v6.71

Thanks to HEMGDevelopment and xet7 !

Fixes #4810

.github/workflows/docker-publish.yml

@@ -48,14 +48,14 @@ jobs:
       # https://github.com/docker/metadata-action
       - name: Extract Docker metadata
         id: meta
-        uses: docker/metadata-action@57396166ad8aefe6098280995947635806a0e6ea
+        uses: docker/metadata-action@507c2f2dc502c992ad446e3d7a5dfbe311567a96
         with:
           images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
 
       # Build and push Docker image with Buildx (don't push on PR)
       # https://github.com/docker/build-push-action
       - name: Build and push Docker image
-        uses: docker/build-push-action@c56af957549030174b10d6867f20e78cfd7debc5
+        uses: docker/build-push-action@37abcedcc1da61a57767b7588cb9d03eb57e28b3
         with:
           context: .
           push: ${{ github.event_name != 'pull_request' }}

.github/workflows/release.yml

@@ -25,6 +25,6 @@ jobs:
           git config user.email "$GITHUB_ACTOR@users.noreply.github.com"
 
       - name: Run chart-releaser
-        uses: helm/chart-releaser-action@v1.4.1
+        uses: helm/chart-releaser-action@v1.5.0
         env:
           CR_TOKEN: "${{ secrets.GITHUB_TOKEN }}"

.meteor/packages

@@ -6,7 +6,7 @@
 meteor-base@1.5.1
 
 # Build system
-ecmascript@0.16.4
+ecmascript@0.16.5
 standard-minifier-js@2.8.1
 mquandalle:jade
 coffeescript@2.4.1!
@@ -21,11 +21,11 @@ cottz:publish-relations
 dburles:collection-helpers
 idmontie:migrations
 easy:search
-mongo@1.16.3
+mongo@1.16.4
 mquandalle:collection-mutations
 
 # Account system
-accounts-password@2.3.2
+accounts-password@2.3.3
 useraccounts:core
 useraccounts:flow-routing
 useraccounts:unstyled
@@ -43,7 +43,7 @@ jquery@1.11.10
 random@1.2.1
 reactive-dict@1.3.1
 session@1.2.1
-tracker@1.2.1
+tracker@1.3.0
 underscore@1.0.11
 arillo:flow-router-helpers
 audit-argument-checks@1.0.7

.meteor/release

@@ -1 +1 @@
-METEOR@2.9.0
+METEOR@2.10.0

.meteor/versions

@@ -10,7 +10,7 @@ allow-deny@1.1.1
 arillo:flow-router-helpers@0.5.2
 audit-argument-checks@1.0.7
 autoupdate@1.8.0
-babel-compiler@7.10.1
+babel-compiler@7.10.2
 babel-runtime@1.5.1
 base64@1.0.12
 binary-heap@1.0.11
@@ -19,7 +19,7 @@ blaze-tools@1.1.3
 boilerplate-generator@1.7.1
 caching-compiler@1.2.2
 caching-html-compiler@1.2.1
-callback-hook@1.4.0
+callback-hook@1.5.0
 cfs:access-point@0.1.49
 cfs:base-package@0.0.30
 cfs:collection@0.5.5
@@ -56,7 +56,7 @@ easy:search@2.2.1
 easylogic:summernote@0.8.8
 easysearch:components@2.2.2
 easysearch:core@2.2.2
-ecmascript@0.16.4
+ecmascript@0.16.5
 ecmascript-runtime@0.8.0
 ecmascript-runtime-client@0.12.1
 ecmascript-runtime-server@0.11.0
@@ -83,17 +83,17 @@ livedata@1.0.18
 lmieulet:meteor-coverage@1.1.4
 localstorage@1.2.0
 logging@1.3.1
-matb33:collection-hooks@1.1.4
+matb33:collection-hooks@1.2.0
 mdg:validation-error@0.5.1
-meteor@1.10.4
+meteor@1.11.0
 meteor-autosize@5.0.1
 meteor-base@1.5.1
 meteorhacks:aggregate@1.3.0
 meteorhacks:collection-utils@1.2.0
 meteorhacks:picker@1.0.3
 meteorhacks:subs-manager@1.6.4
-meteortesting:browser-tests@1.3.5
-meteortesting:mocha@2.0.3
+meteortesting:browser-tests@1.4.2
+meteortesting:mocha@2.0.4
 meteortesting:mocha-core@8.0.1
 minifier-css@1.6.2
 minifier-js@2.7.5
@@ -103,7 +103,7 @@ modern-browsers@0.1.9
 modules@0.19.0
 modules-runtime@0.13.1
 momentjs:moment@2.29.3
-mongo@1.16.3
+mongo@1.16.4
 mongo-decimal@0.1.3
 mongo-dev-server@1.1.0
 mongo-id@1.0.8
@@ -188,7 +188,7 @@ rajit:bootstrap3-datepicker-zh-cn@1.7.1
 rajit:bootstrap3-datepicker-zh-tw@1.7.1
 random@1.2.1
 rate-limit@1.0.9
-react-fast-refresh@0.2.3
+react-fast-refresh@0.2.5
 reactive-dict@1.3.1
 reactive-var@1.0.12
 reload@1.3.1
@@ -213,7 +213,7 @@ templating@1.4.1
 templating-compiler@1.4.1
 templating-runtime@1.5.0
 templating-tools@1.2.2
-tracker@1.2.1
+tracker@1.3.0
 twbs:bootstrap@3.3.6
 ui@1.0.13
 underscore@1.0.11
@@ -221,7 +221,7 @@ url@1.3.2
 useraccounts:core@1.16.2
 useraccounts:flow-routing@1.15.0
 useraccounts:unstyled@1.14.2
-webapp@1.13.2
+webapp@1.13.3
 webapp-hashing@1.1.1
 wekan-accounts-cas@0.1.0
 wekan-accounts-lockout@1.0.0
@@ -232,3 +232,4 @@ wekan-markdown@1.0.9
 wekan-oidc@1.0.12
 yasaricli:slugify@0.0.7
 zimme:active-route@2.3.2
+zodern:types@1.0.9

CHANGELOG.md

@@ -5,6 +5,82 @@ Download section.
 
 [How to upgrade WeKan](https://github.com/wekan/wekan/issues/4585)
 
