• Welcome to the Chevereto User Community!

    Here, users from all over the world come together to learn, share, and collaborate on everything related to Chevereto. It's a place to exchange ideas, ask questions, and help improve the software.

    Please keep in mind:

    • This community is user-driven. Always be polite and respectful to others.
    • Support development by purchasing a Chevereto license, which also gives you priority support.
    • Go further by joining the Community Subscription for even faster response times and to help sustain this space

Work in progress Chevereto v5.0.0 announcement

Fixed user search input display

Display had this issue with the search box when displaying several icons.

1788554554486.png
 
Fixed bug with language settings allowing disabled languages to be passed via forged request

The user settings form wasn't checking for enabled languages, but system available languages. This allowed users to configure languages not enabled via forged requests.
 
Fixed bug with users being able to follow private users

Via forged request an user could follow a private user, which should be only available for admin or manager.
 
Fixed bug with broken JS when managing following for a private user

When admin|manager was managing follow over a private user, the JS was breaking execution due to missing following count placeholder.
 
Improved listing caches with support for user listings

Listing caches now also includes listing generated by logged users, making the system way more robust. I also added more reverse indexes to invalidate cache on content editing.
 
Added support for routing middleware

Routes (API V5) feature support for middleware, enabling to craft re-usable gates based on user role, attributes, settings enabled, etc.
 
Added support for fine grained roles & permissions

Chevereto now uses chevere/authorization for managing authorization, which enables us to add fine-grained permissions instead of just role-based conditions. The system is based on bitwise comparison so besides being cheap on CPU it enables to use bit operations when comparing/asserting roles and permits.
 
Added support for Schwager API specification (API V5, Tenants API)

Chevereto now describes its API with the Schwager API spec, which I created specifically for Chevereto. The system is based on chevere/schwager and here's a demo on how it looks like to work with it. I took the time to build a complete spec and HTML presentation so when working with the API you won't have to suffer from brain damage as all the other available specs out there.
 
Fixed bug with user asset upload not filtering video files

The user asset upload functionality has been enforced to prevent uploading video files, which may lead to a system loop breaking the service.
 
Added /api/5/users/{id}/following route

This new API route will enable to list the users being followed by the user identified by idEncoded.
 
Added /api/5/users/{id}/followers route

This new API route will enable to list the users that follow the the user identified by idEncoded.
 
Added /api/5/users/{id}/search/files route

This new API route will enable to search files for the user identified by idEncoded.
 
Added /api/5/users/{id}/search/albums route

This new API route will enable to search albums for the user identified by idEncoded.
 
Fixed bug with managers being able to ban administrators

Route /json wasn't preventing managers to ban administrators, the system was only hiding the button action but wasn't preventing the request.
 
Fixed bug with managers being able to ban other managers

Route /json wasn't preventing managers to ban other managers, the system was only hiding the button action but wasn't preventing the request.
 
Added /api/5/users/{id}/password route

This new API endpoint will allow admin and managers to alter the password for the user identified by idEncoded.
 
Updated dashboard user editing now using the user idEncoded in the URL

Unified this URL so the system constantly uses idEncoded on all URLs.
 
Added /api/5/users/{id}/authenticator-app route

This new API route will enable to create (POST) and remove (DELETE) the authenticator app code for the user identified by idEncoded. These actions will be available only for admin/manager roles.
 
Added /api/5/users/{id}/api-key route

This new API route will enable to create (POST) an API key for the user identified by idEncoded.
 
Added /api/5/users/{id}/api-key/{apiId} route

This new API route will enable to remove (DELETE) the API key apiId belonging to the user identified by idEncoded.
 
You must log in or register to reply here.

Chevereto Cloud

Back
Top