v3.23

Fix login did not work.
Thanks to xet7 !
2019-08-20 21:17:36 +03:00 · 2019-08-20 21:14:16 +03:00 · 2019-08-20 19:25:37 +03:00 · 2019-08-20 19:21:39 +03:00 · 2019-08-20 19:20:06 +03:00 · 2019-08-20 19:16:44 +03:00
122 changed files with 35434 additions and 38539 deletions
@@ -29,3 +29,6 @@ versions.json
 Thumbs.db
 ehthumbs.db
 .eslintcache
+package-lock.json
+.meteor/local
+.meteor-1.6-snap/.meteor/local
@@ -75,7 +75,6 @@ horka:swipebox
 dynamic-import@0.5.1
 staringatlights:fast-render

-mixmax:smart-disconnect
 accounts-password@1.5.1
 cfs:gridfs
 rzymek:fullcalendar
@@ -96,3 +95,4 @@ wekan-markdown
 konecty:mongo-counter
 percolate:synced-cron
 easylogic:summernote
+cfs:filesystem
@@ -14,7 +14,7 @@ audit-argument-checks@1.0.7
 autoupdate@1.6.0
 babel-compiler@7.3.4
 babel-runtime@1.3.0
-base64@1.0.11
+base64@1.0.12
 binary-heap@1.0.11
 blaze@2.3.3
 blaze-tools@1.0.10
@@ -30,6 +30,7 @@ cfs:collection@0.5.5
 cfs:collection-filters@0.2.4
 cfs:data-man@0.0.6
 cfs:file@0.1.17
+cfs:filesystem@0.1.2
 cfs:gridfs@0.0.34
 cfs:http-methods@0.0.32
 cfs:http-publish@0.0.13
@@ -104,7 +105,6 @@ minifier-css@1.4.2
 minifier-js@2.4.1
 minifiers@1.1.8-faster-rebuild.0
 minimongo@1.4.5
-mixmax:smart-disconnect@0.0.4
 mobile-status-bar@1.0.14
 modern-browsers@0.1.4
 modules@0.13.0
@@ -0,0 +1,13 @@
+dependencies:
+  - libreadline-dev
+  - libssl-dev
+  - bsdtar
+targets:
+  ubuntu-18.04:
+  ubuntu-16.04:
+  ubuntu-14.04:
+  centos-6:
+  centos-7:
+  debian-10:
+  sles-12:
+  sles-11:
@@ -1,3 +1,337 @@
+# v3.23 2019-08-20 Wekan release
+
+This release fixes the following bugs:
+
+- [Fix login did not work](https://github.com/wekan/wekan/commit/b2deab544bfeea49017bec27f92f1269b0b7ec43).
+  Thanks to xet7.
+
+Thanks to above GitHub users for their contributions and translators for their translations.
+
+# v3.22 2019-08-20 Wekan release
+
+This release adds the following new features:
+
+- [Wrap minicard text labels to multiple rows](https://github.com/wekan/wekan/commit/af830812dbbf7d766a754d937308b11373c66e5a).
+  Thanks to xet7.
+
+and fixes the following bugs:
+
+- [Fix: Some users cannot switch views or languages](https://github.com/wekan/wekan/issues/2630).
+  Thanks to xet7 and justinr1234.
+
+Thanks to above GitHub users for their contributions and translators for their translations.
+
+# v3.21 2019-08-16 Wekan release
+
+This release adds the following new features:
+
+- [In the filter menu, 1) Turning on "show archive" will request archived lists and show them on the ListView.
+  2) Turning on "hide empty lists" will hide empty lists on the ListView](https://github.com/wekan/wekan/pull/2632).
+  Thanks to urakagi.
+
+and fixes the following bugs:
+
+- [Fix mismatched queries](https://github.com/wekan/wekan/pull/2628).
+  Thanks to justinr1234.
+- [Fix Summernote too wide when in mobile screen](https://github.com/wekan/wekan/issues/2621).
+  Thanks to whowillcare.
+
+Thanks to above GitHub users for their contributions and translators for their translations.
+
+# v3.20 2019-08-15 Wekan release
+
+This release fixes the following security issues:
+
+- [Revert permission change](https://github.com/wekan/wekan/commit/d302d6f857657ada229f78d9fcd32f63753d9779),
+  related [#2590](https://github.com/wekan/wekan/issues/2590) and
+  [these comments](https://github.com/wekan/wekan/commit/9f6d615ee5bbdb7552e6bdcae75a76a7f74fef7a#commitcomment-34636513).
+  Thanks to road42, justinr1234 and xet7.
+
+and adds the following new features:
+
+- On board, BoardAdmin and normal user can now [invite new user directly
+  with email address](https://github.com/wekan/wekan/issues/2060),
+  [without using Admin Panel or registering
+  at /sign-up](https://github.com/wekan/wekan/commit/5c696e5a3c70d31a7af6e47cbcf691f6c18eb384).
+  Thanks to xet7.
+
+and fixes the following bugs:
+
+- [Fix bug: When on board, clicking Admin Panel redirects to All Boards page, so it did require
+  to click Admin Panel again](https://github.com/wekan/wekan/commit/d302d6f857657ada229f78d9fcd32f63753d9779).
+  Thanks to xet7.
+
+Thanks to above GitHub users for their contributions and translators for their translations.
+
+# v3.18 2019-08-15 Wekan release
+
+This release adds the following new features:
+
+- [Send webhook message](https://github.com/wekan/wekan/issues/2518) when
+  [cardDetails is rendered](https://github.com/wekan/wekan/pull/2620).
+  Thanks to jymcheong.
+- Related to [above new feature](https://github.com/wekan/wekan/issues/2518),
+  Add [setting CARD_OPENED_WEBHOOK_ENABLED=false as
+  default](https://github.com/wekan/wekan/commit/b8c527d52bec7272c890385f11e26acec65822ae).
+  Thanks to xet7.
+
+and adds the following updates:
+
+- [Update base64 dependency](https://github.com/wekan/wekan/commit/c87001fa9f8d1fa13640ae604b1ba46556c7813c).
+  Thanks to xet7.
+
+and fixes the following bugs:
+
+- [Time line is missing delete/edit comments, add English i18n for these two activities,
+  For html email msg needs](https://github.com/wekan/wekan/pull/2615).
+  Thanks to whowillcare.
+
+Thanks to above GitHub users for their contributions and translators for their translations.
+
+# v3.17 2019-08-13 Wekan release
+
+This release fixes the following bugs:
+
+- [Fix ReferenceError: cardAssignees is not defined](https://github.com/wekan/wekan/issues/2612).
+  Reverted In-Progress Assignee field, moving it to feature branch.
+  Thanks to saschafoerster and to xet7.
+
+Thanks to above GitHub users for their contributions and translators for their translations.
+
+# v3.16 2019-08-13 Wekan release
+
+This release adds the following new features:
+
+- [Make Admin Panel text like version etc selectable](https://github.com/wekan/wekan/commit/5aa090e91184764afeac8b7c7bf4b4cb947c8f17).
+  Thanks to xet7.
+- [Add to Admin Panel / Version: Meteor version, MongoDB version, MongoDB storage engine, MongoDB Oplog
+  enabled](https://github.com/wekan/wekan/commit/20294d833a2bf0bd1720444f4ffe018b025dacca).
+  Thanks to RocketChat developers for MongoDB detection code and xet7 for other code.
+- [Use Meteor 1.8.1 and MongoDB 3.2.22 in Snap](https://github.com/wekan/wekan/commit/39ffe1d80dad5759b338d4ed2d6c576717af2a07).
+  Removed Meteor 1.6.x files.
+  Thanks to xet7.
+- [Enable HTML email content for richer comment](https://github.com/wekan/wekan/pull/2611).
+  Thanks to whowillcare.
+
+and fixes the following bugs:
+
+- [Fix scrollHeight error when the sidebar is not visible](https://github.com/wekan/wekan/pull/2609).
+  Thanks to Trekky12.
+- [Fix insert action for CustomFields API](https://github.com/wekan/wekan/pull/2610).
+  Thanks to JimCircadian.
+- [Fixed a few issues related summernote enabled: 1) @ user couldn't send out email sometime, due to html format.
+  2) @ user link wasn't able to show user info by clicking](https://github.com/wekan/wekan/pull/2611).
+  Thanks to whowillcare.
+
+Thanks to above GitHub users for their contributions and translators for their translations.
+
+# v3.15 2019-08-11 Wekan release
+
+This release fixes the following bugs:
+
+- [Try to fix Snap](https://github.com/wekan/wekan/commit/a1d883b22f73f4bef6d547f94dcb900f475fcb41).
+  Thanks to xet7.
+
+Thanks to above GitHub users for their contributions and translators for their translations.
+
+# v3.14 2019-08-11 Wekan release
+
+This release adds the following new features:
+
+- [On wekan master specifying ATTACHMENTS_STORE_PATH, it will try its best keeping original attachments, only newer
+  attachments will be stored into specified path](https://github.com/wekan/wekan/pull/2607).
+  Thanks to whowillcare.
+- [Made image upload in summernote as attachment to wekan board instead of base64 string,
+  which would make the comments use less bytes and be able to take advantage of using local file system feature
+  as attachment](https://github.com/wekan/wekan/pull/2608).
+  Thanks to whowillcare.
+
+and fixes the following bugs:
+
+- [Fix bug: Unable to disable richer comment editor](https://github.com/wekan/wekan/pull/2607).
+  Thanks to whowillcare.
+- [Changed rm to rm -f in wekan snap build, and add packages that somehow didn't get install during snapcraft
+  build](https://github.com/wekan/wekan/pull/2608).
+  Thanks to whowillcare.
+
+Thanks to above GitHub users for their contributions and translators for their translations.
+
+# v3.13 2019-08-09 Wekan release
+
+Update translations. Thanks to translators.
+
+# v3.12 2019-08-09 Wekan release
+
+This release adds the following new features:
+
+- [Allowing wekan server admin to specify the attachments to be uploaded to server
+  file system instead of mongodb by specifying a system
+  env var: ATTACHMENTS_STORE_PATH](https://github.com/wekan/wekan/pull/2603).
+  The only caveat for this is if it's not a brand new wekan, if the wekan
+  server admin switchs to this setting, their old attachments won't be available
+  anymore, unless someone make a script to export them out to the filesystem.
+  Thanks to whowillcare.
+- [Allowing user to insert video, link and image, or paste in html with sanitization.
+  In user comments display area, images can be clicked and shown as
+  swipebox](https://github.com/wekan/wekan/pull/2593).
+  Thanks to whowillcare.
+
+and fixes the following bugs:
+
+- [Fix comment-editor marking issue](https://github.com/wekan/wekan/issues/2575).
+  Thanks to whowillcare.
+- [Bugfix: style kbd font color became white after introduced summernote editor
+  to card comments](https://github.com/wekan/wekan/pull/2600).
+  Thanks to whowillcare.
+- [Show All Boards / Clone Board and Archive Board only to BoardAdmin/Admin/Sandstorm users
+  on desktop webbrowser view, so that it's not possible for normal users to make accidental
+  clicks to those](https://github.com/wekan/wekan/issues/2599).
+  Thanks to derbolle and xet7.
+- [Fix bug on editing users informations, switching to other view, staring
+  a board](https://github.com/wekan/wekan/issues/2590).
+  Thanks to road42.
+- [Fix null access with board body](https://github.com/wekan/wekan/pull/2602).
+  Thanks to justinr1234.
+
+Thanks to above GitHub users for their contributions and translators for their translations.
+
+# v3.11 2019-08-07 Wekan release
+
+This release fixes the following bugs:
+
+- [Remove non-existing file from snapcraft.yaml to get Snap to build](https://github.com/wekan/wekan/commit/ad82a900e8ec636a72c6e74bb8489559ce2a8bf0).
+  Thanks to xet7.
+
+Thanks to above GitHub users for their contributions and translators for their translations.
+
+# v3.10 2019-08-07 Wekan release
+
+This release fixes the following bugs:
+
+- [Add missing dependencies back and revert deleting phantomjs](https://github.com/wekan/wekan/commit/32e9aa0ddaf1b015825b8c62ad17ed74b449e4b1).
+  Thanks to whowillcare and xet7.
+    
+Thanks to above GitHub users for their contributions and translators for their translations.
+
+# v3.09 2019-08-07 Wekan release
+
+This release adds the following features:
+
+- [Hide minicard label text: per user checkbox setting at sidebar](https://github.com/wekan/wekan/commit/f7e0b837d394d55d66d451c34f43fa8afd357e5b).
+  Thanks to xet7.
+
+and fixes the following bugs:
+
+- [Make Save button visible again at Admin Panel People Edit](https://github.com/wekan/wekan/commit/716fc32968e7dd51b64a11c6c33e59aee849c982).
+  Thanks to sclerc-chss and xet7.
+- [Fix checking if API is enabled](https://github.com/wekan/wekan/pull/2588).
+  Thanks to justinr1234.
+
+Thanks to above GitHub users for their contributions and translators for their translations.
+
+# v3.08 2019-08-07 Wekan release
+
+This release fixes the following bugs:
+
+- [Removed removing phantomjs from snap, because snap build did stop to error
+  no phantomjs could be removed](https://github.com/wekan/wekan/commit/7d8f1dee62f285a4587fb40e7331d0f500b2e5fb).
+  Thanks to xet7.
+
+Thanks to above GitHub users for their contributions and translators for their translations.
+
+# v3.07 2019-08-07 Wekan release
+
+This release fixes the following bugs:
+
+- [Try to make release sizes smaller by deleting phantomjs](https://github.com/wekan/wekan/commit/1fc3a1db2e663f149287b6e14053d536fb1a8a81).
+  Thanks to xet7.
+
+Thanks to above GitHub users for their contributions and translators for their translations.
+
+# v3.06 2019-08-07 Wekan release
+
+This release fixes the following bugs:
+
+- [Fix board query](https://github.com/wekan/wekan/pull/2587).
+  Thanks to justinr1234.
+
+Thanks to above GitHub users for their contributions and translators for their translations.
+
+# v3.05 2019-08-07 Wekan release
+
+This release fixes the following bugs:
+
+- [Fixed LDAP group filtering bug on Snap settings](https://github.com/wekan/wekan/pull/2584).
+  Thanks to KuenzelIT.
+
+Thanks to above GitHub users for their contributions and translators for their translations.
+
+# v3.04 2019-08-06 Wekan release
+
+This release fixes the following bugs:
+
+- [Fixed Snap: Use Meteor 1.6.0.1 dependencies on Snap on master branch](https://github.com/wekan/wekan/commit/74a4b28313e9cfedcb927e4496c0dd3800b1e6f9).
+  Thanks to xet7.
+- [Hide Admin Panel user delete button until someone has time to fix it](https://github.com/wekan/wekan/commit/b9a25ecfaca067d0392c83d97a0deb65e6e296dd).
+  Thanks to xet7.
+
+Thanks to above GitHub users for their contributions and translators for their translations.
+
+# v3.03 2019-08-04 Wekan release
+
+This release adds the following new features:
+
+- [Add RICHER_CARD_COMMENT_EDITOR=true to docker-compose.yml](https://github.com/wekan/wekan/commit/268f9de23c8167dca9499587ee31fb74edb6b83e).
+  Thanks to xet7.
+- [Add popup to confirm deleting one account](https://github.com/wekan/wekan/pull/2573).
+  Thanks to Akuket.
+- [Add admin setting to prevent users to self deleting their account](https://github.com/wekan/wekan/pull/2573).
+  Thanks to Akuket.
+- [Add Packager.io DEB/RPM Wekan packages for Debian/Ubuntu/CentOS/SLES](https://packager.io/gh/wekan/wekan).
+  Does not work yet, [debugging in progress here](https://github.com/wekan/wekan/issues/2582).
+  Thanks to xet7 and sfahrenholz.
+- [Add setting field LDAP_USER_AUTHENTICATION_FIELD=uid](https://github.com/wekan/wekan/pull/2581).
+  Thanks to Trekky12.
+
+and adds the following upgrades:
+
+- [Upgrade MongoDB to 4.0.11](https://github.com/wekan/wekan/commit/ec35c544b780e563a973fd887c5190f429431bfb).
+  Thanks to xet7.
+
+and fixes the following bugs:
+
+- [Remove mixmax:smart-disconnect, previously it did disconnect Wekan when
+  browser tab was not active, but because now users are working on multiple
+  boards at different browser tabs and switching all time time, there was
+  constant loading, so now after removing all tabs keeps active. This can
+  increase server CPU usage](https://github.com/wekan/wekan/commit/669cd76018cbbfbd3ee58610a35959fa8a84ea36).
+  Thanks to xet7.
+
+Thanks to above GitHub users for their contributions and translators for their translations.
+
+# v3.02 2019-07-26 Wekan release
+
+This release adds the following updates:
+
+- [Updated Wekan on OpenShift](https://github.com/wekan/wekan/commit/85ca2b1363ed0bad8639ba7ed65c55e445816947).
+  Thanks to xet7.
+
+and fixes the following bugs:
+
+- [Set LDAP_BACKGROUND_SYNC_INTERVAL='' (empty string) so it works](https://github.com/wekan/wekan/commit/fff144a8279ac36ce83e6b975f17f6dbc35f39d6)
+  and [does not crash](https://github.com/wekan/wekan/issues/2354#issuecomment-515305722).
+  Also updated wekan-postgresql docker-compose.yml to use devel branch docker image, because ToroDB requires MongoDB 3.2,
+  it's not tested yet could newest master branch docker image work with MongoDB 3.2.
+  Thanks to benh57 and xet7.
+
+and tries to fix following bugs:
+
+- [Try to fix Snap](https://github.com/wekan/wekan/commit/7cf6850cdf77ef51808784e3d275c5be86ff6c92).
+  This [will be tested soon, does this work](https://github.com/wekan/wekan/issues/2533#issuecomment-515329490).
+  Thanks to xet7.
+
+Thanks to above GitHub users for their contributions and translators for their translations.
+
 # v3.01 2019-07-26 Wekan release