+# v6.71 2023-01-18 WeKan ® release
+
+This release adds the following updates:
+
+- [Forked minio npm package to @wekanteam/minio to update package dependencies. S3/MinIO support In Progress](https://github.com/wekan/wekan/commit/cd1750f368aca5a474f08acd85996258d8781386).
+  Thanks to xet7.
+- Updated GitHub Actions.
+  [Part 1](https://github.com/wekan/wekan/commit/05139ed553cc9792699ad46190be40e4edf3d323),
+  [Part 2](https://github.com/wekan/wekan/commit/e0aad13fefb1c31a851dd0dbc3a9885a6be564c9),
+  [Part 3](https://github.com/wekan/wekan/commit/1e73f9b90963b55dbae8ff1668d482da278869f4),
+  [Part 4](https://github.com/wekan/wekan/commit/bd0b5391835734e668df92db6b1a0439fd8e30bc).
+  Thanks to dependabot.
+- [Upgraded to Meteor 2.10.0](https://github.com/wekan/wekan/commit/434ce9f7c49412b3c0df766789231ce772725ff9).
+  Thanks to Meteor developers.
+
+and fixes the following bugs:
+
+- [Fix API Edit card function does nothing](https://github.com/wekan/wekan/commit/eda2b3b406aaa9cee229b65c3fcd453293de4535).
+  Thanks to gu1ll0me, HEMGDevelopment and xet7.
+- [Fix Customfields are not added to new cards created with the API](https://github.com/wekan/wekan/commit/beaa50551d1eaccdb05f69c74384b349d4bd5b31).
+  Thanks to HEMGDevelopment and xet7.
+
+Thanks to above GitHub users for their contributions and translators for their translations.
+
+# v6.70 2023-01-14 WeKan ® release
+
+This release fixes the following bugs:
+
+- Try to fix User API.
+  [Part 1](https://github.com/wekan/wekan/commit/8092f8be28fd6f1d9e2b86e672878cbaebf48000),
+  [Part 2](https://github.com/wekan/wekan/commit/cc90291192f068ca6908b6b5e3605f78c2bed085).
+  Thanks to xet7.
+
+Thanks to above GitHub users for their contributions and translators for their translations.
+
+# v6.69 2023-01-09 WeKan ® release
+
+This release adds the following updates:
+
+- [Updated dependencies](https://github.com/wekan/wekan/commit/17a06ad1b1db79504482e9e8ae66784ec23f7ad2).
+  Thanks to developers of dependencies.
+
+Thanks to above GitHub users for their contributions and translators for their translations.
+
+# v6.68 2023-01-07 WeKan ® release
+
+This release adds the following updates:
+
+- [Upgraded to Meteor 2.9.1](https://github.com/wekan/wekan/commit/a0318e59c13c2f50339ff170fbd221f3915f5ba9).
+  Thanks to Meteor developers.
+
+and fixes the following bugs:
+
+- [Add "use-credentials" directive to site.webmanifest request](https://github.com/wekan/wekan/pull/4801).
+  Thanks to markormesher.
+- [OIDC login loop for integer user ID. Fix 2](https://github.com/wekan/wekan/commit/bc67b5c3bcd6ff645b7e6cd9c3d8bb79d83d5111).
+  Thanks to danielkaiser.
+
+Thanks to above GitHub users for their contributions and translators for their translations.
+
+# v6.67 2023-01-03 WeKan ® release
+
+This release adds the following updates:
+
+- Updated dependencies.
+  [Part 1](https://github.com/wekan/wekan/commit/f20656909bbf8457d2c3ab7e049aec3a6dcf8977),
+  [Part 2](https://github.com/wekan/wekan/commit/4c814ce3fed32f7fdb2a1e2a7cc04946bd79cf3a).
+  Thanks to developers of dependencies.
+
+and fixes the following bugs:
+
+- [Fix OIDC login loop for integer user ID](https://github.com/wekan/wekan/commit/f2a92be01a753c5752284d221706c6efb0dd60a7).
+  Thanks to danielkaiser and xet7.
+
+Thanks to above GitHub users for their contributions and translators for their translations.
+
 # v6.65 2022-12-27 WeKan ® release
 
 This release adds the following new features:

Stackerfile.yml

@@ -1,5 +1,5 @@
 appId: wekan-public/apps/77b94f60-dec9-0136-304e-16ff53095928
-appVersion: "v6.65.0"
+appVersion: "v6.71.0"
 files:
   userUploads:
     - README.md

api.py

@@ -21,32 +21,39 @@ import sys
 
 arguments = len(sys.argv) - 1
 
+syntax = """=== Wekan API Python CLI: Shows IDs for addcard ===
+# AUTHORID is USERID that writes card or custom field.
+If *nix:  chmod +x api.py => ./api.py users
+  Syntax:
+    User API:
+    python3 api.py user                 # Current user and list of current user boards
+    python3 api.py boards USERID        # Boards of USERID
+    python3 api.py swimlanes BOARDID    # Swimlanes of BOARDID
+    python3 api.py lists BOARDID        # Lists of BOARDID
+    python3 api.py list BOARDID LISTID  # Info of LISTID
+    python3 api.py createlist BOARDID LISTTITLE # Create list
+    python3 api.py addcard AUTHORID BOARDID SWIMLANEID LISTID CARDTITLE CARDDESCRIPTION
+    python3 api.py editcard BOARDID LISTID CARDID NEWCARDTITLE NEWCARDDESCRIPTION
+    python3 api.py customfields BOARDID # Custom Fields of BOARDID
+    python3 api.py customfield BOARDID CUSTOMFIELDID # Info of CUSTOMFIELDID
+    python3 api.py addcustomfieldtoboard AUTHORID BOARDID NAME TYPE SETTINGS SHOWONCARD AUTOMATICALLYONCARD SHOWLABELONMINICARD SHOWSUMATTOPOFLIST # Add Custom Field to Board
+    python3 api.py listattachments BOARDID # List attachments
+
+  Admin API:
+    python3 api.py users                # All users
+    python3 api.py boards               # All Public Boards
+    python3 api.py newuser USERNAME EMAIL PASSWORD
+"""
+
 if arguments == 0:
-    print("=== Wekan API Python CLI: Shows IDs for addcard ===")
-    print("AUTHORID is USERID that writes card.")
-    print("If *nix:  chmod +x api.py => ./api.py users")
-    print("Syntax:")
-    print("  python3 api.py users                # All users")
-    print("  python3 api.py boards               # All Public Boards")
-    print("  python3 api.py boards USERID        # Boards of USERID")
-    print("  python3 api.py board BOARDID        # Info of BOARDID")
-    print("  python3 api.py customfields BOARDID # Custom Fields of BOARDID")
-    print("  python3 api.py customfield BOARDID CUSTOMFIELDID # Info of CUSTOMFIELDID")
-    print("  python3 api.py addcustomfieldtoboard AUTHORID BOARDID NAME TYPE SETTINGS SHOWONCARD AUTOMATICALLYONCARD SHOWLABELONMINICARD SHOWSUMATTOPOFLIST # Add Custom Field to Board")
-    print("  python3 api.py swimlanes BOARDID    # Swimlanes of BOARDID")
-    print("  python3 api.py lists BOARDID        # Lists of BOARDID")
-    print("  python3 api.py list BOARDID LISTID  # Info of LISTID")
-    print("  python3 api.py createlist BOARDID LISTTITLE # Create list")
-    print("  python3 api.py addcard AUTHORID BOARDID SWIMLANEID LISTID CARDTITLE CARDDESCRIPTION")
-    print("  python3 api.py editcard BOARDID LISTID CARDID NEWCARDTITLE NEWCARDDESCRIPTION")
-    print("  python3 api.py listattachments BOARDID # List attachments")
-    print("  python3 api.py newuser USERNAME EMAIL PASSWORD")
+    print(syntax)
+    exit
+
 # TODO:
 #   print("  python3 api.py attachmentjson BOARDID ATTACHMENTID # One attachment as JSON base64")
 #   print("  python3 api.py attachmentbinary BOARDID ATTACHMENTID # One attachment as binary file")
 #   print("  python3 api.py attachmentdownload BOARDID ATTACHMENTID # One attachment as file")
 #   print("  python3 api.py attachmentsdownload BOARDID # All attachments as files")
-    exit
 
 # ------- SETTINGS START -------------
 
@@ -62,33 +69,6 @@ wekanurl = 'http://localhost:4000/'
 # ------- SETTINGS END -------------
 
