Commit Graph
3214 Commits
Author SHA1 Message Date
Linus Rath 7f751e7de2 fix: offer the tags of the selection's account in the context menu, like the toolbar 2026-10-28 08:58:19 +01:00
Linus Rath 33ca8efb0f fix: keep shared tags safe when members edit at once or the server fails
The first version wrote the whole tag list on every change, guessed a
group when the server wouldn't say, and treated a failed read like a
server without metadata. Now:

- Definitions are a map by tag id under `tags`, and each change patches
  one tag (`metadata/org.bulwarkmail.tags/tags/<id>`), so two members
  adding tags at once both keep theirs. Fields and colors this version
  doesn't know survive. The `{ list }` and bare-array shapes are still
  read and converted by the first save.
- Shared tags appear only for confirmed group principals. A failed
  principal lookup keeps the user's own tags and asks again later.
- "No metadata advertised" (0.16) and "the read failed" are separate.
  A failed read keeps the last good tags; a failed save keeps the change,
  says so, and sends it with the next good read after the client's
  pause.
- Push reloads wait for 5 s of quiet and skip the echo of our own save;
  a returning tab reloads definitions only, and the scan for unnamed tags
  runs once per sign-in and then at most every 30 minutes.
- The editor names its buttons after the tag, shows the delete warning
  and 44 px buttons on phones, returns focus to the edit button, and
  asks for Inbox rights only for confirmed groups.
2026-10-28 08:58:11 +01:00
Linus Rath 7f06ed7637 Merge branch 'feat/org-features' into feat/org-tags
# Conflicts:
#	lib/admin/restriction-keys.ts
2026-10-28 08:14:39 +01:00
Linus Rath 9304557819 fix: look up another signed-in account for the external mail checks only when an admin turned them on 2026-10-28 08:07:55 +01:00
Linus Rath 97d686b916 test: check that the 1.0 test build was asked for shared tags and stayed online 2026-10-28 07:18:16 +01:00
Linus Rath a049282cc0 test: check live edits and the unified inbox for shared tags 2026-10-28 07:15:14 +01:00
Linus Rath a19d95c4bb test: cover shared tags in group mailboxes against the test servers 2026-10-28 07:10:42 +01:00
Linus Rath 528450db61 fix: name the edit button of a shared tag after the tag, not the list 2026-10-28 07:10:42 +01:00
Linus Rath 9f7e875faf docs: add delegates to the changelog 2026-10-28 06:49:14 +01:00
Linus Rath 3d8a0cfd0b feat: let admins lock shared tags per domain or group 2026-10-28 06:46:04 +01:00
Linus Rath b049b6f470 feat: share tag names and colours in group mailboxes #1310 2026-10-28 06:43:46 +01:00
Linus Rath 82918fc7d7 Merge branch 'feat/org-features' into feat/org-delegates
# Conflicts:
#	lib/admin/restriction-keys.ts
2026-10-28 06:30:09 +01:00
Linus Rath 49c9ec6a45 fix: start a delegate's Change from what they have and keep what fits no choice as it is
Change used to pre-fill the closest choice and then replace everything
of that type, so a folder added after "all", a single non-Inbox folder,
a non-default calendar, free/busy only or manager rights were narrowed
or widened on Save. Now a type gets a choice only when the grants match
it exactly; anything else starts at "Keep as it is", which leaves that
type out of the patch. Mixed levels keep each type's rights.