 This release adds the following new features:
@@ -22,6 +22,8 @@ ENV BUILD_DEPS="apt-utils bsdtar gnupg gosu wget curl bzip2 g++ build-essential
    ACCOUNTS_LOCKOUT_UNKNOWN_USERS_LOCKOUT_PERIOD=60 \
    ACCOUNTS_LOCKOUT_UNKNOWN_USERS_FAILURE_WINDOW=15 \
    RICHER_CARD_COMMENT_EDITOR=true \
+    CARD_OPENED_WEBHOOK_ENABLED=false \
+    ATTACHMENTS_STORE_PATH="" \
    MAX_IMAGE_PIXEL="" \
    IMAGE_COMPRESS_RATIO="" \
    BIGEVENTS_PATTERN="" \
@@ -63,13 +65,14 @@ ENV BUILD_DEPS="apt-utils bsdtar gnupg gosu wget curl bzip2 g++ build-essential
    LDAP_AUTHENTIFICATION_PASSWORD="" \
    LDAP_LOG_ENABLED=false \
    LDAP_BACKGROUND_SYNC=false \
-    LDAP_BACKGROUND_SYNC_INTERVAL=100 \
+    LDAP_BACKGROUND_SYNC_INTERVAL="" \
    LDAP_BACKGROUND_SYNC_KEEP_EXISTANT_USERS_UPDATED=false \
    LDAP_BACKGROUND_SYNC_IMPORT_NEW_USERS=false \
    LDAP_ENCRYPTION=false \
    LDAP_CA_CERT="" \
    LDAP_REJECT_UNAUTHORIZED=false \
    LDAP_USER_AUTHENTICATION=false \
+    LDAP_USER_AUTHENTICATION_FIELD=uid \
    LDAP_USER_SEARCH_FILTER="" \
    LDAP_USER_SEARCH_SCOPE="" \
    LDAP_USER_SEARCH_FIELD="" \
@@ -256,6 +259,11 @@ RUN \
    #cd /home/wekan/app_build/bundle/programs/server/npm/node_modules/meteor/npm-bcrypt && \
    #gosu wekan:wekan rm -rf node_modules/bcrypt && \
    #gosu wekan:wekan npm install bcrypt && \
+    #
+    # Delete phantomjs
+    #cd /home/wekan/app_build/bundle && \
+    #find . -name "*phantomjs*" | xargs rm -rf && \
+    #
    cd /home/wekan/app_build/bundle/programs/server/ && \
    gosu wekan:wekan npm install && \
    #gosu wekan:wekan npm install bcrypt && \
@@ -1,5 +1,5 @@
 appId: wekan-public/apps/77b94f60-dec9-0136-304e-16ff53095928
-appVersion: "v3.01.0"
+appVersion: "v3.23.0"
 files:
  userUploads:
    - README.md
@@ -201,6 +201,7 @@ template(name="cardActivities")
          .activity-checklist(href="{{ card.absoluteUrl }}")
            +viewer
              = checklistItem.title
+        
        if(currentData.timeKey)
          | {{{_ activityType }}}
          = ' '
@@ -215,6 +216,10 @@ template(name="cardActivities")
          | {{{_ activityType currentData.timeValue}}}
        

+        if($eq activityType 'deleteComment')
+          | {{{_ 'activity-deleteComment' currentData.commentId}}}.
+        if($eq activityType 'editComment')
+          | {{{_ 'activity-editComment' currentData.commentId}}}.
        if($eq activityType 'addComment')
          +inlinedForm(classNames='js-edit-comment')
            +editor(autofocus=true)
@@ -38,6 +38,7 @@ BlazeComponent.extendComponent({
            resetCommentInput(input);
            Tracker.flush();
            autosize.update(input);
+            input.trigger('submitted');
          }
          evt.preventDefault();
        },
@@ -54,7 +55,7 @@ BlazeComponent.extendComponent({

 // XXX This should be a static method of the `commentForm` component
 function resetCommentInput(input) {
-  input.val('').trigger('input'); // without manually trigger, input event won't be fired
+  input.val(''); // without manually trigger, input event won't be fired
  input.blur();
  commentFormIsOpen.set(false);
 }
@@ -7,8 +7,8 @@ template(name="board")
        +boardBody
    else
      //-- XXX We need a better error message in case the board has been archived
-      //-- +message(label="board-not-found")
-      | {{goHome}}
+      +message(label="board-not-found")
+      //-- | {{goHome}}
  else
    +spinner

@@ -31,12 +31,28 @@ template(name="boardList")
                  i.fa.js-has-spenttime-cards(
                    class="fa-circle{{#if hasOvertimeCards}} has-overtime-card-active{{else}} no-overtime-card-active{{/if}}"
                    title="{{#if hasOvertimeCards}}{{_ 'has-overtime-cards'}}{{else}}{{_ 'has-spenttime-cards'}}{{/if}}")
-                i.fa.js-clone-board(
-                    class="fa-clone"
-                    title="{{_ 'duplicate-board'}}")
-                i.fa.js-archive-board(
-                    class="fa-archive"
-                    title="{{_ 'archive-board'}}")
+                unless isMiniScreen
+                  if isSandstorm
+                    i.fa.js-clone-board(
+                        class="fa-clone"
+                        title="{{_ 'duplicate-board'}}")
+                    i.fa.js-archive-board(
+                        class="fa-archive"
+                        title="{{_ 'archive-board'}}")
+                  else if currentUser.isBoardAdmin
+                    i.fa.js-clone-board(
+                        class="fa-clone"
+                        title="{{_ 'duplicate-board'}}")
+                    i.fa.js-archive-board(
+                        class="fa-archive"
+                        title="{{_ 'archive-board'}}")
+                  else if currentUser.isAdmin
+                    i.fa.js-clone-board(
+                        class="fa-clone"
+                        title="{{_ 'duplicate-board'}}")
+                    i.fa.js-archive-board(
+                        class="fa-archive"
+                        title="{{_ 'archive-board'}}")

 template(name="boardListHeaderBar")
  h1 {{_ 'my-boards'}}
@@ -8,10 +8,10 @@ Template.boardListHeaderBar.events({

 Template.boardListHeaderBar.helpers({
  templatesBoardId() {
-    return Meteor.user().getTemplatesBoardId();
+    return Meteor.user() && Meteor.user().getTemplatesBoardId();
  },
  templatesBoardSlug() {
-    return Meteor.user().getTemplatesBoardSlug();
+    return Meteor.user() && Meteor.user().getTemplatesBoardSlug();
  },
 });

@@ -55,24 +55,12 @@ Template.cardAttachmentsPopup.events({
  'change .js-attach-file'(event) {
    const card = this;
    const processFile = f => {
-      const file = new FS.File(f);
-      if (card.isLinkedCard()) {
-        file.boardId = Cards.findOne(card.linkedId).boardId;
-        file.cardId = card.linkedId;
-      } else {
-        file.boardId = card.boardId;
-        file.swimlaneId = card.swimlaneId;
-        file.listId = card.listId;
-        file.cardId = card._id;
-      }
-      file.userId = Meteor.userId();
-      const attachment = Attachments.insert(file);
-
-      if (attachment && attachment._id && attachment.isImage()) {
-        card.setCover(attachment._id);
-      }
-
-      Popup.close();
+      Utils.processUploadedAttachment(card, f, attachment => {
+        if (attachment && attachment._id && attachment.isImage()) {
+          card.setCover(attachment._id);
+        }
+        Popup.close();
+      });
    };

    FS.Utility.eachFile(event, f => {
@@ -86,7 +74,7 @@ Template.cardAttachmentsPopup.events({
        reader.onload = function(e) {
          const dataurl = e && e.target && e.target.result;
          if (dataurl !== undefined) {
-            shrinkImage({
+            Utils.shrinkImage({
              dataurl,
              maxSize: MAX_IMAGE_PIXEL,
              ratio: COMPRESS_RATIO,
@@ -118,59 +106,9 @@ Template.cardAttachmentsPopup.events({
  'click .js-upload-clipboard-image': Popup.open('previewClipboardImage'),
 });

-const MAX_IMAGE_PIXEL = Meteor.settings.public.MAX_IMAGE_PIXEL;
-const COMPRESS_RATIO = Meteor.settings.public.IMAGE_COMPRESS_RATIO;
+const MAX_IMAGE_PIXEL = Utils.MAX_IMAGE_PIXEL;
+const COMPRESS_RATIO = Utils.IMAGE_COMPRESS_RATIO;
 let pastedResults = null;
-const shrinkImage = function(options) {
-  // shrink image to certain size
-  const dataurl = options.dataurl,
-    callback = options.callback,
-    toBlob = options.toBlob;
-  let canvas = document.createElement('canvas'),
-    image = document.createElement('img');
-  const maxSize = options.maxSize || 1024;
-  const ratio = options.ratio || 1.0;
-  const next = function(result) {
-    image = null;
-    canvas = null;
-    if (typeof callback === 'function') {
-      callback(result);
-    }
-  };
-  image.onload = function() {
-    let width = this.width,
-      height = this.height;
-    let changed = false;
-    if (width > height) {
-      if (width > maxSize) {
-        height *= maxSize / width;
-        width = maxSize;
-        changed = true;
-      }
-    } else if (height > maxSize) {
-      width *= maxSize / height;
-      height = maxSize;
-      changed = true;
-    }
-    canvas.width = width;
-    canvas.height = height;
-    canvas.getContext('2d').drawImage(this, 0, 0, width, height);
-    if (changed === true) {
-      const type = 'image/jpeg';
-      if (toBlob) {
-        canvas.toBlob(next, type, ratio);
-      } else {
-        next(canvas.toDataURL(type, ratio));
-      }
-    } else {
-      next(changed);
-    }
-  };
-  image.onerror = function() {
-    next(false);
-  };
-  image.src = dataurl;
-};

 Template.previewClipboardImagePopup.onRendered(() => {
  // we can paste image from clipboard
@@ -182,7 +120,7 @@ Template.previewClipboardImagePopup.onRendered(() => {
      };
      if (MAX_IMAGE_PIXEL) {
        // if has size limitation on image we shrink it before uploading
-        shrinkImage({
+        Utils.shrinkImage({
          dataurl: results.dataURL,
          maxSize: MAX_IMAGE_PIXEL,
          ratio: COMPRESS_RATIO,
@@ -117,6 +117,37 @@ BlazeComponent.extendComponent({
  },

  onRendered() {
+    if (Meteor.settings.public.CARD_OPENED_WEBHOOK_ENABLED) {
+      // Send Webhook but not create Activities records ---
+      const card = this.currentData();
+      const userId = Meteor.userId();
+      //console.log(`userId: ${userId}`);
+      //console.log(`cardId: ${card._id}`);
+      //console.log(`boardId: ${card.boardId}`);
+      //console.log(`listId: ${card.listId}`);
+      //console.log(`swimlaneId: ${card.swimlaneId}`);
+      const params = {
+        userId,
+        cardId: card._id,
+        boardId: card.boardId,
+        listId: card.listId,
+        user: Meteor.user().username,
+        url: '',
+      };
+      //console.log('looking for integrations...');
+      const integrations = Integrations.find({
+        boardId: card.boardId,
+        type: 'outgoing-webhooks',
+        enabled: true,
+        activities: { $in: ['CardDetailsRendered', 'all'] },
+      }).fetch();
+      //console.log(`Investigation length: ${integrations.length}`);
+      if (integrations.length > 0) {
+        Meteor.call('outgoingWebhooks', integrations, 'CardSelected', params);
+      }
+      //-------------
+    }
+
    if (!Utils.isMiniScreen()) {
      Meteor.setTimeout(() => {
        $('.card-details').mCustomScrollbar({
@@ -8,9 +8,12 @@ template(name="minicard")
    if labels
      .minicard-labels
        each labels
-          span.card-label(class="card-label-{{color}}" title=name)
-            +viewer
-              = name
+          unless hiddenMinicardLabelText
+            span.card-label(class="card-label-{{color}}" title=name)
+              +viewer
+                = name
+          if hiddenMinicardLabelText
+            .minicard-label(class="card-label-{{color}}" title="{{name}}")
    .minicard-title
      .handle
        .fa.fa-arrows
@@ -16,6 +16,17 @@ BlazeComponent.extendComponent({
            Utils.goBoardId(this.data().linkedId);
        },
      },
+      {
+        'click .js-toggle-minicard-label-text'() {
+          Meteor.call('toggleMinicardLabelText');
+        },
+      },
    ];
  },
 }).register('minicard');
+
+Template.minicard.helpers({
+  hiddenMinicardLabelText() {
+    return Meteor.user().hasHiddenMinicardLabelText();
+  },
+});
@@ -81,6 +81,7 @@
  .minicard-labels
    float: right
    display: flex
+    flex-wrap: wrap