 """
-EXAMPLE:
-
-python3 api.py
-
-OR:
-chmod +x api.py
-./api.py
-
-=== Wekan API Python CLI: Shows IDs for addcard ===
-AUTHORID is USERID that writes card.
-Syntax:
-  python3 api.py users                # All users
-  python3 api.py boards USERID        # Boards of USERID
-  python3 api.py board BOARDID        # Info of BOARDID
-  python3 api.py customfields BOARDID # Custom Fields of BOARDID
-  python3 api.py customfield BOARDID CUSTOMFIELDID # Info of CUSTOMFIELDID
-  python3 api.py addcustomfieldtoboard AUTHORID BOARDID NAME TYPE SETTINGS SHOWONCARD AUTOMATICALLYONCARD SHOWLABELONMINICARD SHOWSUMATTOPOFLIST # Add Custom Field to Board
-  python3 api.py swimlanes BOARDID    # Swimlanes of BOARDID
-  python3 api.py lists BOARDID        # Lists of BOARDID
-  python3 api.py list BOARDID LISTID  # Info of LISTID
-  python3 api.py createlist BOARDID LISTTITLE # Create list
-  python3 api.py addcard AUTHORID BOARDID SWIMLANEID LISTID CARDTITLE CARDDESCRIPTION
-  python3 api.py editcard BOARDID LISTID CARDID NEWCARDTITLE NEWCARDDESCRIPTION
-  python3 api.py listattachments BOARDID # List attachments
-  python3 api.py attachmentjson BOARDID ATTACHMENTID # One attachment as JSON base64
-  python3 api.py attachmentbinary BOARDID ATTACHMENTID # One attachment as binary file
-
 === ADD CUSTOM FIELD TO BOARD ===
 
 Type: text, number, date, dropdown, checkbox, currency, stringtemplate.
@@ -145,6 +125,8 @@ wekanloginurl = wekanurl + loginurl
 apiboards = 'api/boards/'
 apiattachments = 'api/attachments/'
 apiusers = 'api/users'
+apiuser = 'api/user'
+apiallusers = 'api/allusers'
 e = 'export'
 s = '/'
 l = 'lists'
@@ -153,10 +135,13 @@ sws = 'swimlanes'
 cs = 'cards'
 cf = 'custom-fields'
 bs = 'boards'
+apbs = 'allpublicboards'
 atl = 'attachmentslist'
 at = 'attachment'
 ats = 'attachments'
 users = wekanurl + apiusers
+user = wekanurl + apiuser
+allusers = wekanurl + apiallusers
 
 # ------- API URL GENERATION END -----------
 
@@ -372,6 +357,16 @@ if arguments == 1:
         print(data2)
         # ------- LIST OF USERS END -----------
 
+    if sys.argv[1] == 'user':
+        # ------- LIST OF ALL USERS START -----------
+        headers = {'Accept': 'application/json', 'Authorization': 'Bearer {}'.format(apikey)}
+        print(user)
+        print("=== USER ===\n")
+        body = requests.get(user, headers=headers)
+        data2 = body.text.replace('}',"}\n")
+        print(data2)
+        # ------- LIST OF ALL USERS END -----------
+
     if sys.argv[1] == 'boards':
 
         # ------- LIST OF PUBLIC BOARDS START -----------

client/components/main/layouts.jade

@@ -10,7 +10,7 @@ head
   link(rel="apple-touch-icon" sizes="180x180" href="apple-touch-icon.png")
   link(rel="icon" type="image/png" sizes="32x32" href="favicon-32x32.png")
   link(rel="icon" type="image/png" sizes="16x16" href="favicon-16x16.png")
-  link(rel="manifest" href="/site.webmanifest")
+  link(rel="manifest" crossOrigin="use-credentials" href="/site.webmanifest")
   link(rel="mask-icon" href="safari-pinned-tab.svg" color="#5bbad5")
   meta(name="apple-mobile-web-app-title" content="Wekan")
   meta(name="application-name" content="Wekan")

imports/i18n/data/de.i18n.json

@@ -1175,14 +1175,14 @@
     "attachmentActionsPopup-title": "Anhang-Aktionen",
     "attachment-move-storage-fs": "Verschiebe den Anhang zum Dateisystem",
     "attachment-move-storage-gridfs": "Verschiebe den Anhang zu GridFS",
-    "attachment-move-storage-s3": "Move attachment to S3",
+    "attachment-move-storage-s3": "Verschiebe Anhang nach S3",
     "attachment-move": "Verschiebe den Anhang",
     "move-all-attachments-to-fs": "Verschiebe alle Anhänge zum Dateisystem",
     "move-all-attachments-to-gridfs": "Verschiebe alle Anhänge zu GridFS",
-    "move-all-attachments-to-s3": "Move all attachments to S3",
+    "move-all-attachments-to-s3": "Verschiebe alle Anhänge nach S3",
     "move-all-attachments-of-board-to-fs": "Verschiebe alle Anhänge des Boards zum Dateisystem",
     "move-all-attachments-of-board-to-gridfs": "Verschiebe alle Anhänge des Boards zu GridFS",
-    "move-all-attachments-of-board-to-s3": "Move all attachments of board to S3",
+    "move-all-attachments-of-board-to-s3": "Verschiebe alle Anhänge des Boards nach S3",
     "path": "Pfad",
     "version-name": "Version-Name",
     "size": "Größe",

imports/i18n/data/fr.i18n.json

@@ -1175,14 +1175,14 @@
     "attachmentActionsPopup-title": "Actions sur les pièces jointes",
     "attachment-move-storage-fs": "Déplacer la pièce jointe vers le système de fichier",
     "attachment-move-storage-gridfs": "Déplacer la pièce jointe vers GridFS",
-    "attachment-move-storage-s3": "Move attachment to S3",
+    "attachment-move-storage-s3": "Déplacer la pièce jointe vers S3",
     "attachment-move": "Déplacer la pièce jointe",
     "move-all-attachments-to-fs": "Déplacer toutes les pièces jointes vers le système de fichier",
     "move-all-attachments-to-gridfs": "Déplacer toutes les pièces jointes vers GridFS",
-    "move-all-attachments-to-s3": "Move all attachments to S3",
+    "move-all-attachments-to-s3": "Déplacer toutes les pièces jointes vers S3",
     "move-all-attachments-of-board-to-fs": "Déplacer toutes les pièces jointes du tableau vers le système de fichier",
     "move-all-attachments-of-board-to-gridfs": "Déplacer toutes les pièces jointes du tableau vers GridFS",
-    "move-all-attachments-of-board-to-s3": "Move all attachments of board to S3",
+    "move-all-attachments-of-board-to-s3": "Déplacer toutes les pièces jointes du tableau vers S3",
     "path": "Chemin",
     "version-name": "Version-Nom",
     "size": "Taille",

