because administrator edits the global keywords categories) Improved Keword chooser Added quick installation instruction on the README file THE USER IMAGES ARE NOW OPTIONAL (the implementation is poor and doesn't work on every system, then can be disabled) ------------------------------------------------------------------- Changes in version 1.8.3 ------------------------------------------------------------------- Improved portuguese (thanks to Pedro.broggini), slovak (thanks to deb00t) and german (thanks to Vault) languages translations. Resolved some minor bugs (undefined variables) in inc.Class document and inc.ClassUI Bugfixed UPDATE script - added update instruction in README file Resolved a bug on ViewOnline feature (thanks to doudoux) ------------------------------------------------------------------- Changes in version 1.8.2 ------------------------------------------------------------------- The link in revision/approval request email now is for the ViewDocument Fix a bug in big backup file creation Review ad reorganized the ViewFolder page: removed Reviewers/Approvers list and added directory contents (file and subfolder count) and comments Added directory dimension and content in out.Statistics Now thwe initial version number of a new document can be set (you can start a document with a version > 1) Some mail are corrected The various input field has been enlarged (using clean style) ------------------------------------------------------------------- Changes in version 1.8.1 ------------------------------------------------------------------- REDESIGNED THE ORGANIZATION OF DATA FOLDER Now the data folder (where files are located) has a more efficient organization: data_dir / id / version.filetype This scheme makes backups much more intuitive (the folder name corresponds to the id of the document, all versions and attached files are in the same folder. - Removed no longer needed tdbDirPath and tdlPathList - Removed no longer needed free path lookup functions - Modified sql create_tables.sql for changes to the DB in accordance with the new organization WARNING: This change makes the version incompatible with existing archives/DB but is required by the all thennew features (read ahead) The "UPDATE" folder contais two script for updating existing installations To update an existing archive: - Backup all (including DB) - Install the new DMS version - Install the "UPDATE" folder containing two files update.php and update.sql - Log in as administrator - Manually invoke the script (http://indirizzo/UPDATE/update.php - Remove the folder "UPDATE" If everything works well the old content has ben renamed "old" and can be removed (eg via ftp) ADDITIONAL FILES Added the ability to upload additional files associated to a document (as attachments) these files are not versioned and are designed as accessories to the document (Eg the PDF version or reductions in the image). The files are associated with the document, not to version. NOTE: To add attachments the user must have write permission on the document The attachment can be removed by the user who added it or having total permissions BACKUP Added some useful tools for backing up files and folders (real files, not the DB). Especially useful for working with entire folders which, being virtual, can not easily be backupped via ftp. There are three operations designed to be eventually applied in sequence. Data Backup versioning: Create for each document in a DMS folder a file containing the main versioning informations This allows you to make backup copies of which also contain information from the DB. This is meant to be performed before the creation of an archive, After creating the file versioning file can be viewed from out.ViewDocument Creating Archives: Creates a tar.gz file containing all files related to a specific DMS folder. The file is created in settings->_contentDir The file is constructed so that it can be unpacked again in the settings->_contentDir to restore removed files. In the page is presented the list of existing backup files which you can downloaded or delete Deleting files: you can delete from the server all the files related to a specific DMS folder and all its subfolders. By doing this you can free space on the server without removing the version information saved in the database that will be available for regular consultation. Having a backup deleted files can easily be restored when needed. All backups operations can be performed on the entire archive or only on a DMS folder. All backups operations are accessible only to administrators. OTHER FEATURES Added the possibility to change a approval/review already done. The editing is possible at any moment only to the user who made it. The time is retained (so you can understand subsequent amendments). The document status is updated automatically following a change. The editing is only possible on the latest version of the document. If a document expire date is set editing is only possible within that time Added delete_all_contents script. Cleaning DB tool for test use Proper content of some e-mail Added general information to the statistic page: - No. of documents - No. of folders - No. of files in every document - Number of total files - Total size of the archive Fixed the view of system notify list The comments related to the update opration (versione comment) are now editable Adjusted out.DefaultKeywords now equal to out.UserDefaultKeyword Added function formatted_size (view size in Bytes / Kb / Mb / Gb) in inc.Utils and applied where necessary Fixed a bug on documents cancellation (was not removed the corresponding list of notification) The files in data folder can be removed without cause errors in the DMS. When a file is not effectively present in out.ViewDocument displays a warning "file removed" and, of course, is no longer given the option to download. This feature can be used to free