    .minicard-label
      width: 11px
@@ -1,7 +1,89 @@
+import _sanitizeXss from 'xss';
+const ASIS = 'asis';
+const sanitizeXss = (input, options) => {
+  const defaultAllowedIframeSrc = /^(https:){0,1}\/\/.*?(youtube|vimeo|dailymotion|youku)/i;
+  const allowedIframeSrcRegex = (function() {
+    let reg = defaultAllowedIframeSrc;
+    const SAFE_IFRAME_SRC_PATTERN =
+      Meteor.settings.public.SAFE_IFRAME_SRC_PATTERN;
+    try {
+      if (SAFE_IFRAME_SRC_PATTERN !== undefined) {
+        reg = new RegExp(SAFE_IFRAME_SRC_PATTERN, 'i');
+      }
+    } catch (e) {
+      /*eslint no-console: ["error", { allow: ["warn", "error"] }] */
+
+      console.error('Wrong pattern specified', SAFE_IFRAM_SRC_PATTERN, e);
+    }
+    return reg;
+  })();
+  const targetWindow = '_blank';
+  const getHtmlDOM = html => {
+    const i = document.createElement('i');
+    i.innerHTML = html;
+    return i.firstChild;
+  };
+  options = {
+    onTag(tag, html, options) {
+      const htmlDOM = getHtmlDOM(html);
+      const getAttr = attr => {
+        return htmlDOM && attr && htmlDOM.getAttribute(attr);
+      };
+      if (tag === 'iframe') {
+        const clipCls = 'note-vide-clip';
+        if (!options.isClosing) {
+          const iframeCls = getAttr('class');
+          let safe = iframeCls.indexOf(clipCls) > -1;
+          const src = getAttr('src');
+          if (allowedIframeSrcRegex.exec(src)) {
+            safe = true;
+          }
+          if (safe)
+            return `<iframe src='${src}' class="${clipCls}" width=100% height=auto allowfullscreen></iframe>`;
+        } else {
+          // remove </iframe> tag
+          return '';
+        }
+      } else if (tag === 'a') {
+        if (!options.isClosing) {
+          if (getAttr(ASIS) === 'true') {
+            // if has a ASIS attribute, don't do anything, it's a member id
+            return html;
+          } else {
+            const href = getAttr('href');
+            if (href.match(/^((http(s){0,1}:){0,1}\/\/|\/)/)) {
+              // a valid url
+              return `<a href=${href} target=${targetWindow}>`;
+            }
+          }
+        }
+      } else if (tag === 'img') {
+        if (!options.isClosing) {
+          const src = getAttr('src');
+          if (src) {
+            return `<a href='${src}' class='swipebox'><img src='${src}' class="attachment-image-preview mCS_img_loaded"></a>`;
+          }
+        }
+      }
+      return undefined;
+    },
+    onTagAttr(tag, name, value) {
+      if (tag === 'img' && name === 'src') {
+        if (value && value.substr(0, 5) === 'data:') {
+          // allow image with dataURI src
+          return `${name}='${value}'`;
+        }
+      } else if (tag === 'a' && name === 'target') {
+        return `${name}='${targetWindow}'`; // always change a href target to a new window
+      }
+      return undefined;
+    },
+    ...options,
+  };
+  return _sanitizeXss(input, options);
+};
 Template.editor.onRendered(() => {
  const textareaSelector = 'textarea';
-  const enableRicherEditor =
-    Meteor.settings.public.RICHER_CARD_COMMENT_EDITOR || true;
  const mentions = [
    // User mentions
    {
@@ -32,7 +114,7 @@ Template.editor.onRendered(() => {
    autosize($textarea);
    $textarea.escapeableTextComplete(mentions);
  };
-  if (enableRicherEditor) {
+  if (Meteor.settings.public.RICHER_CARD_COMMENT_EDITOR !== false) {
    const isSmall = Utils.isMiniScreen();
    const toolbar = isSmall
      ? [
@@ -50,47 +132,11 @@ Template.editor.onRendered(() => {
          ['color', ['color']],
          ['para', ['ul', 'ol', 'paragraph']],
          ['table', ['table']],
-          //['insert', ['link', 'picture', 'video']], // iframe tag will be sanitized TODO if iframe[class=note-video-clip] can be added into safe list, insert video can be enabled
+          ['insert', ['link', 'picture', 'video']], // iframe tag will be sanitized TODO if iframe[class=note-video-clip] can be added into safe list, insert video can be enabled
          //['insert', ['link', 'picture']], // modal popup has issue somehow :(
          ['view', ['fullscreen', 'help']],
        ];
-    const cleanPastedHTML = function(input) {
-      const badTags = [
-        'style',
-        'script',
-        'applet',
-        'embed',
-        'noframes',
-        'noscript',
-        'meta',
-        'link',
-        'button',
-        'form',
-      ].join('|');
-      const badPatterns = new RegExp(
-        `(?:${[
-          `<(${badTags})s*[^>][\\s\\S]*?<\\/\\1>`,
-          `<(${badTags})[^>]*?\\/>`,
-        ].join('|')})`,
-        'gi',
-      );
-      let output = input;
-      // remove bad Tags
-      output = output.replace(badPatterns, '');
-      // remove attributes ' style="..."'
-      const badAttributes = new RegExp(
-        `(?:${[
-          'on\\S+=([\'"]?).*?\\1',
-          'href=([\'"]?)javascript:.*?\\2',
-          'style=([\'"]?).*?\\3',
-          'target=\\S+',
-        ].join('|')})`,
-        'gi',
-      );
-      output = output.replace(badAttributes, '');
-      output = output.replace(/(<a )/gi, '$1target=_ '); // always to new target
-      return output;
-    };
+    const cleanPastedHTML = sanitizeXss;
    const editor = '.editor';
    const selectors = [
      `.js-new-comment-form ${editor}`,
@@ -116,8 +162,8 @@ Template.editor.onRendered(() => {
          callbacks: {
            onInit(object) {
              const originalInput = this;
-              $(originalInput).on('input', function() {
-                // when comment is submitted, the original textarea will be set to '', so shall we
+              $(originalInput).on('submitted', function() {
+                // resetCommentInput has been called
                if (!this.value) {
                  const sn = getSummernote(this);
                  sn && sn.summernote('reset');
@@ -134,10 +180,83 @@ Template.editor.onRendered(() => {
                fBtn.on('click', function() {
                  const $this = $(this),
                    isActive = $this.hasClass('active');
-                  $('.minicards').toggle(!isActive); // mini card is still showing when editor is in fullscreen mode, we hide here manually
+                  $('.minicards,#header-quick-access').toggle(!isActive); // mini card is still showing when editor is in fullscreen mode, we hide here manually
                });
              }
            },
+            onImageUpload(files) {
+              const $summernote = getSummernote(this);
+              if (files && files.length > 0) {
+                const image = files[0];
+                const currentCard = Cards.findOne(Session.get('currentCard'));
+                const MAX_IMAGE_PIXEL = Utils.MAX_IMAGE_PIXEL;
+                const COMPRESS_RATIO = Utils.IMAGE_COMPRESS_RATIO;
+                const insertImage = src => {
+                  const img = document.createElement('img');
+                  img.src = src;
+                  img.setAttribute('width', '100%');
+                  $summernote.summernote('insertNode', img);
+                };
+                const processData = function(fileObj) {
+                  Utils.processUploadedAttachment(
+                    currentCard,
+                    fileObj,
+                    attachment => {
+                      if (
+                        attachment &&
+                        attachment._id &&
+                        attachment.isImage()
+                      ) {
+                        attachment.one('uploaded', function() {
+                          const maxTry = 3;
+                          const checkItvl = 500;
+                          let retry = 0;
+                          const checkUrl = function() {
+                            // even though uploaded event fired, attachment.url() is still null somehow //TODO
+                            const url = attachment.url();
+                            if (url) {
+                              insertImage(
+                                `${location.protocol}//${location.host}${url}`,
+                              );
+                            } else {
+                              retry++;
+                              if (retry < maxTry) {
+                                setTimeout(checkUrl, checkItvl);
+                              }
+                            }
+                          };
+                          checkUrl();
+                        });
+                      }
+                    },
+                  );
+                };
+                if (MAX_IMAGE_PIXEL) {
+                  const reader = new FileReader();
+                  reader.onload = function(e) {
+                    const dataurl = e && e.target && e.target.result;
+                    if (dataurl !== undefined) {
+                      // need to shrink image
+                      Utils.shrinkImage({
+                        dataurl,
+                        maxSize: MAX_IMAGE_PIXEL,
+                        ratio: COMPRESS_RATIO,
+                        toBlob: true,
+                        callback(blob) {
+                          if (blob !== false) {
+                            blob.name = image.name;
+                            processData(blob);
+                          }
+                        },
+                      });
+                    }
+                  };
+                  reader.readAsDataURL(image);
+                } else {
+                  processData(image);
+                }
+              }
+            },
            onPaste() {
              // clear up unwanted tag info when user pasted in text
              const thisNote = this;
@@ -185,8 +304,6 @@ Template.editor.onRendered(() => {
  }
 });

-import sanitizeXss from 'xss';
-
 // XXX I believe we should compute a HTML rendered field on the server that
 // would handle markdown and user mentions. We can simply have two
 // fields, one source, and one compiled version (in HTML) and send only the
@@ -231,38 +348,42 @@ Blaze.Template.registerHelper(
          // `userId` to the popup as usual, and we need to store it in the DOM
          // using a data attribute.
          'data-userId': knowedUser.userId,
+          [ASIS]: 'true',
        },
        linkValue,
      );

      content = content.replace(fullMention, Blaze.toHTML(link));
    }
-
    return HTML.Raw(sanitizeXss(content));
  }),
 );
-
 Template.viewer.events({
  // Viewer sometimes have click-able wrapper around them (for instance to edit
  // the corresponding text). Clicking a link shouldn't fire these actions, stop
  // we stop these event at the viewer component level.
  'click a'(event, templateInstance) {
-    event.stopPropagation();
-
-    // XXX We hijack the build-in browser action because we currently don't have
-    // `_blank` attributes in viewer links, and the transformer function is
-    // handled by a third party package that we can't configure easily. Fix that
-    // by using directly `_blank` attribute in the rendered HTML.
-    event.preventDefault();
-
+    let prevent = true;
    const userId = event.currentTarget.dataset.userid;
    if (userId) {
      Popup.open('member').call({ userId }, event, templateInstance);
    } else {
      const href = event.currentTarget.href;
-      if (href) {
+      const child = event.currentTarget.firstElementChild;
+      if (child && child.tagName === 'IMG') {
+        prevent = false;
+      } else if (href) {
        window.open(href, '_blank');
      }
    }
+    if (prevent) {
+      event.stopPropagation();
+
+      // XXX We hijack the build-in browser action because we currently don't have
+      // `_blank` attributes in viewer links, and the transformer function is
+      // handled by a third party package that we can't configure easily. Fix that
+      // by using directly `_blank` attribute in the rendered HTML.
+      event.preventDefault();
+    }
  },
 });
@@ -232,6 +232,7 @@ kbd
  background: darken(white, 2%)
  border-radius: 3px
  border: 1px solid darken(white, 10%)
+  color: unset
  box-shadow: 0px 2px 3px rgba(0, 0, 0, 0.15)

 .clear
@@ -424,6 +425,9 @@ a
    height: 100%
    margin: 0px

+  .panel-default
+    width: 83vw
+
 .inline-input
  height: 37px
  margin: 8px 10px 0 0
@@ -19,9 +19,21 @@ template(name='statistics')
        tr
          th Wekan {{_ 'info'}}
          td {{statistics.version}}
+        tr
+          th {{_ 'Meteor_version'}}
+          td {{statistics.meteor.meteorVersion}}
        tr
          th {{_ 'Node_version'}}
          td {{statistics.process.nodeVersion}}
+        tr
+          th {{_ 'MongoDB_version'}}
+          td {{statistics.mongo.mongoVersion}}
+        tr
+          th {{_ 'MongoDB_storage_engine'}}
+          td {{statistics.mongo.mongoStorageEngine}}
+        tr
+          th {{_ 'MongoDB_Oplog_enabled'}}
+          td {{statistics.mongo.mongoOplogEnabled}}
        tr
          th {{_ 'OS_Type'}}
          td {{statistics.os.type}}
@@ -109,6 +109,6 @@ template(name="editUserPopup")
      input.js-profile-password(type="password")
    div.buttonsContainer
      input.primary.wide(type="submit" value="{{_ 'save'}}")
-      div
-      input#deleteButton.primary.wide(type="button" value="{{_ 'delete'}}")
+    //  div
+    //  input#deleteButton.primary.wide(type="button" value="{{_ 'delete'}}")

@@ -243,8 +243,8 @@ Template.editUserPopup.events({
    } else Popup.close();
  },

-  'click #deleteButton'() {
+  'click #deleteButton': Popup.afterConfirm('userDelete', function() {
    Users.remove(this.userId);
    Popup.close();
-  },
+  }),
 });
@@ -113,6 +113,14 @@ template(name='accountSettings')
        span {{_ 'yes'}}
        input.wekan-form-control#accounts-allowUserNameChange(type="radio" name="allowUserNameChange" value="false" checked="{{#unless allowUserNameChange}}checked{{/unless}}")
        span {{_ 'no'}}
+    li
+    li.accounts-form
+      .title {{_ 'accounts-allowUserDelete'}}
+      .form-group.flex
+        input.wekan-form-control#accounts-allowUserDelete(type="radio" name="allowUserDelete" value="true" checked="{{#if allowUserDelete}}checked{{/if}}")
+        span {{_ 'yes'}}
+        input.wekan-form-control#accounts-allowUserDelete(type="radio" name="allowUserDelete" value="false" checked="{{#unless allowUserDelete}}checked{{/unless}}")
+        span {{_ 'no'}}
    li
      button.js-accounts-save.primary {{_ 'save'}}