imports/i18n/data/it.i18n.json

@@ -31,7 +31,7 @@
     "act-archivedCard": "Scheda __card__ della lista __list__ della swimlane __swimlane__ della bacheca __board__ archiviata",
     "act-archivedList": "Lista __list__ della swimlane __swimlane__ della bacheca __board__ archiviata",
     "act-archivedSwimlane": "Corsia __swimlane__ della bacheca __board__ archiviata",
-    "act-importBoard": "Bacheca __board__ importata",
+    "act-importBoard": "importato la bacheca __board__",
     "act-importCard": "scheda importata  __card__ nella lista __list__ della swimlane __swimlane__ della bacheca __board__",
     "act-importList": "lista __list__ importata nella swimlane __swimlane__ della bacheca __board__",
     "act-joinMember": "aggiunto membro __member__  alla scheda __card__ della list __list__ nella swimlane __swimlane__ della bacheca __board__",
@@ -87,11 +87,11 @@
     "add-card-to-bottom-of-list": "Aggiungi Scheda in fondo alla Lista",
     "add-swimlane": "Aggiungi swimlane",
     "add-subtask": "Aggiungi sotto-compito",
-    "add-checklist": "Aggiungi Checklist",
+    "add-checklist": "Aggiungi checklist",
     "add-checklist-item": "Aggiungi un elemento alla checklist",
     "close-add-checklist-item": "Close add an item to checklist form",
     "close-edit-checklist-item": "Close edit an item to checklist form",
-    "convertChecklistItemToCardPopup-title": "Trasforma in Scheda",
+    "convertChecklistItemToCardPopup-title": "Converti in scheda",
     "add-cover": "Aggiungi copertina",
     "add-label": "Aggiungi etichetta",
     "add-list": "Aggiungi lista",
@@ -141,7 +141,7 @@
     "board-info-on-my-boards": "Impostazioni di tutte le bacheche",
     "boardInfoOnMyBoardsPopup-title": "Impostazioni di tutte le bacheche",
     "boardInfoOnMyBoards-title": "Impostazioni di tutte le bacheche",
-    "show-card-counter-per-list": "Show card count per list",
+    "show-card-counter-per-list": "Mostra numero schede per lista",
     "show-board_members-avatar": "Show Board members avatars",
     "board-nb-stars": "%s stelle",
     "board-not-found": "Bacheca non trovata",
@@ -165,17 +165,17 @@
     "cancel": "Cancella",
     "card-archived": "Questa scheda è stata spostata nell'archivio",
     "board-archived": "Questa bacheca è stata spostata nell'archivio",
-    "card-comments-title": "Questa scheda ha %s commenti.",
+    "card-comments-title": "Questa scheda ha %s commento.",
     "card-delete-notice": "L'eliminazione è permanente. Tutte le azioni associate a questa scheda andranno perse.",
     "card-delete-pop": "Tutte le azioni saranno rimosse dal flusso attività e non sarai in grado di riaprire la scheda. Non potrai tornare indietro.",
     "card-delete-suggest-archive": "Puoi spostare una scheda nell'archivio per rimuoverla dalla bacheca e mantenere la sua attività.",
     "card-archive-pop": "Card will not be visible at this list after archiving card.",
-    "card-archive-suggest-cancel": "You can later restore card from Archive.",
+    "card-archive-suggest-cancel": "Puoi ripristinare la scheda più tardi dall'archivio",
     "card-due": "Scadenza",
     "card-due-on": "Scade il",
     "card-spent": "Tempo trascorso",
     "card-edit-attachments": "Modifica allegati",
-    "card-edit-custom-fields": "Modifica campo personalizzato",
+    "card-edit-custom-fields": "Modifica campi personalizzati",
     "card-edit-labels": "Modifica etichette",
     "card-edit-members": "Modifica membri",
     "card-labels-title": "Cambia le etichette per questa scheda.",
@@ -184,11 +184,11 @@
     "card-start-on": "Inizia il",
     "cardAttachmentsPopup-title": "Allega da",
     "cardCustomField-datePopup-title": "Cambia data",
-    "cardCustomFieldsPopup-title": "Modifica campo personalizzato",
+    "cardCustomFieldsPopup-title": "Modifica campi personalizzati",
     "cardStartVotingPopup-title": "Avvia una votazione",
     "positiveVoteMembersPopup-title": "Favorevoli",
     "negativeVoteMembersPopup-title": "Contrari",
-    "card-edit-voting": "Modifica la votazione",
+    "card-edit-voting": "Modifica votazione",
     "editVoteEndDatePopup-title": "Cambia data di termine voto",
     "allowNonBoardMembers": "Consenti tutti gli utenti registrati",
     "vote-question": "Domanda di votazione",
@@ -250,7 +250,7 @@
     "close": "Chiudi",
     "close-board": "Chiudi bacheca",
     "close-board-pop": "Potrai ripristinare la bacheca cliccando sul tasto \"Archivio\"  presente nell'intestazione della home.",
-    "close-card": "Chiudi Scheda",
+    "close-card": "Chiudi scheda",
     "color-black": "nero",
     "color-blue": "blu",
     "color-crimson": "Rosso cremisi",
@@ -282,8 +282,8 @@
     "comment-only": "Solo commenti",
     "comment-only-desc": "Puoi commentare solo le schede.",
     "comment-delete": "Sei sicuro di voler cancellare il commento?",
-    "deleteCommentPopup-title": "Cancello il commento?",
-    "no-comments": "Non ci sono commenti.",
+    "deleteCommentPopup-title": "Eliminare commento?",
+    "no-comments": "Nessun commento",
     "no-comments-desc": "Impossibile visualizzare commenti o attività.",
     "worker": "Lavoratore",
     "worker-desc": "Può solo spostare schede, assegnarsi una scheda e commentare.",
@@ -291,7 +291,7 @@
     "confirm-subtask-delete-popup": "Sei sicuro di voler eliminare il sotto-compito?",
     "confirm-checklist-delete-popup": "Sicuro di voler cancellare la checklist?",
     "subtaskDeletePopup-title": "Delete Subtask?",
-    "checklistDeletePopup-title": "Cancello la checklist?",
+    "checklistDeletePopup-title": "Eliminare checklist?",
     "copy-card-link-to-clipboard": "Copia link della scheda negli appunti",
     "copy-text-to-clipboard": "Copia il testo negli appunti",
     "linkCardPopup-title": "Collega scheda",
@@ -335,7 +335,7 @@
     "edit": "Modifica",
     "edit-avatar": "Cambia avatar",
     "edit-profile": "Modifica profilo",
-    "edit-wip-limit": "Modifica limite di work in progress",
+    "edit-wip-limit": "Modifica limite Work In Progress",
     "soft-wip-limit": "Limite Work in progress soft",
     "editCardStartDatePopup-title": "Cambia data di inizio",
     "editCardDueDatePopup-title": "Cambia data di scadenza",
@@ -378,14 +378,14 @@
     "export-board-json": "Esporta bacheca in JSON",
     "export-board-csv": "Esporta bacheca in CSV",
     "export-board-tsv": "Esporta bacheca in TSV",
-    "export-board-excel": "Esporta bacheca in Excel",
+    "export-board-excel": "Esporta bacheca in formato Excel",
     "user-can-not-export-excel": "L'utente non può effettuare l'esportazione in Excel",
     "export-board-html": "Esporta bacheca in HTML",
-    "export-card": "Esporta la scheda",
-    "export-card-pdf": "Esporta la scheda in PDF",
+    "export-card": "Esporta scheda",
+    "export-card-pdf": "Esporta scheda in PDF",
     "user-can-not-export-card-to-pdf": "L'utente non può esportare la scheda in PDF",
     "exportBoardPopup-title": "Esporta bacheca",
-    "exportCardPopup-title": "Esporta la scheda",
+    "exportCardPopup-title": "Esporta scheda",
     "sort": "Ordina",
     "sorted": "Ordinate",
     "remove-sort": "Rimuovi l'ordinamento",
@@ -443,8 +443,8 @@
     "import-board-instruction-csv": "Incolla in Comma Separated Values (CSV) / Tab Separated Values (TSV) .",
     "import-board-instruction-wekan": "Nella tua bacheca vai su \"Menu\", poi \"Esporta bacheca\" e copia il testo nel file scaricato.",
     "import-board-instruction-about-errors": "Se hai degli errori quando importi una bacheca, qualche volta l'importazione funziona comunque, e la bacheca si trova nella pagina \"Tutte le bacheche\"",
-    "import-json-placeholder": "Incolla un JSON valido qui",
-    "import-csv-placeholder": "Incolla un CSV/TSV valido qui",
+    "import-json-placeholder": "Incolla dei dati JSON validi qui",
+    "import-csv-placeholder": "Incolla dei dati CSV/TSV validi qui",
     "import-map-members": "Mappatura dei membri",
     "import-members-map": "La bacheca che hai importato contiene alcuni membri. Per favore scegli i membri che vuoi importare tra i tuoi utenti",
     "import-members-map-note": "Nota: I membri non mappati verranno assegnati all'utente corrente.",
@@ -599,7 +599,7 @@
     "custom-top-left-corner-logo-height": "Altezza del logo personalizzato nell'angolo superiore sinistro. Default: 27",
     "custom-login-logo-image-url": "URL dell'immagine del logo personalizzato per il login",
     "custom-login-logo-link-url": "Link dell'immagine del logo personalizzato per il login",
-    "custom-help-link-url": "Custom Help Link URL",
+    "custom-help-link-url": "Link URL di aiuto personalizzato",
     "text-below-custom-login-logo": "Testo sotto il logo personalizzato per il login",
     "automatic-linked-url-schemes": "Custom URL Schemes which should automatically be clickable. One URL Scheme per line",
     "username": "Username",
@@ -793,7 +793,7 @@
     "r-check-all": "Seleziona tutti",
     "r-uncheck-all": "Togli la spunta a tutti",
