{"id":15654,"date":"2018-07-18T15:01:51","date_gmt":"2018-07-18T13:01:51","guid":{"rendered":"https:\/\/owncloud.com\/?p=15654"},"modified":"2018-07-18T15:01:51","modified_gmt":"2018-07-18T13:01:51","slug":"owncloud-server-10-0-9-summer-release","status":"publish","type":"post","link":"https:\/\/owncloud.com\/de\/blogs\/owncloud-server-10-0-9-summer-release\/","title":{"rendered":"ownCloud Server 10.0.9 Release"},"content":{"rendered":"

S3 Object Storage Support becomes Open Source and is redesigned from scratch<\/h2>\n

ownCloud can be configured to use S3 Object Storage as primary storage. The open standard enables infinite scalability to cope for an exponentially growing amount of data.<\/p>\n

The app – formerly Enterprise only – was re-written from scratch by Thomas M\u00fcller<\/a>\u00a0and J\u00f6rn Friedrich Dreyer<\/a>.\u00a0The new S3 Objectstore implementation \u201cfiles_primary_s3\u201d, which will massively improve performance, reliability and protocol-related capabilities, is about to be released soon and will be available as Open Source, meaning free to use for everybody. See a list of S3 compliant storage implementations here<\/a>.<\/p>\n

Stay tuned for in-detail release announcements. For regularly news directly to your inbox you can also sign up for our monthly newsletter here<\/a>.<\/p>\n

 <\/p>\n

Password Policy becomes Open Source, and Enterprise-compliant!<\/h2>\n

Together with ownCloud Server 10.0.9 a new major version of the Password Policy<\/a> app is released. At the same time, the app is now available for free and completely Open Source, as many new features are community-developed.<\/p>\n

The changes to the app introduce new features, which allow for passphrase expiration and history policies. If you want guest or local users to care for their security, you can now force them to change their passphrase upon first login.<\/p>\n

Additionally you can specify expiration policies for passphrases, forcing users to set new passphrases every 90 days, for example. Users will have to actually choose new passphrases, as, for example, the last 10 used passphrases will not be usable when changing a user’s passphrase.<\/p>\n

Users will be notified via mail before the passphrase expires and when the passphrase has expired.<\/p>\n

Note that regularly changing passphrases is discouraged by NIST<\/a>. But some organizations have to comply with different guidelines; so they are now able to do so. We recommend to think carefully about hurdles that are put upon users regarding user experience.<\/p>\n

 <\/p>\n

\n

\n \n   <\/i>\n Get the app! <\/a>\n <\/div>\n\n <\/p>\n

 <\/p>\n

\"Semih

Semih Serhat Karakaya wrote huge parts of the new Password Policy features.<\/p><\/div>\n

Semih Serhat Karakaya<\/a>, who was a GSoC student at ownCloud<\/a> last year, wrote many of the new Security features in the new app. We want to thank him for his great contributions and his dedication to security in ownCloud.<\/p>\n

He already gathered lots of experience writing his Security app<\/a>, which has similar features. He will re-release the app without the passphrase security features as bruteforce protection app, as the passphrase security features are now openly available, too.<\/p>\n

Semih will also give a talk at the ownCloud Conference 2018<\/a> how he integrated ownCloud with rocket.chat<\/a>. Join Semih in September 18-21 in Nuremberg to gather more know-how and get the best out of your ownCloud<\/a>!<\/p>\n

 <\/p>\n

\n

\n \n   <\/i>\n Join Semih on the ownCloud conference <\/a>\n <\/div>\n\n <\/p>\n

 <\/p>\n

Taking Sharing to the Next Level<\/h2>\n

Even if other features are an important part of ownCloud, too – the core feature is file sharing. ownCloud offers versatile sharing mechanisms as ownCloud and with 10.0.9,\u00a0 there are even more possibilities for sharing:<\/p>\n

Pending Shares<\/h3>\n

We think users should have more control over incoming shares. If you give someone a piece of chocolate, you ask beforehand, if they even want it. Maybe their hands are full, maybe they don’t eat milk products. They probably do want the chocolate, but their consent is important.<\/p>\n

Previously, shared contents would appear, unannounced, in the receiving user\u2019s file hierarchy, and clients would start synchronizing. With 10.0.9, incoming shares can have a pending state, offering the ability to accept or decline unwanted files (as known from federated sharing<\/a>). This gives users a better control over their cloud storage and provides a better user experience.<\/p>\n

If a user gets an incoming share, the recently introduced notifications framework<\/a> is being used to inform them via mail. They can also use the bell icon in the web interface and the ownCloud Desktop Client to accept or reject a share.<\/p>\n

To switch to the new behavior, administrators need to disable the configuration option \u201cAutomatically accept new incoming local user shares\u201d<\/em> in the „Sharing“<\/em> settings section. By default the option will be enabled to preserve the known behavior.<\/p>\n

\"Pending

Uncheck auto-accepting shares<\/p><\/div>\n

Sharing Overview<\/h3>\n

The „Shared with you“<\/em>\u00a0 view was enhanced to support the Pending Shares feature. In the Sharing overview, you can now also see if a share is pending, accepted, or rejected.<\/p>\n

This enables users to see with one glance what others have shared with them, and manage those shares.<\/p>\n

\"ownCloud

The Sharing overview shows pending, accepted and rejected shares.<\/p><\/div>\n

 <\/p>\n

Accidentally Unshared? Just Undo it!<\/h3>\n

In the sharing overview, users can not only accept shares, which they rejected earlier – but also restore shares that have been unshared before, without requiring the owner to share it again:<\/p>\n

 <\/p>\n

\"ownCloud

Undo a rejected share by accepting it in the Sharing overview.<\/p><\/div>\n

 <\/p>\n

This is basically an „undo“\u00a0<\/em>feature for deleted or rejected shares. Everyone makes a wrong click sometimes – undo buttons are the perfect countermeasure. If you’re interested why we use an\u00a0„undo“\u00a0<\/em>button instead of a warning with a confirmation button, read this article<\/a>.<\/p>\n

 <\/p>\n

Sharing Autocomplete – How Secure do you Want it?<\/h3>\n

When users want to share with other users, previously they see autocompleted usernames, after entering 4 letters. This threshold was introduced in 10.0.8<\/a> for security reasons to prevent username\u00a0crawling.<\/p>\n

As this security-enhancing change came at the expense of usability, and might only be required in special scenarios, the default value is reverted to 2<\/strong>. If you want it, you can adjust it in the config.php with the option 'user.search_min_length'<\/span> =><\/span> 2<\/span><\/code>.<\/p>\n

\"ownCloud

When you share with a user, their name autocompletes after 2 letters.<\/p><\/div>\n

To further improve usability, there is a hint now to inform users about the required character count to get suggestions.<\/p>\n

Exclude Groups from Sharing<\/h3>\n

The option \u201cExclude groups from sharing<\/em>\u201d, in the administration settings‘ \u201cSharing<\/em>\u201d section, enables administrators to exclude groups of users from the ability to initiate file shares. But before 10.0.9, this only applied to users who were not in other groups which allowed sharing.<\/p>\n

This behavior is now both more restrictive and better covers the expectations of administrators. With ownCloud 10.0.9, it will apply to all users who are members of at least one of the excluded groups.<\/p>\n

 <\/p>\n

\"ownCloud

You can exclude groups from sharing in the settings.<\/p><\/div>\n

 <\/p>\n

Community Effort to Improve User Interface & Theming<\/h2>\n

Apart from the sharing improvements, there is a lot of progress on user interface and theming, especially on mail templates. It allows admins several adjustments to automatic mails.<\/p>\n