@@ -233,12 +233,17 @@ BlazeComponent.extendComponent({
      $('input[name=allowEmailChange]:checked').val() === 'true';
    const allowUserNameChange =
      $('input[name=allowUserNameChange]:checked').val() === 'true';
+    const allowUserDelete =
+      $('input[name=allowUserDelete]:checked').val() === 'true';
    AccountSettings.update('accounts-allowEmailChange', {
      $set: { booleanValue: allowEmailChange },
    });
    AccountSettings.update('accounts-allowUserNameChange', {
      $set: { booleanValue: allowUserNameChange },
    });
+    AccountSettings.update('accounts-allowUserDelete', {
+      $set: { booleanValue: allowUserDelete },
+    });
  },

  allowEmailChange() {
@@ -247,6 +252,9 @@ BlazeComponent.extendComponent({
  allowUserNameChange() {
    return AccountSettings.findOne('accounts-allowUserNameChange').booleanValue;
  },
+  allowUserDelete() {
+    return AccountSettings.findOne('accounts-allowUserDelete').booleanValue;
+  },

  events() {
    return [
@@ -52,10 +52,10 @@

    .main-body
      padding: 0.1em 1em
-      -webkit-user-select: auto // Safari 3.1+
-      -moz-user-select: auto // Firefox 2+
-      -ms-user-select: auto // IE 10+
-      user-select: auto // Standard syntax
+      -webkit-user-select: text // Safari 3.1+
+      -moz-user-select: text // Firefox 2+
+      -ms-user-select: text // IE 10+
+      user-select: text // Standard syntax

      ul
        li
@@ -22,6 +22,11 @@ template(name='homeSidebar')
  +membersWidget
  hr
  +labelsWidget
+  ul#cards.label-text-hidden
+    a.flex.js-toggle-minicard-label-text
+      span {{_ 'hide-minicard-label-text'}}
+      b &nbsp;
+      .materialCheckBox(class="{{#if hiddenMinicardLabelText}}is-checked{{/if}}")
  hr
  unless currentUser.isNoComments
    h3
@@ -47,8 +47,11 @@ BlazeComponent.extendComponent({
  },

  calculateNextPeak() {
-    const altitude = this.find('.js-board-sidebar-content').scrollHeight;
-    this.callFirstWith(this, 'setNextPeak', altitude);
+    const sidebarElement = this.find('.js-board-sidebar-content');
+    if (sidebarElement) {
+      const altitude = sidebarElement.scrollHeight;
+      this.callFirstWith(this, 'setNextPeak', altitude);
+    }
  },

  reachNextPeak() {
@@ -101,6 +104,9 @@ BlazeComponent.extendComponent({
        'click .js-hide-sidebar': this.hide,
        'click .js-toggle-sidebar': this.toggle,
        'click .js-back-home': this.setView,
+        'click .js-toggle-minicard-label-text'() {
+          Meteor.call('toggleMinicardLabelText');
+        },
        'click .js-shortcuts'() {
          FlowRouter.go('shortcuts');
        },
@@ -111,6 +117,12 @@ BlazeComponent.extendComponent({

 Blaze.registerHelper('Sidebar', () => Sidebar);

+Template.homeSidebar.helpers({
+  hiddenMinicardLabelText() {
+    return Meteor.user().hasHiddenMinicardLabelText();
+  },
+});
+
 EscapeActions.register(
  'sidebarView',
  () => {
@@ -1,3 +1,4 @@
+archivedRequested = false;
 const subManager = new SubsManager();

 BlazeComponent.extendComponent({
@@ -12,6 +13,7 @@ BlazeComponent.extendComponent({
      const currentBoardId = Session.get('currentBoard');
      if (!currentBoardId) return;
      const handle = subManager.subscribe('board', currentBoardId, true);
+      archivedRequested = true;
      Tracker.nonreactive(() => {
        Tracker.autorun(() => {
          this.isArchiveReady.set(handle.ready());
@@ -56,6 +56,22 @@ template(name="filterSidebar")
          if Filter.customFields.isSelected _id
            i.fa.fa-check
  hr
+  ul.sidebar-list
+    li(class="{{#if Filter.archive.isSelected _id}}active{{/if}}")
+      a.name.js-toggle-archive-filter
+        span.sidebar-list-item-description
+          | {{_ 'filter-show-archive'}}
+        if Filter.archive.isSelected _id
+          i.fa.fa-check
+  hr
+  ul.sidebar-list
+    li(class="{{#if Filter.hideEmpty.isSelected _id}}active{{/if}}")
+      a.name.js-toggle-hideEmpty-filter
+        span.sidebar-list-item-description
+          | {{_ 'filter-hide-empty'}}
+        if Filter.hideEmpty.isSelected _id
+          i.fa.fa-check
+  hr
  span {{_ 'advanced-filter-label'}}
  input.js-field-advanced-filter(type="text")
  span {{_ 'advanced-filter-description'}}
@@ -1,3 +1,5 @@
+const subManager = new SubsManager();
+
 BlazeComponent.extendComponent({
  events() {
    return [
@@ -12,6 +14,23 @@ BlazeComponent.extendComponent({
          Filter.members.toggle(this.currentData()._id);
          Filter.resetExceptions();
        },
+        'click .js-toggle-archive-filter'(evt) {
+          evt.preventDefault();
+          Filter.archive.toggle(this.currentData()._id);
+          Filter.resetExceptions();
+          const currentBoardId = Session.get('currentBoard');
+          if (!currentBoardId) return;
+          subManager.subscribe(
+            'board',
+            currentBoardId,
+            Filter.archive.isSelected(),
+          );
+        },
+        'click .js-toggle-hideEmpty-filter'(evt) {
+          evt.preventDefault();
+          Filter.hideEmpty.toggle(this.currentData()._id);
+          Filter.resetExceptions();
+        },
        'click .js-toggle-custom-fields-filter'(evt) {
          evt.preventDefault();
          Filter.customFields.toggle(this.currentData()._id);
@@ -33,7 +33,8 @@ template(name="listsGroup")
            +addListForm
    else
      each lists
-        +list(this)
+        if visible this
+          +list(this)
        if currentCardIsInThisList _id null
          +cardDetails(currentCard)
      if currentUser.isBoardMember
@@ -246,6 +246,24 @@ BlazeComponent.extendComponent({
  currentCardIsInThisList(listId, swimlaneId) {
    return currentCardIsInThisList(listId, swimlaneId);
  },
+  visible(list) {
+    if (list.archived) {
+      // Show archived list only when filter archive is on or archive is selected
+      if (!(Filter.archive.isSelected() || archivedRequested)) {
+        return false;
+      }
+    }
+    if (Filter.hideEmpty.isSelected()) {
+      const swimlaneId = this.parentComponent()
+        .parentComponent()
+        .data()._id;
+      const cards = list.cards(swimlaneId);
+      if (cards.count() === 0) {
+        return false;
+      }
+    }
+    return true;
+  },
  onRendered() {
    const boardComponent = this.parentComponent();
    const $listsDom = this.$('.js-lists');
@@ -55,8 +55,9 @@ template(name="editProfilePopup")
        input.js-profile-email(type="email" value="{{emails.[0].address}}" readonly)
    div.buttonsContainer
      input.primary.wide(type="submit" value="{{_ 'save'}}")
-      div
-      input#deleteButton.primary.wide(type="button" value="{{_ 'delete'}}")
+      if allowUserDelete
+        div
+        input#deleteButton.primary.wide(type="button" value="{{_ 'delete'}}")

 template(name="changePasswordPopup")
  +atForm(state='changePwd')
@@ -82,3 +83,8 @@ template(name="changeSettingsPopup")
        | {{_ 'show-cards-minimum-count'}}
      input#show-cards-count-at.inline-input.left(type="number" value="#{showCardsCountAt}" min="0" max="99" onkeydown="return false")
      input.js-apply-show-cards-at.left(type="submit" value="{{_ 'apply'}}")
+
+
+template(name="userDeletePopup")
+  p {{_ 'delete-user-confirm-popup'}}
+  button.js-confirm.negate.full(type="submit") {{_ 'delete'}}
@@ -35,6 +35,9 @@ Template.editProfilePopup.helpers({
  allowUserNameChange() {
    return AccountSettings.findOne('accounts-allowUserNameChange').booleanValue;
  },
+  allowUserDelete() {
+    return AccountSettings.findOne('accounts-allowUserDelete').booleanValue;
+  },
 });

 Template.editProfilePopup.events({
@@ -104,11 +107,11 @@ Template.editProfilePopup.events({
      });
    } else Popup.back();
  },
-  'click #deleteButton'() {
-    Users.remove(Meteor.userId());
+  'click #deleteButton': Popup.afterConfirm('userDelete', function() {
    Popup.close();
+    Users.remove(Meteor.userId());
    AccountsTemplates.logout();
-  },
+  }),
 });

 // XXX For some reason the useraccounts autofocus isnt working in this case.
@@ -451,10 +451,12 @@ Filter = {
  // before changing the schema.
  labelIds: new SetFilter(),
  members: new SetFilter(),
+  archive: new SetFilter(),
+  hideEmpty: new SetFilter(),
  customFields: new SetFilter('_id'),
  advanced: new AdvancedFilter(),

-  _fields: ['labelIds', 'members', 'customFields'],
+  _fields: ['labelIds', 'members', 'archive', 'hideEmpty', 'customFields'],

  // We don't filter cards that have been added after the last filter change. To
  // implement this we keep the id of these cards in this `_exceptions` fields
@@ -24,6 +24,83 @@ Utils = {
    );
  },