up space on the server, removing old files, while leaving available the corresponding version information. Fixed the view in out.AddSubFolder.php (default font size) Added icons for openoffice.org mime-type Added icons for some types of extensions (bz, dot, docx, etc.). Added (in inc.settings) option to disable the user administrator as a reviewer / approver (not listed) Remove the untranslated instructions "die" (replaced by UI:: exitError) Proper control permissions for internal links (related document): - The guest user can not add links - Users without write permission can only add links private - Add link publici the user must have write permission - To cancel link should be the user that added or have permission to total ------------------------------------------------------------------- Changes in version 1.8 ------------------------------------------------------------------- The reviewer/approver can edit his review/approval after having submitted it. Only the user whom effectivly submitted the review/approval can edit it, even if he was required as group member. The document status will be updated autmatically according with the modified submission. The edit is possible only on the last version of a document (there's no reason to edit a old version). If expiration date is set the edit is possible (obviously) only within that date. Account menu has been reviewed. Two new pages containing general views of groups and users are integrated in the account menu. The feature can be disabled in inc.Settings.php. The email notification can be completely disabled in inc.Settings.php. Every users can leave empty his e-mail field to not receive e-mail even if strictFormCheck is on. Fix of two redirection bugs after deleting documents or folders. The notification list is now integrated in the myDocument page/menu. The general tree view has been enhance. Fix of some e-mail composition errors. Fix of some italian translation errors. The owner is no longer automatically added to the notification list of a document. The notification lists should not be modified automatically (if not required the notification are annoying) ------------------------------------------------------------------- Changes in version 1.7.3 ------------------------------------------------------------------- - removed vulnerability lang/theme at login (TODO: referuri in op.Login.php) - completed translation calls - a print css added - added "warning" and "error" styles - new css clean e hc (high contrast for visually impaired folks) - guest login must be default false - reorderer the first level menu - reordered personal document navigation - reorderd personal account navigation - out.info is now linked to administrator only and access protected - added permission control on root folder (no inheritance) - removed "remove" and "move" commands for root folder - reorganized permission pages - added disclaimer note (shown on every page) with setting flag and translation - where possible ALL the operation feedback are removed (where no errors the page return immedatly to the contents) - added and exitError function in ClassUI and review ALL pages to comply - syled the out.KeywordChooser page - deleted inc.OutUtils - deleted op.NotifyMailer (not used) - added a "legend" to out.Statistics ------------------------------------------------------------------- Changes in version 1.7.2 ------------------------------------------------------------------- - Style Sheet modifications to improve IE6 compatibility, contributed by Juan Lago (thanks Juan!). This fixes some placement issues with elements that have the position attribute set to "absolute". - The div elements that are used to clear floats have been fixed so that they have zero height in IE6. It is not enough to specify "height: 0"; one must also set "font-size:0" otherwise IE6 will set the height of the element to match the standard font size. - UI layout improvements. Various changes to the user interface to improve the page flow and allow for further expansion in the future. The context menu bar has been separated from the page heading into its own container underneath the title. It's a more logical place to present the menu, and will allow for the easy addition of further sub-headings in the future without compromising the page flow. - The last dependency on the original theme system has been eliminated with the introduction of updated chooser dialogues for selecting files and folders. These dialogues have the new themes and the code has been revamped, replacing the old table structures with unordered lists. - LDAP update. A minor change to the LDAP authentication code to allow for the use of URIs to identify the server name (e.g. ldaps://host.com). Also, the LDAP version is set to 3 in order to support secure connections. - New language translations for Czech and Slovak. Contributed by SF user helix84 (thanks!). ------------------------------------------------------------------- Changes in version 1.7.1 ------------------------------------------------------------------- - Re-vamped Notification system allows users to receive an email when a document or folder is changed. This is a new, event-based mechanism that notifies the user as soon as the change has been made and replaces the cron mechanism originally developed. Any user that has read access to a document or folder can subscribe to be notified of changes. Users that have been assigned as reviewers or approvers for a document are automatically added to the notification system for that document. A new page has been created for users to assist with the management of their notification subscriptions. This can be found in the "My Account" section under "Notification List". - The test used to identify HTTPS connections has been improved so that it correctly identifies IIS servers that have ISAPI enabled but are not using HTTPS