     "r-items-check": "Elementi della checklist",
-    "r-check": "Spunta",
+    "r-check": "Seleziona",
     "r-uncheck": "Togli la spunta",
     "r-item": "elemento",
     "r-of-checklist": "della lista di cose da fare",
@@ -824,7 +824,7 @@
     "r-d-uncheck-all": "Deseleziona tutti gli items di una lista",
     "r-d-check-one": "Seleziona elemento",
     "r-d-uncheck-one": "Deseleziona elemento",
-    "r-d-check-of-list": "della lista di cose da fare",
+    "r-d-check-of-list": "della checklist",
     "r-d-add-checklist": "Aggiungi checklist",
     "r-d-remove-checklist": "Rimuovi checklist",
     "r-by": "da",
@@ -890,7 +890,7 @@
     "act-pastdue": "sollecito inviato: la scadenza (__timeValue__) di __card__ è già passata",
     "act-duenow": "sollecito inviato: la scadenza (__timeValue__) di __card__ è adesso",
     "act-atUserComment": "Sei stato menzionato in [__board__] __list__/__card__",
-    "delete-user-confirm-popup": "Sei sicuro di voler cancellare questo profilo? Non sarà possibile ripristinarlo.",
+    "delete-user-confirm-popup": "Sei sicuro di voler eliminare questo profilo? Non sarà possibile ripristinarlo.",
     "delete-team-confirm-popup": "Are you sure you want to delete this team? There is no undo.",
     "delete-org-confirm-popup": "Are you sure you want to delete this organization? There is no undo.",
     "accounts-allowUserDelete": "Permetti agli utenti di cancellare il loro profilo",
@@ -904,12 +904,12 @@
     "new": "Nuovo",
     "editOrgPopup-title": "Modifica Organizzazione",
     "newOrgPopup-title": "Nuova Organizzazione",
-    "editTeamPopup-title": "Modifica Team",
-    "newTeamPopup-title": "Nuovo Team",
+    "editTeamPopup-title": "Modifica team",
+    "newTeamPopup-title": "Nuovo team",
     "editUserPopup-title": "Modifica utente",
     "newUserPopup-title": "Nuovo utente",
     "notifications": "Notifiche",
-    "help": "Help",
+    "help": "Aiuto",
     "view-all": "Mostra tutte",
     "filter-by-unread": "Filtra per non letto",
     "mark-all-as-read": "Segna tutto come letto",
@@ -938,10 +938,10 @@
     "create-task": "Crea compito",
     "ok": "OK",
     "organizations": "Organizzazioni",
-    "teams": "Teams",
+    "teams": "Team",
     "displayName": "Nome da visualizzare",
-    "shortName": "Nome corto",
-    "website": "Sito Web",
+    "shortName": "Nome abbreviato",
+    "website": "Sito web",
     "person": "Persona",
     "my-cards": "Le mie schede",
     "card": "Scheda",
@@ -970,7 +970,7 @@
     "user-username-not-found": "Username '%s' non trovato.",
     "comment-not-found": "Schede con commenti contenenti il testo '%s' non trovate.",
     "org-name-not-found": "Organizzazione '%s' non trovata",
-    "team-name-not-found": "Team '%s' not found.",
+    "team-name-not-found": "Team '%s' non trovato.",
     "globalSearch-title": "Cerca in tutte le bacheche",
     "no-cards-found": "Nessuna scheda trovata",
     "one-card-found": "Una scheda trovata",
@@ -1031,7 +1031,7 @@
     "operator-status-invalid": "'%s' non è uno stato valido",
     "operator-has-invalid": "%s non è un controllo di esistenza valido",
     "operator-limit-invalid": "%s non è un limite valido.  Il limite dovrebbe essere un numero intero positivo.",
-    "operator-debug-invalid": "%s is not a valid debug predicate",
+    "operator-debug-invalid": "%s non è un valido predicato di debug",
     "next-page": "Pagina successiva",
     "previous-page": "Pagina precedente",
     "heading-notes": "Note",
@@ -1091,15 +1091,15 @@
     "custom-field-stringtemplate": "String Template",
     "custom-field-stringtemplate-format": "Format (use %{value} as placeholder)",
     "custom-field-stringtemplate-separator": "Separator (use   or   for a space)",
-    "custom-field-stringtemplate-item-placeholder": "Press enter to add more items",
+    "custom-field-stringtemplate-item-placeholder": "Premi Invio per aggiungere più elementi",
     "creator": "Creatore",
     "filesReportTitle": "Files Report",
     "reports": "Segnalazioni",
     "rulesReportTitle": "Rules Report",
     "boardsReportTitle": "Boards Report",
     "cardsReportTitle": "Cards Report",
-    "copy-swimlane": "Copy Swimlane",
-    "copySwimlanePopup-title": "Copy Swimlane",
+    "copy-swimlane": "Copia swimlane",
+    "copySwimlanePopup-title": "Copia swimlane",
     "display-card-creator": "Display Card Creator",
     "wait-spinner": "Wait Spinner",
     "Bounce": "Bounce Wait Spinner",
@@ -1110,36 +1110,36 @@
     "Rotateplane": "Rotateplane Wait Spinner",
     "Scaleout": "Scaleout Wait Spinner",
     "Wave": "Wave Wait Spinner",
-    "maximize-card": "Maximize Card",
-    "minimize-card": "Minimize Card",
+    "maximize-card": "Massimizza scheda",
+    "minimize-card": "Minimizza scheda",
     "delete-org-warning-message": "Non posso cancellare questa organizzazione: c'è almeno un utente che gli appartiene",
     "delete-team-warning-message": "Can not delete this team, there is at least one user that belongs to it",
     "subject": "Soggetto",
-    "details": "Details",
+    "details": "Dettagli",
     "carbon-copy": "Copia Conoscenza (Cc:)",
     "ticket": "Ticket",
     "tickets": "Ticket",
-    "ticket-number": "Ticket Number",
+    "ticket-number": "Numero ticket",
     "open": "Apri",
     "pending": "In sospeso",
     "closed": "Chiuso",
     "resolved": "Risolto",
     "cancelled": "Cancelled",
-    "history": "Storia",
+    "history": "Cronologia",
     "request": "Richiesta",
     "requests": "Richieste",
     "help-request": "Richiesta aiuto",
-    "editCardSortOrderPopup-title": "Change Sorting",
+    "editCardSortOrderPopup-title": "Modifica ordinamento",
     "cardDetailsPopup-title": "Dettagli scheda",
     "add-teams": "Aggiungi team",
-    "add-teams-label": "Added teams are displayed below:",
+    "add-teams-label": "I team aggiunti sono i seguenti:",
     "remove-team-from-table": "Are you sure you want to remove this team from the board ?",
     "confirm-btn": "Conferma",
     "remove-btn": "Rimuovi",
     "filter-card-title-label": "Filtra per titolo scheda",
-    "invite-people-success": "Invitation to register sent with success",
-    "invite-people-error": "Error while sending invitation to register",
-    "can-invite-if-same-mailDomainName": "Email domain name",
+    "invite-people-success": "Inviti di registrazione inviati correttamente",
+    "invite-people-error": "Errore durante l'invio degli inviti di registrazione",
+    "can-invite-if-same-mailDomainName": "Nome dominio email",
     "to-create-teams-contact-admin": "To create teams, please contact the administrator.",
     "Node_heap_total_heap_size": "Node heap: total heap size",
     "Node_heap_total_heap_size_executable": "Node heap: total heap size executable",
@@ -1164,9 +1164,9 @@
     "acceptance_of_our_legalNotice": "Continuando, accetti il nostro",
     "legalNotice": "Informazioni legali",
     "copied": "Copiato!",
-    "checklistActionsPopup-title": "Azioni Checklist",
-    "moveChecklist": "Sposta Checklist",
-    "moveChecklistPopup-title": "Sposta Checklist",
+    "checklistActionsPopup-title": "Azioni checklist",
+    "moveChecklist": "Sposta checklist",
+    "moveChecklistPopup-title": "Sposta checklist",
     "newlineBecomesNewChecklistItem": "Nuove linee diventano elementi della checklist",
     "copyChecklist": "Copia checklist",
     "copyChecklistPopup-title": "Copia checklist",
@@ -1174,8 +1174,8 @@
     "subtaskActionsPopup-title": "Subtask Actions",
     "attachmentActionsPopup-title": "Azioni allegato",
     "attachment-move-storage-fs": "Move attachment to filesystem",
-    "attachment-move-storage-gridfs": "Move attachment to GridFS",
-    "attachment-move-storage-s3": "Move attachment to S3",
+    "attachment-move-storage-gridfs": "Sposta allegato su GridFS",
+    "attachment-move-storage-s3": "Sposta allegato su S3",
     "attachment-move": "Muovi allegato",
     "move-all-attachments-to-fs": "Move all attachments to filesystem",
     "move-all-attachments-to-gridfs": "Move all attachments to GridFS",
@@ -1188,17 +1188,17 @@
     "size": "Dimensione",
     "storage": "Storage",
     "action": "Azione",
-    "board-title": "Titolo della Bacheca",
+    "board-title": "Titolo bacheca",
     "attachmentRenamePopup-title": "Rinomina",
     "uploading": "Caricamento in corso",
     "remaining_time": "Tempo rimanente",
     "speed": "Velocità",
     "progress": "Avanzamento",
     "password-again": "Password (di nuovo)",
-    "if-you-already-have-an-account": "If you already have an account",
-    "register": "Register",
+    "if-you-already-have-an-account": "Se hai già un account",
+    "register": "Registra",
     "forgot-password": "Password dimenticata",
     "minicardDetailsActionsPopup-title": "Dettagli scheda",
-    "Mongo_sessions_count": "Mongo sessions count",
+    "Mongo_sessions_count": "Numero sessioni Mongo",
     "change-visibility": "Cambia visibilità"
 }