+  MAX_IMAGE_PIXEL: Meteor.settings.public.MAX_IMAGE_PIXEL,
+  COMPRESS_RATIO: Meteor.settings.public.IMAGE_COMPRESS_RATIO,
+  processUploadedAttachment(card, fileObj, callback) {
+    const next = attachment => {
+      if (typeof callback === 'function') {
+        callback(attachment);
+      }
+    };
+    if (!card) {
+      return next();
+    }
+    const file = new FS.File(fileObj);
+    if (card.isLinkedCard()) {
+      file.boardId = Cards.findOne(card.linkedId).boardId;
+      file.cardId = card.linkedId;
+    } else {
+      file.boardId = card.boardId;
+      file.swimlaneId = card.swimlaneId;
+      file.listId = card.listId;
+      file.cardId = card._id;
+    }
+    file.userId = Meteor.userId();
+    if (file.original) {
+      file.original.name = fileObj.name;
+    }
+    return next(Attachments.insert(file));
+  },
+  shrinkImage(options) {
+    // shrink image to certain size
+    const dataurl = options.dataurl,
+      callback = options.callback,
+      toBlob = options.toBlob;
+    let canvas = document.createElement('canvas'),
+      image = document.createElement('img');
+    const maxSize = options.maxSize || 1024;
+    const ratio = options.ratio || 1.0;
+    const next = function(result) {
+      image = null;
+      canvas = null;
+      if (typeof callback === 'function') {
+        callback(result);
+      }
+    };
+    image.onload = function() {
+      let width = this.width,
+        height = this.height;
+      let changed = false;
+      if (width > height) {
+        if (width > maxSize) {
+          height *= maxSize / width;
+          width = maxSize;
+          changed = true;
+        }
+      } else if (height > maxSize) {
+        width *= maxSize / height;
+        height = maxSize;
+        changed = true;
+      }
+      canvas.width = width;
+      canvas.height = height;
+      canvas.getContext('2d').drawImage(this, 0, 0, width, height);
+      if (changed === true) {
+        const type = 'image/jpeg';
+        if (toBlob) {
+          canvas.toBlob(next, type, ratio);
+        } else {
+          next(canvas.toDataURL(type, ratio));
+        }
+      } else {
+        next(changed);
+      }
+    };
+    image.onerror = function() {
+      next(false);
+    };
+    image.src = dataurl;
+  },
  capitalize(string) {
    return string.charAt(0).toUpperCase() + string.slice(1);
  },
@@ -93,7 +93,7 @@ services:
    #-------------------------------------------------------------------------------------
    # ==== MONGODB AND METEOR VERSION ====
    # a) For Wekan Meteor 1.8.x version at master branch, use mongo 4.x
-    image: mongo:4.0.10
+    image: mongo:4.0.11
    # b) For Wekan Meteor 1.6.x version at devel branch.
    # Only for Snap and Sandstorm while they are not upgraded yet to Meteor 1.8.x
    #image: mongo:3.2.21
@@ -115,14 +115,11 @@ services:
    # NOTE: Quay is currently not updated, use Docker Hub image below c)
    # a) For Wekan Meteor 1.8.x version at master branch,
    #    using https://quay.io/wekan/wekan automatic builds
-    #image: quay.io/wekan/wekan:master
-    # b) For Wekan Meteor 1.6.x version at master/devel/edge branches.
-    # Only for Snap and Sandstorm while they are not upgraded yet to Meteor 1.8.x
-    #image: quay.io/wekan/wekan:master
-    # c) Using specific Meteor 1.6.x version tag:
+    image: quay.io/wekan/wekan
+    # b) Using specific Meteor 1.6.x version tag:
    # image: quay.io/wekan/wekan:v1.95
    # c) Using Docker Hub automatic builds https://hub.docker.com/r/wekanteam/wekan
-    image: wekanteam/wekan
+    #image: wekanteam/wekan
    # image: wekanteam/wekan:v2.99
    #-------------------------------------------------------------------------------------
    container_name: wekan-app
@@ -235,6 +232,18 @@ services:
      #- ACCOUNTS_LOCKOUT_UNKNOWN_USERS_LOCKOUT_PERIOD=60
      #- ACCOUNTS_LOCKOUT_UNKNOWN_USERS_FAILURE_WINDOW=15
      #---------------------------------------------------------------
+      # ==== STORE ATTACHMENT ON SERVER FILESYSTEM INSTEAD OF MONGODB ====
+      # https://github.com/wekan/wekan/pull/2603
+      #- ATTACHMENTS_STORE_PATH = <pathname> # pathname can be relative or fullpath
+      #---------------------------------------------------------------
+      # ==== RICH TEXT EDITOR IN CARD COMMENTS ====
+      # https://github.com/wekan/wekan/pull/2560
+      - RICHER_CARD_COMMENT_EDITOR=true
+      #---------------------------------------------------------------
+      # ==== CARD OPENED, SEND WEBHOOK MESSAGE ====
+      # https://github.com/wekan/wekan/issues/2518
+      - CARD_OPENED_WEBHOOK_ENABLED=false
+      #---------------------------------------------------------------
      # ==== Allow to shrink attached/pasted image ====
      # https://github.com/wekan/wekan/pull/2544
      #-MAX_IMAGE_PIXEL=1024
@@ -429,8 +438,10 @@ services:
      # If the sync of the users should be done in the background
      #- LDAP_BACKGROUND_SYNC=false
      #
-      # At which interval does the background task sync in milliseconds
-      #- LDAP_BACKGROUND_SYNC_INTERVAL=100
+      # At which interval does the background task sync in milliseconds.
+      # Leave this unset, so it uses default, and does not crash.
+      # https://github.com/wekan/wekan/issues/2354#issuecomment-515305722
+      - LDAP_BACKGROUND_SYNC_INTERVAL=''
      #
      #- LDAP_BACKGROUND_SYNC_KEEP_EXISTANT_USERS_UPDATED=false
      #
@@ -448,6 +459,9 @@ services:
      # Option to login to the LDAP server with the user's own username and password, instead of an administrator key. Default: false (use administrator key).
      #- LDAP_USER_AUTHENTICATION="true"
      #
+      # Which field is used to find the user for the user authentication. Default: uid.
+      #- LDAP_USER_AUTHENTICATION_FIELD="uid"
+      #
      # Optional extra LDAP filters. Don't forget the outmost enclosing parentheses if needed
      #- LDAP_USER_SEARCH_FILTER=
      #
@@ -73,6 +73,8 @@
  "activity-unchecked-item-card": "unchecked %s in checklist %s",
  "activity-checklist-completed-card": "completed checklist __checklist__ at card __card__ at list __list__ at swimlane __swimlane__ at board __board__",
  "activity-checklist-uncompleted-card": "uncompleted the checklist %s",
+  "activity-editComment": "edited comment %s",
+  "activity-deleteComment": "deleted comment %s",
  "add-attachment": "Add Attachment",
  "add-board": "Add Board",
  "add-card": "Add Card",
@@ -304,6 +306,8 @@
  "filter-no-label": "No label",
  "filter-no-member": "No member",
  "filter-no-custom-fields": "No Custom Fields",
+  "filter-show-archive": "Show archived lists",
+  "filter-hide-empty": "Hide empty lists",
  "filter-on": "Filter is on",
  "filter-on-desc": "You are filtering cards on this board. Click here to edit filter.",
  "filter-to-selection": "Filter to selection",
@@ -512,6 +516,10 @@
  "new-outgoing-webhook": "New Outgoing Webhook",
  "no-name": "(Unknown)",
  "Node_version": "Node version",
+  "Meteor_version": "Meteor version",
+  "MongoDB_version": "MongoDB version",
+  "MongoDB_storage_engine": "MongoDB storage engine",
+  "MongoDB_Oplog_enabled": "MongoDB Oplog enabled",
  "OS_Arch": "OS Arch",
  "OS_Cpus": "OS CPU Count",
  "OS_Freemem": "OS Free Memory",
@@ -722,5 +730,8 @@
  "act-almostdue": "was reminding the current due (__timeValue__) of __card__ is approaching",
  "act-pastdue": "was reminding the current due (__timeValue__) of __card__ is past",
  "act-duenow": "was reminding the current due (__timeValue__) of __card__ is now",
-  "act-atUserComment": "You were mentioned in [__board__] __card__"
+  "act-atUserComment": "You were mentioned in [__board__] __card__",
+  "delete-user-confirm-popup": "Are you sure you want to delete this account? There is no undo.",
+  "accounts-allowUserDelete": "Allow users to self delete their account",
+  "hide-minicard-label-text": "Hide minicard label text"
 }
@@ -73,6 +73,8 @@
  "activity-unchecked-item-card": "unchecked %s in checklist %s",
  "activity-checklist-completed-card": "completed checklist __checklist__ at card __card__ at list __list__ at swimlane __swimlane__ at board __board__",
  "activity-checklist-uncompleted-card": "uncompleted the checklist %s",
+  "activity-editComment": "edited comment %s",
+  "activity-deleteComment": "deleted comment %s",
  "add-attachment": "Agregar Adjunto",
  "add-board": "Agregar Tablero",
  "add-card": "Agregar Tarjeta",
@@ -304,6 +306,8 @@
  "filter-no-label": "Sin etiqueta",
  "filter-no-member": "No es miembro",
  "filter-no-custom-fields": "No Custom Fields",
+  "filter-show-archive": "Show archived lists",
+  "filter-hide-empty": "Hide empty lists",
  "filter-on": "El filtro está activado",
  "filter-on-desc": "Estás filtrando cartas en este tablero. Clickeá acá para editar el filtro.",
  "filter-to-selection": "Filtrar en la selección",
@@ -512,6 +516,10 @@
  "new-outgoing-webhook": "Nuevo Gancho Web",
  "no-name": "(desconocido)",
  "Node_version": "Versión de Node",
+  "Meteor_version": "Meteor version",
+  "MongoDB_version": "MongoDB version",
+  "MongoDB_storage_engine": "MongoDB storage engine",
+  "MongoDB_Oplog_enabled": "MongoDB Oplog enabled",
  "OS_Arch": "Arch del SO",
  "OS_Cpus": "Cantidad de CPU del SO",
  "OS_Freemem": "Memoria Libre del SO",
@@ -719,5 +727,8 @@
  "act-almostdue": "was reminding the current due (__timeValue__) of __card__ is approaching",
  "act-pastdue": "was reminding the current due (__timeValue__) of __card__ is past",
  "act-duenow": "was reminding the current due (__timeValue__) of __card__ is now",
-  "act-atUserComment": "You were mentioned in [__board__] __card__"
+  "act-atUserComment": "You were mentioned in [__board__] __card__",
+  "delete-user-confirm-popup": "Are you sure you want to delete this account? There is no undo.",
+  "accounts-allowUserDelete": "Allow users to self delete their account",
+  "hide-minicard-label-text": "Hide minicard label text"
 }
@@ -73,6 +73,8 @@
  "activity-unchecked-item-card": "desmarcado %s en la lista de verificación %s",
  "activity-checklist-completed-card": "completada la lista de verificación __checklist__ de la tarjeta __card__ de la lista __list__ del carril __swimlane__ del tablero __board__",
  "activity-checklist-uncompleted-card": "no completó la lista de verificación %s",
+  "activity-editComment": "edited comment %s",
+  "activity-deleteComment": "deleted comment %s",
  "add-attachment": "Añadir adjunto",
  "add-board": "Añadir tablero",
  "add-card": "Añadir una tarjeta",
@@ -304,6 +306,8 @@
  "filter-no-label": "Sin etiqueta",
  "filter-no-member": "Sin miembro",
  "filter-no-custom-fields": "Sin campos personalizados",
+  "filter-show-archive": "Show archived lists",
+  "filter-hide-empty": "Hide empty lists",
  "filter-on": "Filtrado activado",
  "filter-on-desc": "Estás filtrando tarjetas en este tablero. Haz clic aquí para editar el filtro.",
  "filter-to-selection": "Filtrar la selección",
@@ -512,6 +516,10 @@
  "new-outgoing-webhook": "Nuevo webhook saliente",
  "no-name": "(Desconocido)",
  "Node_version": "Versión de Node",
+  "Meteor_version": "Meteor version",
+  "MongoDB_version": "MongoDB version",
+  "MongoDB_storage_engine": "MongoDB storage engine",
+  "MongoDB_Oplog_enabled": "MongoDB Oplog enabled",
  "OS_Arch": "Arquitectura del sistema",
  "OS_Cpus": "Número de CPUs del sistema",
  "OS_Freemem": "Memoria libre del sistema",
@@ -719,5 +727,8 @@
  "act-almostdue": "was reminding the current due (__timeValue__) of __card__ is approaching",
  "act-pastdue": "was reminding the current due (__timeValue__) of __card__ is past",
  "act-duenow": "was reminding the current due (__timeValue__) of __card__ is now",
-  "act-atUserComment": "You were mentioned in [__board__] __card__"
+  "act-atUserComment": "You were mentioned in [__board__] __card__",
+  "delete-user-confirm-popup": "Are you sure you want to delete this account? There is no undo.",
+  "accounts-allowUserDelete": "Allow users to self delete their account",
+  "hide-minicard-label-text": "Hide minicard label text"
 }
@@ -73,6 +73,8 @@
  "activity-unchecked-item-card": "چک نشده  %s در چک لیست %s",
  "activity-checklist-completed-card": "completed checklist __checklist__ at card __card__ at list __list__ at swimlane __swimlane__ at board __board__",
  "activity-checklist-uncompleted-card": "چک لیست تمام نشده %s",
+  "activity-editComment": "edited comment %s",
+  "activity-deleteComment": "deleted comment %s",
  "add-attachment": "افزودن ضمیمه",
  "add-board": "افزودن برد",
  "add-card": "افزودن کارت",
@@ -304,6 +306,8 @@
  "filter-no-label": "بدون برچسب",
  "filter-no-member": "بدون عضو",
  "filter-no-custom-fields": "هیچ فیلدشخصی ای وجود ندارد",
+  "filter-show-archive": "Show archived lists",
+  "filter-hide-empty": "Hide empty lists",
  "filter-on": "صافی ـFilterـ فعال است",
  "filter-on-desc": "شما صافی ـFilterـ برای کارتهای تخته را روشن کرده اید. جهت ویرایش کلیک نمایید.",
  "filter-to-selection": "صافی ـFilterـ برای موارد انتخابی",
@@ -512,6 +516,10 @@
  "new-outgoing-webhook": "New Outgoing Webhook",
  "no-name": "(ناشناخته)",
  "Node_version": "نسخه Node",
+  "Meteor_version": "Meteor version",
+  "MongoDB_version": "MongoDB version",
+  "MongoDB_storage_engine": "MongoDB storage engine",
+  "MongoDB_Oplog_enabled": "MongoDB Oplog enabled",
  "OS_Arch": "OS Arch",
  "OS_Cpus": "OS CPU Count",
  "OS_Freemem": "OS Free Memory",
@@ -719,5 +727,8 @@
  "act-almostdue": "was reminding the current due (__timeValue__) of __card__ is approaching",
  "act-pastdue": "was reminding the current due (__timeValue__) of __card__ is past",
  "act-duenow": "was reminding the current due (__timeValue__) of __card__ is now",
-  "act-atUserComment": "به شما در  [__board__] __card__ اشاره شده"
+  "act-atUserComment": "به شما در  [__board__] __card__ اشاره شده",
+  "delete-user-confirm-popup": "Are you sure you want to delete this account? There is no undo.",
+  "accounts-allowUserDelete": "Allow users to self delete their account",
+  "hide-minicard-label-text": "Hide minicard label text"
 }
@@ -22,7 +22,7 @@
  "act-createBoard": "skapade anslagstavla __board__",
  "act-createSwimlane": "skapade simbana __swimlane__ till anslagstavla __board__",
  "act-createCard": "skapade kort __card__ i lista __list__ i simbana __swimlane__ på anslagstavla __board__",
-  "act-createCustomField": "created custom field __customField__ at board __board__",
+  "act-createCustomField": "skapade anpassat fält __customField__ på anslagstavlan __board__",
  "act-deleteCustomField": "deleted custom field __customField__ at board __board__",
  "act-setCustomField": "edited custom field __customField__: __customFieldValue__ at card __card__ at list __list__ at swimlane __swimlane__ at board __board__",
  "act-createList": "lade till lista __list__ på anslagstavla __board__",
@@ -73,6 +73,8 @@
  "activity-unchecked-item-card": "okryssad %s i checklistan %s",
  "activity-checklist-completed-card": "slutförde checklista __checklist__ i kort __card__ i lista __list__ i  simbana __swimlane__ på anslagstavla __board__",
  "activity-checklist-uncompleted-card": "icke slutfört checklistan %s",
+  "activity-editComment": "edited comment %s",
+  "activity-deleteComment": "deleted comment %s",
  "add-attachment": "Lägg till bilaga",
  "add-board": "Lägg till anslagstavla",
  "add-card": "Lägg till kort",
@@ -304,6 +306,8 @@
  "filter-no-label": "Ingen etikett",
  "filter-no-member": "Ingen medlem",
  "filter-no-custom-fields": "Inga anpassade fält",
+  "filter-show-archive": "Show archived lists",
+  "filter-hide-empty": "Hide empty lists",
  "filter-on": "Filter är på",
  "filter-on-desc": "Du filtrerar kort på denna anslagstavla. Klicka här för att redigera filter.",
  "filter-to-selection": "Filter till val",
@@ -512,6 +516,10 @@
  "new-outgoing-webhook": "Ny utgående webhook",
  "no-name": "(Okänd)",
  "Node_version": "Nodversion",
+  "Meteor_version": "Meteor-version",
+  "MongoDB_version": "MongoDB-version",
+  "MongoDB_storage_engine": "MongoDB-lagringsmotor",
+  "MongoDB_Oplog_enabled": "MongoDB Oplog aktiverad",
  "OS_Arch": "OS Arch",
  "OS_Cpus": "OS CPU-räkning",
  "OS_Freemem": "OS ledigt minne",
@@ -719,5 +727,8 @@
  "act-almostdue": "påminde om den aktuella förfallotiden (__timeValue__) av __card__ närmar sig",
  "act-pastdue": "påminde om den aktuella förfallotiden (__timeValue__) av __card__ är förbi",
  "act-duenow": "påminde om den aktuella förfallotiden (__timeValue__) av __card__ är nu",
-  "act-atUserComment": "Du nämndes i [__board__] __card__"
+  "act-atUserComment": "Du nämndes i [__board__] __card__",
+  "delete-user-confirm-popup": "Är du säker på att du vill ta bort det här kontot? Det går inte att ångra sig.",
+  "accounts-allowUserDelete": "Tillåt användare att själv ta bort sina konton",
+  "hide-minicard-label-text": "Hide minicard label text"
 }
@@ -68,6 +68,15 @@ if (Meteor.isServer) {
        },
      },
    );
+    AccountSettings.upsert(
+      { _id: 'accounts-allowUserDelete' },
+      {
+        $setOnInsert: {
+          booleanValue: false,
+          sort: 0,
+        },
+      },
+    );
  });
 }