protocol. ------------------------------------------------------------------- Changes in version 1.7.0 ------------------------------------------------------------------- - Fixes to CSS display bugs. Minor updates to the display. - Improved handling of character escape sequences. - Review / Approve dates added to folder views and search results. - New file system directory management code to accommodate limitations in the underlying filesystem which restrict the number of files that MyDMS can store. MyDMS now uses a nested directory structure to store files, rather than a flat one. However, note that individual files are still stored one per directory in order to preserve compatibility with older versions of MyDMS. For details of the problem and the solution implemented, please refer to: http://mydms.sf.net/2007/08/15/new-file-system-storage-structure/ - Hungarian translation. - And as a bonus, there is a Drupal theme compatible with MyDMS. ------------------------------------------------------------------- Changes in version 1.6.1 ------------------------------------------------------------------- - Theme and language choice are now saved as user attributes between sessions. Read update-1.6.1.txt for changes to database schema. - Link to document review / approval page from out.ViewDocument.php. - French translation. - Brazilian Portuguese translation. - Traditional Chinese translation. - Relaxation of criteria for selecting reviewers / approvers. Users now only require read access to be eligible reviewers or approvers. - Documents are now displayed in the correct sequence in the folder view. - Documents can be downloaded directly from the folder view by clicking their icon. - Document icons in the folder view now reflect the document type. - Empty passwords are not accepted, even when JS is disabled in the browser. - New restricted access mode rejects login from users who are not entered into the internal database, even if LDAP authentication was successful. ------------------------------------------------------------------- Changes in version 1.6.0 ------------------------------------------------------------------- - Introduction of a document workflow system that manages the life-cycle of a document, including review and approval stages. Details: Document Class: Created new methods: Document::addIndReviewer() Document::addGrpReviewer() Document::addIndApprover() Document::addGrpApprover() Changes to: Document::addContent() New Class: Email. out.AddDocument.php op.AddDocument.php Changes to allow selection of reviewers and approvers. Group Class: Changes to: Group::getUsers() -- query optimised New Methods: Group::getReviewStatus() Group::getApprovalStatus() User Class: New Methods: User::getReviewStatus() User::getApprovalStatus() Class Folder: Changes to: Folder::addDocument() -- accept reviewers, approvers as parameters. New Class: AddContentResultSet. Database: Document version field changed from TINYINT to unsigned SMALLINT throughout database. `tblGroupMembers`: `id` field removed as it is unnecessary. Created a primary of `groupID`, `userID`. DocumentContent Class: Created new methods: DocumentContent::getStatus() DocumentContent::getReviewStatus() DocumentContent::getApprovalStatus() DocumentContent::delIndReviewer() DocumentContent::delGrpReviewer() DocumentContent::delIndApprover() DocumentContent::delGrpApprover() out.ViewDocument.php op.ViewDocument.php Changes to incorporate display of workflow status. Links to allow user to change status of a document revision. out.UpdateDocument.php op.UpdateDocument.php Changes to allow selection of reviewers and approvers. out.Login.php op.Login.php redirect user to originally requested URL upon successful login. out.ReviewDocument.php op.ReviewDocument.php out.ApproveDocument.php op.ApproveDocument.php Created to enable users to review and approve documents. out.OverrideContentStatus.php op.OverrideContentStatus.php Allows document owner or site administrator to override the status of a document. out.SetReviewersApprovers.php op.SetReviewersApprovers.php Allows document owner or site administrator to re-assign reviewers and approvers to a document revision that is pending review or approval. out.ActionSummary.php Lists all the documents owned by current user that are pending review or approval. Lists all documents that are awaiting review or approval by the user. Search page now allows user to search for documents pending review or approval. Search results display overall document status. - Admin user cannot be deleted, and admin privilege cannot be removed from the admin user. Previously, both actions were possible. - Users can be assigned administrative privileges in the User Manager. - Deleting document revisions or the document itself notifies all affected users by email, deletes entries from all status logs. ------------------------------------------------------------------- Changes in version 1.5.1 ------------------------------------------------------------------- - Fixed a bug in the keyword editing code which was preventing users from adding default keywords into global keyword categories. ------------------------------------------------------------------- Changes in version 1.5.0 ------------------------------------------------------------------- - Optimised search. Improved the performance of the search function by placing more of the work on the database and by applying indexes to some of the tables. Sub-folder searches are also dramatically improved due to the incorporation of a folderList field in the tblDocuments table. - Optimised display. New compact theme significantly reduces the page load times. This is the default theme. The original is still available as a selection. - Changed file download headers such that downloading works with IE over SSL. - Changed all instances of $HTTP_COOKIES_VARS, which has been deprecated, to $_COOKIE. - Replaced all short open tags (