imports/i18n/data/tr.i18n.json

@@ -909,7 +909,7 @@
     "editUserPopup-title": "Kullanıcıyı Düzenle",
     "newUserPopup-title": "Yeni Kullanıcı",
     "notifications": "Bildirim",
-    "help": "Help",
+    "help": "Yardım",
     "view-all": "Tümünü gör",
     "filter-by-unread": "Okunmamışlara göre filtrele",
     "mark-all-as-read": "Tümünü okundu olarak işaretle",
@@ -1185,14 +1185,14 @@
     "move-all-attachments-of-board-to-s3": "Move all attachments of board to S3",
     "path": "Path",
     "version-name": "Version-Name",
-    "size": "Size",
-    "storage": "Storage",
+    "size": "Boyut",
+    "storage": "Depolama",
     "action": "Aksiyon",
-    "board-title": "Board Title",
+    "board-title": "Pano Başlığı",
     "attachmentRenamePopup-title": "Yeniden adlandır",
     "uploading": "Uploading",
     "remaining_time": "Remaining time",
-    "speed": "Speed",
+    "speed": "Hız",
     "progress": "Progress",
     "password-again": "Password (again)",
     "if-you-already-have-an-account": "If you already have an account",

models/attachments.js

@@ -4,8 +4,8 @@ import { isFileValid } from './fileValidation';
 import { createBucket } from './lib/grid/createBucket';
 import fs from 'fs';
 import path from 'path';
-import { AttachmentStoreStrategyFilesystem, AttachmentStoreStrategyGridFs} from '/models/lib/attachmentStoreStrategy';
-import FileStoreStrategyFactory, {moveToStorage, rename, STORAGE_NAME_FILESYSTEM, STORAGE_NAME_GRIDFS} from '/models/lib/fileStoreStrategy';
+import { AttachmentStoreStrategyFilesystem, AttachmentStoreStrategyGridFs, AttachmentStoreStrategyS3 } from '/models/lib/attachmentStoreStrategy';
+import FileStoreStrategyFactory, {moveToStorage, rename, STORAGE_NAME_FILESYSTEM, STORAGE_NAME_GRIDFS, STORAGE_NAME_S3} from '/models/lib/fileStoreStrategy';
 
 let attachmentUploadExternalProgram;
 let attachmentUploadMimeTypes = [];

models/boards.js

@@ -2002,12 +2002,12 @@ if (Meteor.isServer) {
    */
   JsonRoutes.add('GET', '/api/boards/:boardId', function(req, res) {
     try {
-      Authentication.checkUserId(req.userId);
-      const id = req.params.boardId;
+      const paramBoardId = req.params.boardId;
+      Authentication.checkBoardAccess(req.userId, paramBoardId);
 
       JsonRoutes.sendResult(res, {
         code: 200,
-        data: Boards.findOne({ _id: id }),
+        data: Boards.findOne({ _id: paramBoardId }),
       });
     } catch (error) {
       JsonRoutes.sendResult(res, {
@@ -2046,7 +2046,7 @@ if (Meteor.isServer) {
                    */
   JsonRoutes.add('POST', '/api/boards', function(req, res) {
     try {
-      Authentication.checkUserId(req.userId);
+      Authentication.checkLoggedIn(req.userId);
       const id = Boards.insert({
         title: req.body.title,
         members: [
@@ -2120,8 +2120,8 @@ if (Meteor.isServer) {
    * @return_type string
    */
   JsonRoutes.add('PUT', '/api/boards/:boardId/labels', function(req, res) {
-    Authentication.checkUserId(req.userId);
     const id = req.params.boardId;
+    Authentication.checkBoardAccess(req.userId, id);
     try {
       if (req.body.hasOwnProperty('label')) {
         const board = Boards.findOne({ _id: id });
@@ -2214,8 +2214,8 @@ if (Meteor.isServer) {
    *                swimlaneId: string}]
    */
   JsonRoutes.add('GET', '/api/boards/:boardId/attachments', function(req, res) {
-    Authentication.checkUserId(req.userId);
     const paramBoardId = req.params.boardId;
+    Authentication.checkBoardAccess(req.userId, paramBoardId);
     JsonRoutes.sendResult(res, {
       code: 200,
       data: Attachments.files