@@ -110,7 +110,9 @@ if (Meteor.isServer) {
    if (activity.userId) {
      // No need send notification to user of activity
      // participants = _.union(participants, [activity.userId]);
-      params.user = activity.user().getName();
+      const user = activity.user();
+      params.user = user.getName();
+      params.userEmails = user.emails;
      params.userId = activity.userId;
    }
    if (activity.boardId) {
@@ -172,7 +174,7 @@ if (Meteor.isServer) {
      const comment = activity.comment();
      params.comment = comment.text;
      if (board) {
-        const atUser = /(?:^|\s+)@(\S+)(?:\s+|$)/g;
+        const atUser = /(?:^|>|\b|\s)@(\S+)(?:\s|$|<|\b)/g;
        const comment = params.comment;
        if (comment.match(atUser)) {
          const commenter = params.user;
@@ -184,6 +186,8 @@ if (Meteor.isServer) {
            }
            const user = Users.findOne(username) || Users.findOne({ username });
            const uid = user && user._id;
+            params.atUsername = username;
+            params.atEmails = user.emails;
            if (board.hasMember(uid)) {
              title = 'act-atUserComment';
              watchers = _.union(watchers, [uid]);
@@ -1,27 +1,178 @@
-Attachments = new FS.Collection('attachments', {
-  stores: [
+const localFSStore = process.env.ATTACHMENTS_STORE_PATH;
+const storeName = 'attachments';
+const defaultStoreOptions = {
+  beforeWrite: fileObj => {
+    if (!fileObj.isImage()) {
+      return {
+        type: 'application/octet-stream',
+      };
+    }
+    return {};
+  },
+};
+let store;
+if (localFSStore) {
+  // have to reinvent methods from FS.Store.GridFS and FS.Store.FileSystem
+  const fs = Npm.require('fs');
+  const path = Npm.require('path');
+  const mongodb = Npm.require('mongodb');
+  const Grid = Npm.require('gridfs-stream');
+  // calulate the absolute path here, because FS.Store.FileSystem didn't expose the aboslutepath or FS.Store didn't expose api calls :(
+  let pathname = localFSStore;
+  /*eslint camelcase: ["error", {allow: ["__meteor_bootstrap__"]}] */
+
+  if (!pathname && __meteor_bootstrap__ && __meteor_bootstrap__.serverDir) {
+    pathname = path.join(
+      __meteor_bootstrap__.serverDir,
+      `../../../cfs/files/${storeName}`,
+    );
+  }
+
+  if (!pathname)
+    throw new Error('FS.Store.FileSystem unable to determine path');
+
+  // Check if we have '~/foo/bar'
+  if (pathname.split(path.sep)[0] === '~') {
+    const homepath =
+      process.env.HOME || process.env.HOMEPATH || process.env.USERPROFILE;
+    if (homepath) {
+      pathname = pathname.replace('~', homepath);
+    } else {
+      throw new Error('FS.Store.FileSystem unable to resolve "~" in path');
+    }
+  }
+
+  // Set absolute path
+  const absolutePath = path.resolve(pathname);
+
+  const _FStore = new FS.Store.FileSystem(storeName, {
+    path: localFSStore,
+    ...defaultStoreOptions,
+  });
+  const GStore = {
+    fileKey(fileObj) {
+      const key = {
+        _id: null,
+        filename: null,
+      };
+
+      // If we're passed a fileObj, we retrieve the _id and filename from it.
+      if (fileObj) {
+        const info = fileObj._getInfo(storeName, {
+          updateFileRecordFirst: false,
+        });
+        key._id = info.key || null;
+        key.filename =
+          info.name ||
+          fileObj.name({ updateFileRecordFirst: false }) ||
+          `${fileObj.collectionName}-${fileObj._id}`;
+      }
+
+      // If key._id is null at this point, createWriteStream will let GridFS generate a new ID
+      return key;
+    },
+    db: undefined,
+    mongoOptions: { useNewUrlParser: true },
+    mongoUrl: process.env.MONGO_URL,
+    init() {
+      this._init(err => {
+        this.inited = !err;
+      });
+    },
+    _init(callback) {
+      const self = this;
+      mongodb.MongoClient.connect(self.mongoUrl, self.mongoOptions, function(
+        err,
+        db,
+      ) {
+        if (err) {
+          return callback(err);
+        }
+        self.db = db;
+        return callback(null);
+      });
+      return;
+    },
+    createReadStream(fileKey, options) {
+      const self = this;
+      if (!self.inited) {
+        self.init();
+        return undefined;
+      }
+      options = options || {};
+
+      // Init GridFS
+      const gfs = new Grid(self.db, mongodb);
+
+      // Set the default streamning settings
+      const settings = {
+        _id: new mongodb.ObjectID(fileKey._id),
+        root: `cfs_gridfs.${storeName}`,
+      };
+
+      // Check if this should be a partial read
+      if (
+        typeof options.start !== 'undefined' &&
+        typeof options.end !== 'undefined'
+      ) {
+        // Add partial info
+        settings.range = {
+          startPos: options.start,
+          endPos: options.end,
+        };
+      }
+      return gfs.createReadStream(settings);
+    },
+  };
+  GStore.init();
+  const CRS = 'createReadStream';
+  const _CRS = `_${CRS}`;
+  const FStore = _FStore._transform;
+  FStore[_CRS] = FStore[CRS].bind(FStore);
+  FStore[CRS] = function(fileObj, options) {
+    let stream;
+    try {
+      const localFile = path.join(
+        absolutePath,
+        FStore.storage.fileKey(fileObj),
+      );
+      const state = fs.statSync(localFile);
+      if (state) {
+        stream = FStore[_CRS](fileObj, options);
+      }
+    } catch (e) {
+      // file is not there, try GridFS ?
+      stream = undefined;
+    }
+    if (stream) return stream;
+    else {
+      try {
+        const stream = GStore[CRS](GStore.fileKey(fileObj), options);
+        return stream;
+      } catch (e) {
+        return undefined;
+      }
+    }
+  }.bind(FStore);
+  store = _FStore;
+} else {
+  store = new FS.Store.GridFS(localFSStore ? `G${storeName}` : storeName, {
    // XXX Add a new store for cover thumbnails so we don't load big images in
    // the general board view
-    new FS.Store.GridFS('attachments', {
-      // If the uploaded document is not an image we need to enforce browser
-      // download instead of execution. This is particularly important for HTML
-      // files that the browser will just execute if we don't serve them with the
-      // appropriate `application/octet-stream` MIME header which can lead to user
-      // data leaks. I imagine other formats (like PDF) can also be attack vectors.
-      // See https://github.com/wekan/wekan/issues/99
-      // XXX Should we use `beforeWrite` option of CollectionFS instead of
-      // collection-hooks?
-      // We should use `beforeWrite`.
-      beforeWrite: fileObj => {
-        if (!fileObj.isImage()) {
-          return {
-            type: 'application/octet-stream',
-          };
-        }
-        return {};
-      },
-    }),
-  ],
+    // If the uploaded document is not an image we need to enforce browser
+    // download instead of execution. This is particularly important for HTML
+    // files that the browser will just execute if we don't serve them with the
+    // appropriate `application/octet-stream` MIME header which can lead to user
+    // data leaks. I imagine other formats (like PDF) can also be attack vectors.
+    // See https://github.com/wekan/wekan/issues/99
+    // XXX Should we use `beforeWrite` option of CollectionFS instead of
+    // collection-hooks?
+    // We should use `beforeWrite`.
+    ...defaultStoreOptions,
+  });
+}
+Attachments = new FS.Collection('attachments', {
+  stores: [store],
 });

 if (Meteor.isServer) {
@@ -407,10 +407,7 @@ Boards.helpers({
  },

  lists() {
-    return Lists.find(
-      { boardId: this._id, archived: false },
-      { sort: { sort: 1 } },
-    );
+    return Lists.find({ boardId: this._id }, { sort: { sort: 1 } });
  },

  nullSortLists() {
@@ -302,6 +302,7 @@ if (Meteor.isServer) {
  ) {
    Authentication.checkUserId(req.userId);
    const paramBoardId = req.params.boardId;
+    const board = Boards.findOne({ _id: paramBoardId });
    const id = CustomFields.direct.insert({
      name: req.body.name,
      type: req.body.type,
@@ -309,7 +310,7 @@ if (Meteor.isServer) {
      showOnCard: req.body.showOnCard,
      automaticallyOnCard: req.body.automaticallyOnCard,
      showLabelOnMiniCard: req.body.showLabelOnMiniCard,
-      boardIds: { $in: [paramBoardId] },
+      boardIds: [board._id],
    });

    const customField = CustomFields.findOne({
@@ -109,7 +109,14 @@ Users.attachSchema(
    },
    'profile.hiddenSystemMessages': {
      /**
-       * does the user wants to hide system messages?
+       * does the user want to hide system messages?
+       */
+      type: Boolean,
+      optional: true,
+    },
+    'profile.hiddenMinicardLabelText': {
+      /**
+       * does the user want to hide minicard label texts?
       */
      type: Boolean,
      optional: true,
@@ -251,9 +258,14 @@ Users.attachSchema(
 );

 Users.allow({
-  update(userId) {
-    const user = Users.findOne(userId);
-    return user && Meteor.user().isAdmin;
+  update(userId, doc) {
+    const user = Users.findOne({ _id: userId });
+    if ((user && user.isAdmin) || (Meteor.user() && Meteor.user().isAdmin))
+      return true;
+    if (!user) {
+      return false;
+    }
+    return doc._id === userId;
  },
  remove(userId, doc) {
    const adminsNumber = Users.find({ isAdmin: true }).count();
@@ -359,6 +371,11 @@ Users.helpers({
    return profile.hiddenSystemMessages || false;
  },

+  hasHiddenMinicardLabelText() {
+    const profile = this.profile || {};
+    return profile.hiddenMinicardLabelText || false;
+  },
+
  getEmailBuffer() {
    const { emailBuffer = [] } = this.profile || {};
    return emailBuffer;
@@ -462,6 +479,14 @@ Users.mutations({
    };
  },

+  toggleLabelText(value = false) {
+    return {
+      $set: {
+        'profile.hiddenMinicardLabelText': !value,
+      },
+    };
+  },
+
  addNotification(activityId) {
    return {
      $addToSet: {
@@ -525,6 +550,10 @@ Meteor.methods({
    const user = Meteor.user();
    user.toggleSystem(user.hasHiddenSystemMessages());
  },
+  toggleMinicardLabelText() {
+    const user = Meteor.user();
+    user.toggleLabelText(user.hasHiddenMinicardLabelText());
+  },
  changeLimitToShowCardsCount(limit) {
    check(limit, Number);
    Meteor.user().setShowCardsCountAt(limit);
@@ -586,8 +615,9 @@ if (Meteor.isServer) {
        board &&
        board.members &&
        _.contains(_.pluck(board.members, 'userId'), inviter._id) &&
-        _.where(board.members, { userId: inviter._id })[0].isActive &&
-        _.where(board.members, { userId: inviter._id })[0].isAdmin;
+        _.where(board.members, { userId: inviter._id })[0].isActive;
+      // GitHub issue 2060
+      //_.where(board.members, { userId: inviter._id })[0].isAdmin;
      if (!allowInvite) throw new Meteor.Error('error-board-notAMember');

      this.unblock();
@@ -946,8 +976,8 @@ if (Meteor.isServer) {
 if (Meteor.isServer) {
  // Middleware which checks that API is enabled.
  JsonRoutes.Middleware.use(function(req, res, next) {
-    const api = req.url.search('api');
-    if ((api === 1 && process.env.WITH_API === 'true') || api === -1) {
+    const api = req.url.startsWith('/api');
+    if ((api === true && process.env.WITH_API === 'true') || api === false) {
      return next();
    } else {
      res.writeHead(301, { Location: '/' });
@@ -352,17 +352,17 @@ parameters:
  name: VOLUME_CAPACITY
  required: true
  value: 1Gi
- description: Version of MongoDB image to be used (2.4, 2.6, 3.2 or latest).
+- description: Version of MongoDB image to be used (3.6, 4.0.10).
  displayName: Version of MongoDB Image
  name: MONGODB_VERSION
  required: true
-  value: '3.2'
+  value: '4.0.10'
 - name: WEKAN_SERVICE_NAME
  displayName: Wekan Service Name
  value: wekan
  required: true
 - name: WEKAN_IMAGE
-  displayName: WeKan Docker Image
-  value: quay.io/wekan/wekan:latest
+  displayName: Wekan Docker Image
+  value: wekanteam/wekan:latest
  description: The metabase docker image to use
  required: true
@@ -1,6 +1,6 @@
 {
  "name": "wekan",
-  "version": "v3.01.0",
+  "version": "v3.23.0",
  "description": "Open-Source kanban",
  "private": true,
  "scripts": {
@@ -55,12 +55,15 @@
  "dependencies": {
    "@babel/runtime": "^7.5.4",
    "ajv": "^5.0.0",
+    "babel-runtime": "^6.26.0",
    "bcrypt": "^3.0.2",
    "bson": "^4.0.0",
    "bunyan": "^1.8.12",
    "es6-promise": "^4.2.4",
+    "gridfs-stream": "^0.5.3",
    "ldapjs": "^1.0.2",
    "meteor-node-stubs": "^0.4.1",
+    "mongodb": "^2.2.19",
    "os": "^0.1.1",
    "page": "^1.8.6",
    "qs": "^6.5.2",
@@ -27,6 +27,7 @@ export default class LDAP {
      BaseDN                             : this.constructor.settings_get('LDAP_BASEDN'),
      Internal_Log_Level                 : this.constructor.settings_get('INTERNAL_LOG_LEVEL'),
      User_Authentication                : this.constructor.settings_get('LDAP_USER_AUTHENTICATION'),
+      User_Authentication_Field          : this.constructor.settings_get('LDAP_USER_AUTHENTICATION_FIELD'),
      User_Attributes                    : this.constructor.settings_get('LDAP_USER_ATTRIBUTES'),
      User_Search_Filter                 : this.constructor.settings_get('LDAP_USER_SEARCH_FILTER'),
      User_Search_Scope                  : this.constructor.settings_get('LDAP_USER_SEARCH_SCOPE'),
@@ -226,7 +227,7 @@ export default class LDAP {

    if (!this.options.BaseDN) throw new Error('BaseDN is not provided');

-    const userDn = `uid=${username},${this.options.BaseDN}`;
+    const userDn = `${this.options.User_Authentication_Field}=${username},${this.options.BaseDN}`;

    this.bindSync(userDn, password);
    this.domainBinded = true;
@@ -1524,7 +1524,7 @@ var n=this.pipeline.run(e.tokenizer(t)),r=new e.Vector,i=[],o=this._fields.reduc
 	  	<ul class="toc-list-h1">
        
          <li>
-            <a href="#wekan-rest-api" class="toc-h1 toc-link" data-title="Wekan REST API v3.00">Wekan REST API v3.00</a>
+            <a href="#wekan-rest-api" class="toc-h1 toc-link" data-title="Wekan REST API v3.22">Wekan REST API v3.22</a>
            