Also in the Delegates page:
- Change and Remove wait, with Try again, while a type couldn't be read
- an answer from the account before an account switch is dropped
- calendars, contacts and files follow their feature gates
- Remove says it covers what was shared from the user's own account
- typing your own address says "That's you"
- groups named only by the session get the group badge
- on Stalwart 1.0 the read hint says read delegates can flag mail
- the person list is plain buttons, not a listbox without arrow keys
- the rights follow sharingRights
2026-10-28 06:28:02 +01:00
Linus Rath f0539a33f6 feat: let admins limit every share dialog to read access with sharingRights 2026-10-28 06:27:49 +01:00
Linus Rath f0a89fdb65 fix: forget delegate names on sign-out and when their account is removed 2026-10-28 06:27:28 +01:00
Linus Rath 5ce0f96f26 fix: read delegate sharing only for the apps that are on, with the file tree alongside 2026-10-28 06:27:07 +01:00
Linus Rath daa1cccdb2 docs: add the no third-party traffic switch to the changelog #903 2026-10-28 05:53:25 +01:00
Linus Rath 795faceee7 Merge branch 'feat/org-thirdparty' into feat/org-features 2026-10-28 05:51:22 +01:00
Linus Rath 9a99fa617e docs: add external mail warnings to the changelog 2026-10-28 05:50:36 +01:00
Linus Rath 00ea203f4f refactor: describe the sending identity and account once for every send check 2026-10-28 05:50:17 +01:00
Linus Rath 687cd89346 Merge branch 'feat/org-external' into feat/org-features
# Conflicts:
#	lib/outgoing/quick-reply.ts
#	lib/outgoing/send-pipeline.ts
2026-10-28 05:46:11 +01:00
Linus Rath b680a676c0 test: check that remote pictures say the organisation blocks them with no third-party traffic #903 2026-10-28 05:42:43 +01:00
Linus Rath 638e7c2670 fix: start the delegate dialog in the search field 2026-10-28 05:42:04 +01:00
Linus Rath 9bae704c03 test: cover delegates through the real UI on the test servers 2026-10-28 05:38:44 +01:00
Linus Rath 0bd63fca08 fix: name a delegate from the accounts they share with you when the directory won't 2026-10-28 05:38:44 +01:00
Linus Rath b0eb9fcfe1 fix: say the organisation blocks remote content instead of offering to load it with no third-party traffic #903 2026-10-28 05:38:39 +01:00
Linus Rath 9e809a31db Merge branch 'feat/org-features' into feat/org-thirdparty 2026-10-28 05:27:58 +01:00
Linus Rath 9f230ca8fc fix: keep a quick reply as a draft when an automatic sign-out comes while the external recipient question is open 2026-10-28 05:23:25 +01:00
Linus Rath 36ec531fb8 fix: account for the pdf.js namespaces in the Lite bundle host scan #903 2026-10-28 05:22:37 +01:00
Linus Rath 6c3ec30a7e docs: add organisation signatures and disclaimers to the changelog 2026-10-28 05:20:29 +01:00
Linus Rath 823da8c810 Merge branch 'feat/org-features' into feat/org-external
# Conflicts:
#	components/email/email-viewer.tsx
#	components/mail/mail-app.tsx
2026-10-28 05:19:21 +01:00
Linus Rath c31cb76a47 test: check that a running Gravatar plugin reaches nothing with no third-party traffic #903 2026-10-28 05:19:08 +01:00
Linus Rath 1a92eba702 test: check that a refused address lookup shows the directory note on its own 2026-10-28 05:18:49 +01:00
Linus Rath 2a90437fbc test: give the domain list test time under load 2026-10-28 05:15:40 +01:00
Linus Rath 3be3ad5ddf test: cover quick reply Back, the domain on a tap and the plugin hand-over per switch against the test servers 2026-10-28 05:14:00 +01:00
Linus Rath 9dab8955dd feat: confirm before inviting people outside the organisation to a meeting 2026-10-28 05:12:24 +01:00
Linus Rath 0232ae322b feat: let admins hide delegates or limit them to read access per domain or group 2026-10-28 05:11:26 +01:00
Linus Rath 1202a13720 fix: judge external mail by the message's own account and the sending account in several-account setups 2026-10-28 05:11:24 +01:00
Linus Rath bcf4f3a7a6 feat: give a delegate access to mail, calendars and contacts in one step 2026-10-28 05:11:23 +01:00
Linus Rath 60167f752f fix: label mail as External when any sender is outside or has no domain, and show the domain on a tap 2026-10-28 05:09:35 +01:00
Linus Rath 836dcba66e fix: don't count senders whose images the user allowed as contacts for the external recipient confirm 2026-10-28 05:09:03 +01:00
Linus Rath c51245081a test: sign quick replies addressed through the envelope and keep the disclaimer out of sign-out drafts 2026-10-28 04:57:09 +01:00
Linus Rath 2ace501871 Merge branch 'feat/org-features' into feat/org-signatures 2026-10-28 04:51:22 +01:00
Linus Rath 2e34759f54 fix: show a folder shared read only on Stalwart 1.0 as read only, not custom 2026-10-28 04:50:08 +01:00
Linus Rath 9aa810f20d refactor: keep the share rights presets in one module for every share dialog 2026-10-28 04:46:45 +01:00
Linus Rath 7fefb35f25 test: send organisation signatures and disclaimers whose HTML and text versions differ 2026-10-28 04:43:54 +01:00
Linus Rath 89f0cd7e92 fix: say that {company} takes the branding of the web address Bulwark is opened on 2026-10-28 04:37:24 +01:00
Linus Rath daae45e379 fix: ask for the details every sending address needs and preview the signature that is sent 2026-10-28 04:35:26 +01:00
Linus Rath d128503db5 fix: use the organisation policy of the account a message is sent from 2026-10-28 04:32:39 +01:00
Linus Rath 4bb596a9a0 test: cover the plugin API's own no-third-party locks #903 2026-10-28 04:30:43 +01:00