models/cardComments.js

@@ -235,9 +235,9 @@ if (Meteor.isServer) {
     res,
   ) {
     try {
-      Authentication.checkUserId(req.userId);
       const paramBoardId = req.params.boardId;
       const paramCardId = req.params.cardId;
+      Authentication.checkBoardAccess(req.userId, paramBoardId);
       JsonRoutes.sendResult(res, {
         code: 200,
         data: CardComments.find({
@@ -273,10 +273,10 @@ if (Meteor.isServer) {
     '/api/boards/:boardId/cards/:cardId/comments/:commentId',
     function (req, res) {
       try {
-        Authentication.checkUserId(req.userId);
         const paramBoardId = req.params.boardId;
         const paramCommentId = req.params.commentId;
         const paramCardId = req.params.cardId;
+        Authentication.checkBoardAccess(req.userId, paramBoardId);
         JsonRoutes.sendResult(res, {
           code: 200,
           data: CardComments.findOne({
@@ -309,9 +309,9 @@ if (Meteor.isServer) {
     '/api/boards/:boardId/cards/:cardId/comments',
     function (req, res) {
       try {
-        Authentication.checkUserId(req.userId);
         const paramBoardId = req.params.boardId;
         const paramCardId = req.params.cardId;
+        Authentication.checkBoardAccess(req.userId, paramBoardId);
         const id = CardComments.direct.insert({
           userId: req.body.authorId,
           text: req.body.comment,
@@ -355,10 +355,10 @@ if (Meteor.isServer) {
     '/api/boards/:boardId/cards/:cardId/comments/:commentId',
     function (req, res) {
       try {
-        Authentication.checkUserId(req.userId);
         const paramBoardId = req.params.boardId;
         const paramCommentId = req.params.commentId;
         const paramCardId = req.params.cardId;
+        Authentication.checkBoardAccess(req.userId, paramBoardId);
         CardComments.remove({
           _id: paramCommentId,
           cardId: paramCardId,

models/cards.js

@@ -3202,9 +3202,9 @@ if (Meteor.isServer) {
     'GET',
     '/api/boards/:boardId/swimlanes/:swimlaneId/cards',
     function(req, res) {
-      Authentication.checkUserId(req.userId);
       const paramBoardId = req.params.boardId;
       const paramSwimlaneId = req.params.swimlaneId;
+      Authentication.checkBoardAccess(req.userId, paramBoardId);
       JsonRoutes.sendResult(res, {
         code: 200,
         data: Cards.find({
@@ -3244,9 +3244,9 @@ if (Meteor.isServer) {
     req,
     res,
   ) {
-    Authentication.checkUserId(req.userId);
     const paramBoardId = req.params.boardId;
     const paramListId = req.params.listId;
+    Authentication.checkBoardAccess(req.userId, paramBoardId);
     JsonRoutes.sendResult(res, {
       code: 200,
       data: Cards.find({
@@ -3281,10 +3281,10 @@ if (Meteor.isServer) {
     'GET',
     '/api/boards/:boardId/lists/:listId/cards/:cardId',
     function(req, res) {
-      Authentication.checkUserId(req.userId);
       const paramBoardId = req.params.boardId;
       const paramListId = req.params.listId;
       const paramCardId = req.params.cardId;
+      Authentication.checkBoardAccess(req.userId, paramBoardId);
       JsonRoutes.sendResult(res, {
         code: 200,
         data: Cards.findOne({
@@ -3327,8 +3327,17 @@ if (Meteor.isServer) {
     Authentication.checkAdminOrCondition(req.userId, addPermission);
     const paramListId = req.params.listId;
     const paramParentId = req.params.parentId;
-
     const nextCardNumber = board.getNextCardNumber();
+
+    let customFieldsArr = [];
+    _.forEach(
+      CustomFields.find({'boardIds': paramBoardId}).fetch(),
+      function (field) {
+        if (field.automaticallyOnCard || field.alwaysOnCard)
+          customFieldsArr.push({ _id: field._id, value: null });
+      },
+    );
+
     const currentCards = Cards.find(
       {
         listId: paramListId,
@@ -3352,6 +3361,7 @@ if (Meteor.isServer) {
         swimlaneId: req.body.swimlaneId,
         sort: currentCards.count(),
         cardNumber: nextCardNumber,
+        customFields: customFieldsArr,
         members,
         assignees,
       });
@@ -3497,12 +3507,12 @@ JsonRoutes.add('GET', '/api/boards/:boardId/cards_count', function(
     'PUT',
     '/api/boards/:boardId/lists/:listId/cards/:cardId',
     function(req, res) {
-      Authentication.checkUserId(req.userId);
       const paramBoardId = req.params.boardId;
       const paramCardId = req.params.cardId;
       const paramListId = req.params.listId;
+      Authentication.checkBoardAccess(req.userId, paramBoardId);
 