          </li>
        
@@ -2017,7 +2017,7 @@ var n=this.pipeline.run(e.tokenizer(t)),r=new e.Vector,i=[],o=this._fields.reduc
    <div class="page-wrapper">
      <div class="dark-box"></div>
      <div class="content">
-        <h1 id="wekan-rest-api">Wekan REST API v3.00</h1>
+        <h1 id="wekan-rest-api">Wekan REST API v3.22</h1>
 <blockquote>
 <p>Scroll down for code samples, example requests and responses. Select a language for code samples from the tabs above or the mobile navigation menu.</p>
 </blockquote>
@@ -11594,6 +11594,7 @@ System.out.println(response.toString());
    ],
    <span class="hljs-attr">"fullname"</span>: <span class="hljs-string">"string"</span>,
    <span class="hljs-attr">"hiddenSystemMessages"</span>: <span class="hljs-literal">true</span>,
+    <span class="hljs-attr">"hiddenMinicardLabelText"</span>: <span class="hljs-literal">true</span>,
    <span class="hljs-attr">"initials"</span>: <span class="hljs-string">"string"</span>,
    <span class="hljs-attr">"invitedBoards"</span>: [
      <span class="hljs-string">"string"</span>
@@ -12246,6 +12247,7 @@ System.out.println(response.toString());
    ],
    <span class="hljs-attr">"fullname"</span>: <span class="hljs-string">"string"</span>,
    <span class="hljs-attr">"hiddenSystemMessages"</span>: <span class="hljs-literal">true</span>,
+    <span class="hljs-attr">"hiddenMinicardLabelText"</span>: <span class="hljs-literal">true</span>,
    <span class="hljs-attr">"initials"</span>: <span class="hljs-string">"string"</span>,
    <span class="hljs-attr">"invitedBoards"</span>: [
      <span class="hljs-string">"string"</span>
@@ -15385,6 +15387,7 @@ UserSecurity
    ],
    <span class="hljs-attr">"fullname"</span>: <span class="hljs-string">"string"</span>,
    <span class="hljs-attr">"hiddenSystemMessages"</span>: <span class="hljs-literal">true</span>,
+    <span class="hljs-attr">"hiddenMinicardLabelText"</span>: <span class="hljs-literal">true</span>,
    <span class="hljs-attr">"initials"</span>: <span class="hljs-string">"string"</span>,
    <span class="hljs-attr">"invitedBoards"</span>: [
      <span class="hljs-string">"string"</span>
@@ -15550,6 +15553,7 @@ UserSecurity
  ],
  <span class="hljs-attr">"fullname"</span>: <span class="hljs-string">"string"</span>,
  <span class="hljs-attr">"hiddenSystemMessages"</span>: <span class="hljs-literal">true</span>,
+  <span class="hljs-attr">"hiddenMinicardLabelText"</span>: <span class="hljs-literal">true</span>,
  <span class="hljs-attr">"initials"</span>: <span class="hljs-string">"string"</span>,
  <span class="hljs-attr">"invitedBoards"</span>: [
    <span class="hljs-string">"string"</span>
@@ -15609,7 +15613,14 @@ UserSecurity
 <td>boolean</td>
 <td>false</td>
 <td>none</td>
-<td>does the user wants to hide system messages?</td>
+<td>does the user want to hide system messages?</td>
+</tr>
+<tr>
+<td>hiddenMinicardLabelText</td>
+<td>boolean</td>
+<td>false</td>
+<td>none</td>
+<td>does the user want to hide minicard label texts?</td>
 </tr>
 <tr>
 <td>initials</td>
@@ -1,7 +1,7 @@
 swagger: '2.0'
 info:
  title: Wekan REST API
-  version: v3.00
+  version: v3.22
  description: |
    The REST API allows you to control and extend Wekan with ease.

