ownCloud Server 8.2 Feature Improvements
Jump to improvements for: Users |
Administrators | Developers
End User Improvements
Pictures Becomes Gallery
The Gallery app replaces the Pictures app for browsing and viewing images. Supporting a wider range of image formats, better performance and new features, Gallery presents a significant enhancement. You can now sort your images, zoom in and out while viewing, and you can configure many specific settings in a simple text file.
A new sidebar in the Files app makes it easy to view details on a file without cluttering the interface. A larger preview with meta data, file activity, sharing state and older versions all resides in the new sidebar. In the future, ownCloud apps can add further functionality through panels in the sidebar.
Refined User Interface
By reducing the number of colors and shades, the ownCloud interface is cleaner. Actions on files like download, rename and delete can now be found in the three-dot 'more' menu and this release also introduces new, more modern icons.
Updated Text Editor
The text editor included in ownCloud has been updated, featuring a new look and automatically saving your files.
Administration and Management Enhancements
System administrators are strongly encouraged to check out the release notes for ownCloud Server 8.2 before upgrading or doing a fresh installation!
ownCloud now offers a notification window where an admin can push notifications out to users of the ownCloud system, such as notification about a maintenance window. This is currently only in the web interface but future mobile and desktop client releases will incorporate the notification feature. There is an Announcement Center App in the app store for sending system wide notifications.
Trash and Versions Retention Control
The new guaranteed file deletion option allows an admin to set a policy for retaining deleted files and file versions – setting the file retention time to automatic, min, max, both or none. In this way, admins have the flexibility to manage storage and quota for their users as they require.
Encrypt / Decrypt Command
After enabling, disabling or changing encryption keys, existing user data can be (re) encrypted or decrypted with the command line occ tool.
Improved Mimetype Handling
Administrators can now define custom mimetype mappings and aliases. The occ tool has been updated to allow scanning for new mimetypes and update the database to ensure files are properly identified.
ownCloud Server 8.2 has received a significant amount of security hardening, including the following:
- ownCloud now encrypts user keys in the ownCloud session. This means that, even if a server is compromised and the session data is discovered, user private keys stored in the session – required to unencrypt files stored on the server – can no longer be read.
- The CSRF token is not added to cross-domain requests initiated by jQuery anymore and is displayed differently on each request to mitigate BREACH alike attacks.
- Referers are not sent anymore to prevent leaking of potential sensitive information within the URL such as the filename.
- Autoloader is now only loading files from folders that are explicitly whitelisted and only allows loading files from enabled apps.
- Password reset tokens are now expiring after 12 hours or if a user logged-in again.
Find more changes and details here
There have been many other small changes that benefit system administrators, including:
- SMB external storage can have a domain specified, separate from the username, for use with session credentials.
- Made temporary directory configurable in config.php.
- Unavailable external storages are not rechecked every request, their failed state is saved and they are tried again after 10 minutes.
- The upgrade page now states which apps are being upgraded.
- Downgrades are now prevented as they are unsupported and dangerous.
- The admin page now warns for PHP versions which are End of Life so admins can prepare to upgrade and avoid security problems which come with unsupported PHP versions.
- New occ commands to simplify logging configuration and commands to get/set system and app configuration values.
Improvements for Developers
ownCloud is meant to be a platform
. This release introduces many improvements to the API, both to make more functionality available for app developers and to improve the existing interfaces.
Modular Authentication Mechanism Support
External storage backends are now built upon a 'BackendService' class, decoupling authentication from data handling. This reduces complexity in each external storage backend and makes writing new backends easier. It also makes the existing backends more flexible and capable of dealing with a wider range of authentication mechanisms than just 'username-password'.
Capabilities and Query Building
A major change is the addition of a capabilities manager which allow apps to expose capabilities in a more generic way. App authors now also have access to a public API for the doctrine query builder.
New and Expanded Functions for Apps
As always, there have been many changes to the ownCloud API. For example, applications can now send notifications to end users and mimetype.js makes it possible to request a mimetype icon from JS. To further aid developers, the command 'occ app-check-code' will notify about deprecated methods and classes.
Improved External API
The OCS Share API now returns a URL when fetching shares, allows setting expire date on new shares directly and returns permissions and expire date on creation.
See all features of ownCloud on the Features page.
Discuss ownCloud with others
Join the ownCloud community
ownCloud Contributor Conference