@@ -2867,7 +2867,11 @@ definitions:
        type: string
      hiddenSystemMessages:
        description: |
-           does the user wants to hide system messages?
+           does the user want to hide system messages?
+        type: boolean
+      hiddenMinicardLabelText:
+        description: |
+           does the user want to hide minicard label texts?
        type: boolean
      initials:
        description: |
Author	SHA1	Message	Date
Lauri Ojansivu	b8d60f0069	v3.23	2019-08-20 21:17:36 +03:00
Lauri Ojansivu	b2deab544b	Fix login did not work. Thanks to xet7 !	2019-08-20 21:14:16 +03:00
Lauri Ojansivu	f96c1eda70	v3.22	2019-08-20 19:25:37 +03:00
Lauri Ojansivu	e9bbbb6a04	Update translations.	2019-08-20 19:21:39 +03:00
Lauri Ojansivu	efcdbf2e3d	Update ChangeLog.	2019-08-20 19:20:06 +03:00
Lauri Ojansivu	6e12e2fa59	[Fix: Some users cannot switch views or languages](https://github.com/wekan/wekan/issues/2630 ). Thanks to xet7 and justinr1234.	2019-08-20 19:16:44 +03:00
Lauri Ojansivu	a31ece0974	Update translations.	2019-08-19 12:59:27 +03:00
Lauri Ojansivu	06d85b66f1	Update ChangeLog.	2019-08-19 12:52:20 +03:00
Lauri Ojansivu	af830812db	Wrap minicard text labels to multiple rows. Thanks to xet7 !	2019-08-19 12:47:02 +03:00
Lauri Ojansivu	4e21e04a48	v3.21	2019-08-16 23:26:10 +03:00
Lauri Ojansivu	9779f2a7e6	Update ChangeLog.	2019-08-16 23:21:31 +03:00
Lauri Ojansivu	a98f6d8e8a	Update ChangeLog.	2019-08-16 23:15:17 +03:00
Lauri Ojansivu	d93f33d919	Update translations.	2019-08-16 23:03:58 +03:00
Lauri Ojansivu	564ab219c6	Merge branch 'PDIS-master'	2019-08-16 22:36:19 +03:00
Lauri Ojansivu	026d8f4941	Merge branch 'master' of https://github.com/PDIS/wekan into PDIS-master	2019-08-16 22:27:44 +03:00
Lauri Ojansivu	4b2193436e	Merge branch 'master' of github.com:wekan/wekan	2019-08-16 22:21:38 +03:00
Lauri Ojansivu	dfb558ae99	Update translations.	2019-08-16 22:21:02 +03:00
Romulus Urakagi Tsai	76731e852d	Undo translation change	2019-08-16 07:52:51 +00:00
Romulus Urakagi Tsai	b794c22ac0	Merge branch 'master' of https://github.com/wekan/wekan	2019-08-16 07:43:55 +00:00
Romulus Urakagi Tsai	b778cea34f	Fix cannot show archived list bug	2019-08-16 07:42:18 +00:00
Lauri Ojansivu	a1582c3e65	Merge pull request #2628 from justinr1234/fix-mismatched-queries Fix mismatched queries	2019-08-16 00:39:16 +03:00
Justin Reynolds	977503fa79	Fix mismatched queries	2019-08-15 15:47:32 -05:00
Lauri Ojansivu	a809284a14	Update translations.	2019-08-15 22:22:48 +03:00
Lauri Ojansivu	8e3cbd2d82	Merge pull request #2626 from whowillcare/master bugfix 2616	2019-08-15 21:31:25 +03:00
Sam X. Chen	f3147af2f7	Merge remote-tracking branch 'upstream/master'	2019-08-15 14:29:02 -04:00
Sam X. Chen	86d686fe1d	Bugfix: 2621	2019-08-15 14:28:18 -04:00
Sam X. Chen	7d52ae16d5	Bugfix: 2621 Summmernote is too wide on mobile screen	2019-08-15 14:23:14 -04:00
Lauri Ojansivu	c882ebe030	Update translations.	2019-08-15 16:32:55 +03:00
Lauri Ojansivu	d80a258c8b	v3.20	2019-08-15 13:39:24 +03:00
Lauri Ojansivu	96d0447df0	v3.19	2019-08-15 13:33:01 +03:00
Lauri Ojansivu	65769f3726	Update ChangeLog.	2019-08-15 13:29:57 +03:00
Lauri Ojansivu	315b5bad46	Fix formatting.	2019-08-15 13:29:37 +03:00
Lauri Ojansivu	692138c40b	Update translations.	2019-08-15 13:28:30 +03:00
Lauri Ojansivu	5c696e5a3c	On board, BoardAdmin and normal user can now invite new user directly with email address, without using Admin Panel or registering at /sign-up. Closes #2060 Revert permission change. Related https://github.com/wekan/wekan/commit/9f6d615ee5bbdb7552e6bdcae75a76a7f74fef7a#commitcomment-34636513 Opens #2590 Thanks to xet7 !	2019-08-15 13:16:34 +03:00
Lauri Ojansivu	ebf3e2e65b	Update ChangeLog.	2019-08-15 13:11:46 +03:00
Lauri Ojansivu	d302d6f857	Fix bug: When on board, clicking Admin Panel redirects to All Boards page, so it did require to click Admin Panel again. Thanks to xet7 !	2019-08-15 13:08:03 +03:00
Lauri Ojansivu	a282384ab0	v3.18	2019-08-15 00:52:40 +03:00
Lauri Ojansivu	c87001fa9f	Update base64 dependency.	2019-08-15 00:45:35 +03:00
Lauri Ojansivu	8fdb126a99	Update translations.	2019-08-15 00:41:26 +03:00
Lauri Ojansivu	e2e35655c3	Update ChangeLog.	2019-08-15 00:39:02 +03:00
Lauri Ojansivu	b8c527d52b	Add setting CARD_OPENED_WEBHOOK_ENABLED=false as default. Thanks to xet7 ! Related https://github.com/wekan/wekan/commit/843478ac40b7718f1096a75295522487f0ca6dbe , related #2518	2019-08-15 00:29:00 +03:00
Lauri Ojansivu	a8ab7b15d8	Update translations.	2019-08-14 20:38:18 +03:00
Lauri Ojansivu	c9118c21d1	Update ChangeLog.	2019-08-14 20:26:47 +03:00
Lauri Ojansivu	16adcb7e5a	In Sandstorm release script, after release, delete temp files.	2019-08-14 20:13:35 +03:00
Lauri Ojansivu	d295cb8385	Merge pull request #2615 from whowillcare/master Time line is missing delete/edit comments	2019-08-14 19:36:39 +03:00
Lauri Ojansivu	ece011f6ae	Merge pull request #2620 from jymcheong/master Webhook cardDetails onRendered	2019-08-14 19:26:38 +03:00
Romulus Urakagi Tsai	3084f24278	Merge branch 'master' of https://github.com/wekan/wekan	2019-08-14 08:42:25 +00:00
jymcheong	843478ac40	Webhook cardDetails onRendered Send webhook when cardDetails is rendered.	2019-08-14 15:44:47 +08:00
Lauri Ojansivu	43d14f8b2b	Update translations.	2019-08-13 16:32:52 +03:00
Sam X. Chen	7198e6b66e	Merge remote-tracking branch 'upstream/master'	2019-08-13 09:31:14 -04:00
Sam X. Chen	a666883986	Addfeature: showing action in system message when user deleted/edited comments, plus changing email content \n to <br/>	2019-08-13 09:28:42 -04:00
Lauri Ojansivu	76dbadf1ba	v3.17	2019-08-13 12:04:58 +03:00
Lauri Ojansivu	a7b7fd874d	Update translations.	2019-08-13 12:01:04 +03:00
Lauri Ojansivu	ee0fb094e6	Revert In-Progress Assignee field, moving it to feature branch. Thanks to xet7 ! Fixes #2612	2019-08-13 11:45:30 +03:00
Lauri Ojansivu	306301e881	Assignee field. In Progress. Thanks to xet7 ! Related #2452	2019-08-13 02:33:41 +03:00
Lauri Ojansivu	411ded513d	Fix typos.	2019-08-13 01:34:10 +03:00
Lauri Ojansivu	c12496e91d	v3.16	2019-08-13 01:23:30 +03:00
Lauri Ojansivu	0cf8996df9	Update translations.	2019-08-13 01:18:37 +03:00
Lauri Ojansivu	46176f5cec	Update ChangeLog.	2019-08-13 01:13:57 +03:00
Lauri Ojansivu	b9a7bd3503	Merge pull request #2611 from whowillcare/master Addfeature: Enable HTML email content for richer comment	2019-08-13 01:08:22 +03:00
Lauri Ojansivu	861868fa29	Update ChangeLog.	2019-08-13 00:43:09 +03:00
Sam X. Chen	8d76db91b8	Addfeature: Enable HTML email content for richer comment	2019-08-12 17:41:49 -04:00
Lauri Ojansivu	39ffe1d80d	Use Meteor 1.8.1 and MongoDB 3.2.22 in Snap. Thanks to xet7 !	2019-08-13 00:40:33 +03:00
Lauri Ojansivu	3513198416	Update ChangeLog.	2019-08-13 00:37:35 +03:00
Lauri Ojansivu	20294d833a	Add to Admin Panel / Version: Meteor version, MongoDB version, MongoDB storage engine, MongoDB Oplog enabled. Thanks to RocketChat developers for MongoDB detection code and xet7 for other code.	2019-08-13 00:32:46 +03:00
Lauri Ojansivu	ad09cdb1d1	Update ChangeLog.	2019-08-13 00:02:46 +03:00
Lauri Ojansivu	5aa090e911	Make Admin Panel text like version etc selectable. Thanks to xet7 ! Closes #2180	2019-08-12 23:59:05 +03:00
Lauri Ojansivu	7ea0912159	- [Fix scrollHeight error when the sidebar is not visible](https://github.com/wekan/wekan/pull/2609 ). Thanks to Trekky12. - [Fix insert action for CustomFields API](https://github.com/wekan/wekan/pull/2610). Thanks to JimCircadian. Closes #2586	2019-08-12 21:39:29 +03:00
Lauri Ojansivu	6d47c2e568	Merge pull request #2610 from JimCircadian/custom-field-api-insert Updated insert action for CustomFields API	2019-08-12 20:04:49 +03:00
Lauri Ojansivu	b5f74162af	Merge pull request #2609 from Trekky12/master fix error when the sidebar is not visible	2019-08-12 20:04:28 +03:00
James Byrne	851246a59b	Updated insert action for CustomFields API	2019-08-12 17:47:04 +01:00
Tobias	446e29e422	fix error when the sidebar is not visible	2019-08-12 17:24:53 +02:00
Romulus Urakagi Tsai	efdab37f3f	Merge branch 'master' of https://github.com/wekan/wekan	2019-08-12 01:43:21 +00:00
Lauri Ojansivu	db1cf5bb64	Update release build scripts.	2019-08-11 23:05:41 +03:00
Lauri Ojansivu	9b7b0cf557	Try to fix Snap.	2019-08-11 23:04:57 +03:00
Lauri Ojansivu	32563e053d	Test snap with Meteor 1.8.1. Thanks to xet7 !	2019-08-11 21:17:55 +03:00
Lauri Ojansivu	b5b81af103	v3.15	2019-08-11 20:31:37 +03:00
Lauri Ojansivu	a1d883b22f	Try to fix Snap.	2019-08-11 20:27:40 +03:00
Lauri Ojansivu	1a7ee618be	v3.14	2019-08-11 19:45:04 +03:00
Lauri Ojansivu	405e0b9bb2	Update translations.	2019-08-11 19:31:46 +03:00
Lauri Ojansivu	d3e37d2912	Update ChangeLog.	2019-08-11 19:29:02 +03:00
Lauri Ojansivu	2859457600	Merge pull request #2608 from whowillcare/master Make image upload in summernote as attachment to wekan board instead of base64 string and more	2019-08-11 19:26:05 +03:00
Sam X. Chen	4857bce5d9	fixing snap build errors due to some rm statements and allowing mixed attachment mode to work in snap	2019-08-10 23:39:12 -04:00
Sam X. Chen	16dbbfa98c	Merge remote-tracking branch 'upstream/master'	2019-08-10 21:22:48 -04:00
Sam X. Chen	67d23ff8ae	Add Feature: Richer Editor insert picture as attachment instead of b64 string	2019-08-10 21:21:42 -04:00
Lauri Ojansivu	30680f13d6	Add ATTACHMENTS_STORE_PATH to Dockerfile.	2019-08-11 04:16:17 +03:00
Lauri Ojansivu	3b526cad40	Update attachments help.	2019-08-11 04:12:01 +03:00
Lauri Ojansivu	55f0ac959a	Remove meteor public variable. https://github.com/wekan/wekan/pull/2607/files#r312719580 Thanks to xet7 !	2019-08-11 04:05:44 +03:00
Lauri Ojansivu	6dc515210a	Update translations.	2019-08-11 03:43:30 +03:00
Lauri Ojansivu	7777dd3b45	Update changelog.	2019-08-11 03:39:23 +03:00
Lauri Ojansivu	e9a874144d	Merge pull request #2607 from whowillcare/master Bugfix: 2560, 2604 - enable mixed mode mongodb attachment and filesys	2019-08-11 03:34:08 +03:00
Sam X. Chen	77b5244723	Bugfix: 2560, 2604 - enable mixed mode mongodb attachment and filesystem attachment while reading	2019-08-10 00:50:55 -04:00
Sam X. Chen	af560bc9b4	Merge remote-tracking branch 'upstream/master'	2019-08-10 00:49:07 -04:00
Sam X. Chen	c569565ec0	Bugfix: 2560, 2604 - enable mixed mode mongodb attachment and filesystem attachment while reading	2019-08-10 00:48:05 -04:00
Lauri Ojansivu	80f1222af4	v3.13	2019-08-09 02:55:15 +03:00
Lauri Ojansivu	76ff965619	Add to ChangeLog those that I forgot to add previously from Wekan v3.12.	2019-08-09 02:49:24 +03:00
Lauri Ojansivu	2ca01b589f	Update translations.	2019-08-09 02:37:18 +03:00
Lauri Ojansivu	46cd1aced9	v3.12	2019-08-09 02:34:50 +03:00
Lauri Ojansivu	d5d5e4448c	Add dependencies for pull request #2603 to meteor-1.6 snap. Thanks to xet7 !	2019-08-09 02:25:54 +03:00
Lauri Ojansivu	faa1e73027	Update ChangeLog.	2019-08-09 01:50:41 +03:00
Lauri Ojansivu	9f6d615ee5	Fix bug on editing users informations, switching to other view, staring a board. Thanks to road42 ! Closes #2590	2019-08-09 01:42:23 +03:00
Lauri Ojansivu	520ae551c6	Merge pull request #2603 from whowillcare/master Add Features: allowing wekan master to set where the attachments stor…	2019-08-08 23:43:39 +03:00
Lauri Ojansivu	d5d75ae7b8	Merge pull request #2602 from justinr1234/fix-null-access-boardbody Fix null access with board body	2019-08-08 23:43:22 +03:00
Sam X. Chen	13a13e8eca	Add Features: allowing wekan master to set where the attachments stored on server instead of mongodb	2019-08-08 16:24:58 -04:00
Justin Reynolds	cf65f1b7a1	Fix null access with board body	2019-08-08 14:54:22 -05:00
Lauri Ojansivu	aa6a588376	Update ChangeLog.	2019-08-08 20:24:25 +03:00
Lauri Ojansivu	4c92cd6ae1	Show All Boards Archive and Clone Boards buttons only on desktop webbrowser mode for BoardAdmin/Admin/Sandstorm users. Thanks to derbolle and xet7 ! Closes #2599	2019-08-08 20:11:53 +03:00
Lauri Ojansivu	f766c1a61c	Merge pull request #2600 from whowillcare/master Bugfix: style kbd font color became white after introduced summernote	2019-08-08 19:39:45 +03:00
Sam X. Chen	264526e85f	Bugfix: style kbd font color became white after introduced summernote	2019-08-08 09:54:30 -04:00
Lauri Ojansivu	ecc74583ed	Update translations.	2019-08-08 15:47:26 +03:00
Lauri Ojansivu	7dad66fbe6	Merge branch 'whowillcare-master'	2019-08-08 15:23:22 +03:00
Sam X. Chen	71d1d9ad98	Bug fix: bug#2589 #2575 , Add Features: allowing user to insert/paste link, image, video	2019-08-07 23:44:45 -04:00
Lauri Ojansivu	9ed0c3029f	Remove removing phantomjs from release-bundle.sh	2019-08-07 20:02:00 +03:00
Lauri Ojansivu	b7628050be	v3.11	2019-08-07 20:00:34 +03:00
Lauri Ojansivu	2a53a6cb36	Update translations.	2019-08-07 19:57:50 +03:00
Lauri Ojansivu	ad82a900e8	Remove non-existing file from snapcraft.yaml to get Snap to build. Thanks to xet7 !	2019-08-07 19:54:09 +03:00
Lauri Ojansivu	4708764bd9	v3.10	2019-08-07 19:22:07 +03:00
Lauri Ojansivu	e519f989ee	Update translations.	2019-08-07 19:17:56 +03:00
Lauri Ojansivu	32e9aa0dda	Add missing dependencies back. Thanks to whowillcare and xet7 ! Related #2589	2019-08-07 19:13:52 +03:00
Lauri Ojansivu	c1905f1db1	v3.09	2019-08-07 18:22:28 +03:00
Lauri Ojansivu	f7e0b837d3	Hide minicard label text: per user checkbox setting at sidebar. Thanks to xet7 ! Closes #1466, closes #2561	2019-08-07 18:11:34 +03:00
Lauri Ojansivu	9e60b41438	Update ChangeLog.	2019-08-07 14:08:48 +03:00
Lauri Ojansivu	778759b8ca	Merge pull request #2588 from justinr1234/fix-api-parser Fix checking if API is enabled	2019-08-07 14:06:46 +03:00
Lauri Ojansivu	b58ddcabaf	Update ChangeLog.	2019-08-07 13:36:23 +03:00
Lauri Ojansivu	716fc32968	Make Save button visible again at Admin Panel People Edit. Thanks to sclerc-chss and xet7 ! Related #2590	2019-08-07 13:31:56 +03:00
Romulus Urakagi Tsai	4f4e0a21f8	Add 'show archive' and 'hide empty lists' in filter feature.	2019-08-07 07:58:05 +00:00
Justin Reynolds	7a60eef375	Fix checking if API is enabled	2019-08-06 21:14:33 -05:00
Lauri Ojansivu	cf9ad221f8	Update docker-compose.yml, quay works now again.	2019-08-07 04:13:36 +03:00
Lauri Ojansivu	f7ab08aeeb	v3.08	2019-08-07 04:10:22 +03:00
Lauri Ojansivu	7d8f1dee62	Removed removing phantomjs from snap, because snap build did stop to error no phantomjs could be removed. Thanks to xet7 !	2019-08-07 04:02:14 +03:00
Lauri Ojansivu	2eebc5c884	Fix file permission.	2019-08-07 03:20:49 +03:00
Lauri Ojansivu	93c5f08a25	Fix used script file name.	2019-08-07 03:19:51 +03:00
Lauri Ojansivu	3973c45a1f	v3.07	2019-08-07 03:12:29 +03:00
Lauri Ojansivu	1fc3a1db2e	Try to make release sizes smaller by deleting phantomjs. Thanks to xet7 !	2019-08-07 03:05:28 +03:00
Lauri Ojansivu	972e7a9971	v3.06	2019-08-07 02:19:40 +03:00
Lauri Ojansivu	b23282d426	Merge pull request #2587 from justinr1234/fix-board-query Fix board query	2019-08-07 00:46:59 +03:00
Lauri Ojansivu	603aa1dfc8	v3.05	2019-08-07 00:44:43 +03:00
Justin Reynolds	b31a74e9af	Fix board query	2019-08-06 16:41:56 -05:00
Lauri Ojansivu	c33657e921	Merge pull request #2584 from KuenzelIT/patch-1 Fixed group filtering bug	2019-08-07 00:26:36 +03:00
Lauri Ojansivu	367ef208cb	Update package-lock.json	2019-08-07 00:18:25 +03:00
Lauri Ojansivu	c6ab28a3ce	v3.04	2019-08-06 23:15:38 +03:00
Lauri Ojansivu	b49d78e266	Update translations.	2019-08-06 23:12:39 +03:00
Lauri Ojansivu	8c4ea103c0	Removed duplicate.	2019-08-06 22:24:09 +03:00
Lauri Ojansivu	bb4fde6374	Try to fix Snap MongoDB.	2019-08-06 22:02:23 +03:00
Lauri Ojansivu	74a4b28313	Use Meteor 1.6.0.1 dependencies on Snap. Thanks to xet7 !	2019-08-06 20:31:12 +03:00
kuenzelIT	d9d06dd61d	Fixed group filtering bug To make the LDAP authentication work in our installation with group filtering, we had to set `KEY_LDAP_GROUP_FILTER_GROUP_NAME` to `ldap-group-filter-group-name`.	2019-08-06 15:55:32 +02:00
Lauri Ojansivu	b9a25ecfac	Hide delete button until someone has time to fix it.	2019-08-06 16:09:57 +03:00
Lauri Ojansivu	8bb587155e	Try to fix Snap.	2019-08-05 14:57:42 +03:00
Lauri Ojansivu	b9b6aef4c8	Try to fix builds.	2019-08-05 13:55:04 +03:00
Lauri Ojansivu	d3ca3e25d7	Update package-lock.json	2019-08-05 13:31:03 +03:00
Lauri Ojansivu	833f19a5cd	v3.03	2019-08-04 18:11:49 +03:00
Lauri Ojansivu	174ffd0967	Update ChangeLog.	2019-08-04 18:06:26 +03:00
Lauri Ojansivu	c4f0229373	Update translations.	2019-08-04 16:08:42 +03:00
Lauri Ojansivu	a54bb91bba	Update snap dependencies.	2019-08-04 15:17:57 +03:00
Lauri Ojansivu	f78a8f2b55	Update packager.io dependencies and targets.	2019-08-04 15:15:50 +03:00
Lauri Ojansivu	be4b2a0504	Merge branch 'Trekky12-master'	2019-08-04 14:02:33 +03:00
Lauri Ojansivu	c74934836f	Merge branch 'master' of https://github.com/Trekky12/wekan into Trekky12-master	2019-08-04 13:59:43 +03:00
Lauri Ojansivu	ec35c544b7	Upgrade to MongoDB 4.0.11	2019-08-04 13:58:37 +03:00
Tobias	2bd48bc45c	add settings field for LDAP user authentication field	2019-08-04 11:12:21 +02:00
Lauri Ojansivu	67ecee8322	More targets for packager.io.	2019-08-04 02:29:56 +03:00
Lauri Ojansivu	a7b8611c70	Add packager.io targets for https://packager.io/gh/wekan/wekan	2019-08-04 02:17:50 +03:00
Lauri Ojansivu	dacaea7443	Update translations.	2019-08-04 01:34:44 +03:00
Lauri Ojansivu	a7f7e00a14	Try to fix Snap.	2019-08-04 01:33:18 +03:00
Lauri Ojansivu	5db3dcf8da	Update translations.	2019-08-01 17:14:36 +03:00
Lauri Ojansivu	66e011c71b	Update translations.	2019-07-30 21:01:19 +03:00
Lauri Ojansivu	d2ea240ed4	Merge branch 'Akuket-master'	2019-07-30 20:51:54 +03:00
Lauri Ojansivu	61bc6d3b7a	Fix typo.	2019-07-30 20:42:07 +03:00
guillaume	f414fe447d	add transaltion	2019-07-30 12:00:25 +02:00
guillaume	98e3b0ce77	Add admin setting to prevent users to self deleting their account	2019-07-30 11:57:21 +02:00
guillaume	84ba42f42e	add popup to confirm deleting one account	2019-07-30 11:42:43 +02:00
Lauri Ojansivu	7cc1ffcab2	Update translations.	2019-07-29 17:49:03 +03:00
Lauri Ojansivu	669cd76018	Remove mixmax:smart-disconnect , previously it did disconnect Wekan when browser tab was not active, but because now users are working on multiple boards at different browser tabs and switching all time time, there was constant loading, so now after removing all keeps active.	2019-07-29 17:38:10 +03:00
Lauri Ojansivu	8108158573	Update translations.	2019-07-29 00:50:46 +03:00
Lauri Ojansivu	268f9de23c	Add RICHER_CARD_COMMENT_EDITOR=true to docker-compose.yml.	2019-07-26 22:30:43 +03:00
Lauri Ojansivu	9fc7d0e825	Update package-lock.json version.	2019-07-26 21:51:22 +03:00
Lauri Ojansivu	ea1cdf52dd	v3.02	2019-07-26 11:01:56 +03:00
Lauri Ojansivu	7cf6850cdf	Try to fix Snap. Thanks to xet7 !	2019-07-26 10:54:53 +03:00
Lauri Ojansivu	231fee52d2	Update translations.	2019-07-26 09:47:12 +03:00
Lauri Ojansivu	1da198f3bc	Update ChangeLog.	2019-07-26 09:31:29 +03:00
Lauri Ojansivu	fff144a827	- Set LDAP_BACKGROUND_SYNC_INTERVAL='' (empty string) so it works and [does not crash](https://github.com/wekan/wekan/issues/2354#issuecomment-515305722). Thanks to benh57 and xet7 ! Closes #2354	2019-07-26 09:11:28 +03:00
Lauri Ojansivu	85ca2b1363	Updated Wekan on OpenShift.	2019-07-26 09:10:37 +03:00