-      if (req.body.hasOwnProperty('title')) {
+      if (req.body.title) {
         const newTitle = req.body.title;
         Cards.direct.update(
           {
@@ -3518,7 +3528,7 @@ JsonRoutes.add('GET', '/api/boards/:boardId/cards_count', function(
           },
         );
       }
-      if (req.body.hasOwnProperty('sort')) {
+      if (req.body.sort) {
         const newSort = req.body.sort;
         Cards.direct.update(
           {
@@ -3534,7 +3544,7 @@ JsonRoutes.add('GET', '/api/boards/:boardId/cards_count', function(
           },
         );
       }
-      if (req.body.hasOwnProperty('parentId')) {
+      if (req.body.parentId) {
         const newParentId = req.body.parentId;
         Cards.direct.update(
           {
@@ -3550,7 +3560,7 @@ JsonRoutes.add('GET', '/api/boards/:boardId/cards_count', function(
           },
         );
       }
-      if (req.body.hasOwnProperty('description')) {
+      if (req.body.description) {
         const newDescription = req.body.description;
         Cards.direct.update(
           {
@@ -3566,7 +3576,7 @@ JsonRoutes.add('GET', '/api/boards/:boardId/cards_count', function(
           },
         );
       }
-      if (req.body.hasOwnProperty('color')) {
+      if (req.body.color) {
         const newColor = req.body.color;
         Cards.direct.update(
           {
@@ -3578,7 +3588,7 @@ JsonRoutes.add('GET', '/api/boards/:boardId/cards_count', function(
           { $set: { color: newColor } },
         );
       }
-      if (req.body.hasOwnProperty('vote')) {
+      if (req.body.vote) {
         const newVote = req.body.vote;
         newVote.positive = [];
         newVote.negative = [];
@@ -3596,7 +3606,7 @@ JsonRoutes.add('GET', '/api/boards/:boardId/cards_count', function(
           { $set: { vote: newVote } },
         );
       }
-      if (req.body.hasOwnProperty('poker')) {
+      if (req.body.poker) {
         const newPoker = req.body.poker;
         newPoker.one = [];
         newPoker.two = [];
@@ -3621,7 +3631,7 @@ JsonRoutes.add('GET', '/api/boards/:boardId/cards_count', function(
           { $set: { poker: newPoker } },
         );
       }
-      if (req.body.hasOwnProperty('labelIds')) {
+      if (req.body.labelIds) {
         let newlabelIds = req.body.labelIds;
         if (_.isString(newlabelIds)) {
           if (newlabelIds === '') {
@@ -3644,7 +3654,7 @@ JsonRoutes.add('GET', '/api/boards/:boardId/cards_count', function(
           },
         );
       }
-      if (req.body.hasOwnProperty('requestedBy')) {
+      if (req.body.requestedBy) {
         const newrequestedBy = req.body.requestedBy;
         Cards.direct.update(
           {
@@ -3656,7 +3666,7 @@ JsonRoutes.add('GET', '/api/boards/:boardId/cards_count', function(
           { $set: { requestedBy: newrequestedBy } },
         );
       }
-      if (req.body.hasOwnProperty('assignedBy')) {
+      if (req.body.assignedBy) {
         const newassignedBy = req.body.assignedBy;
         Cards.direct.update(
           {
@@ -3668,7 +3678,7 @@ JsonRoutes.add('GET', '/api/boards/:boardId/cards_count', function(
           { $set: { assignedBy: newassignedBy } },
         );
       }
-      if (req.body.hasOwnProperty('receivedAt')) {
+      if (req.body.receivedAt) {
         const newreceivedAt = req.body.receivedAt;
         Cards.direct.update(
           {
@@ -3680,7 +3690,7 @@ JsonRoutes.add('GET', '/api/boards/:boardId/cards_count', function(
           { $set: { receivedAt: newreceivedAt } },
         );
       }
-      if (req.body.hasOwnProperty('startAt')) {
+      if (req.body.startAt) {
         const newstartAt = req.body.startAt;
         Cards.direct.update(
           {
@@ -3692,7 +3702,7 @@ JsonRoutes.add('GET', '/api/boards/:boardId/cards_count', function(
           { $set: { startAt: newstartAt } },
         );
       }
-      if (req.body.hasOwnProperty('dueAt')) {
+      if (req.body.dueAt) {
         const newdueAt = req.body.dueAt;
         Cards.direct.update(
           {
@@ -3704,7 +3714,7 @@ JsonRoutes.add('GET', '/api/boards/:boardId/cards_count', function(
           { $set: { dueAt: newdueAt } },
         );
       }
-      if (req.body.hasOwnProperty('endAt')) {
+      if (req.body.endAt) {
         const newendAt = req.body.endAt;
         Cards.direct.update(
           {
@@ -3716,7 +3726,7 @@ JsonRoutes.add('GET', '/api/boards/:boardId/cards_count', function(
           { $set: { endAt: newendAt } },
         );
       }
-      if (req.body.hasOwnProperty('spentTime')) {
+      if (req.body.spentTime) {
         const newspentTime = req.body.spentTime;
         Cards.direct.update(
           {
@@ -3728,7 +3738,7 @@ JsonRoutes.add('GET', '/api/boards/:boardId/cards_count', function(
           { $set: { spentTime: newspentTime } },
         );
       }
-      if (req.body.hasOwnProperty('isOverTime')) {
+      if (req.body.isOverTime) {
         const newisOverTime = req.body.isOverTime;
         Cards.direct.update(
           {
@@ -3740,7 +3750,7 @@ JsonRoutes.add('GET', '/api/boards/:boardId/cards_count', function(
           { $set: { isOverTime: newisOverTime } },
         );
       }
-      if (req.body.hasOwnProperty('customFields')) {
+      if (req.body.customFields) {
         const newcustomFields = req.body.customFields;
         Cards.direct.update(
           {
@@ -3752,7 +3762,7 @@ JsonRoutes.add('GET', '/api/boards/:boardId/cards_count', function(
           { $set: { customFields: newcustomFields } },
         );
       }
-      if (req.body.hasOwnProperty('members')) {
+      if (req.body.members) {
         let newmembers = req.body.members;
         if (_.isString(newmembers)) {
           if (newmembers === '') {
@@ -3771,7 +3781,7 @@ JsonRoutes.add('GET', '/api/boards/:boardId/cards_count', function(
           { $set: { members: newmembers } },
         );
       }
-      if (req.body.hasOwnProperty('assignees')) {
+      if (req.body.assignees) {
         let newassignees = req.body.assignees;
         if (_.isString(newassignees)) {
           if (newassignees === '') {
@@ -3790,7 +3800,7 @@ JsonRoutes.add('GET', '/api/boards/:boardId/cards_count', function(
           { $set: { assignees: newassignees } },
         );
       }
-      if (req.body.hasOwnProperty('swimlaneId')) {
+      if (req.body.swimlaneId) {
         const newParamSwimlaneId = req.body.swimlaneId;
         Cards.direct.update(
           {
@@ -3802,7 +3812,7 @@ JsonRoutes.add('GET', '/api/boards/:boardId/cards_count', function(
           { $set: { swimlaneId: newParamSwimlaneId } },
         );
       }
-      if (req.body.hasOwnProperty('listId')) {
+      if (req.body.listId) {
         const newParamListId = req.body.listId;
         Cards.direct.update(
           {
@@ -3855,10 +3865,10 @@ JsonRoutes.add('GET', '/api/boards/:boardId/cards_count', function(
     'DELETE',
     '/api/boards/:boardId/lists/:listId/cards/:cardId',
     function(req, res) {
-      Authentication.checkUserId(req.userId);
       const paramBoardId = req.params.boardId;
       const paramListId = req.params.listId;
       const paramCardId = req.params.cardId;
+      Authentication.checkBoardAccess(req.userId, paramBoardId);
 
       const card = Cards.findOne({
         _id: paramCardId,
@@ -3895,10 +3905,10 @@ JsonRoutes.add('GET', '/api/boards/:boardId/cards_count', function(
     'GET',
     '/api/boards/:boardId/cardsByCustomField/:customFieldId/:customFieldValue',
     function(req, res) {
-      Authentication.checkUserId(req.userId);
       const paramBoardId = req.params.boardId;
       const paramCustomFieldId = req.params.customFieldId;
       const paramCustomFieldValue = req.params.customFieldValue;
+      Authentication.checkBoardAccess(req.userId, paramBoardId);
       JsonRoutes.sendResult(res, {
         code: 200,
         data: Cards.find({

models/checklistItems.js

@@ -265,9 +265,9 @@ if (Meteor.isServer) {
     'GET',
     '/api/boards/:boardId/cards/:cardId/checklists/:checklistId/items/:itemId',
     function(req, res) {
-      Authentication.checkUserId(req.userId);
       const paramBoardId = req.params.boardId;
       const paramItemId = req.params.itemId;
+      Authentication.checkBoardAccess(req.userId, paramBoardId);
       const checklistItem = ChecklistItems.findOne({ _id: paramItemId });
       if (checklistItem) {
         JsonRoutes.sendResult(res, {
@@ -299,9 +299,9 @@ if (Meteor.isServer) {
     'PUT',
     '/api/boards/:boardId/cards/:cardId/checklists/:checklistId/items/:itemId',
     function(req, res) {
-      Authentication.checkUserId(req.userId);
       const paramBoardId = req.params.boardId;
       const paramItemId = req.params.itemId;
+      Authentication.checkBoardAccess(req.userId, paramBoardId);
 
       function isTrue(data) {
         try {
@@ -350,9 +350,9 @@ if (Meteor.isServer) {
     'DELETE',
     '/api/boards/:boardId/cards/:cardId/checklists/:checklistId/items/:itemId',
     function(req, res) {
-      Authentication.checkUserId(req.userId);
       const paramBoardId = req.params.boardId;
       const paramItemId = req.params.itemId;
+      Authentication.checkBoardAccess(req.userId, paramBoardId);
       ChecklistItems.direct.remove({ _id: paramItemId });
       JsonRoutes.sendResult(res, {
         code: 200,

models/checklists.js

@@ -248,9 +248,9 @@ if (Meteor.isServer) {
     'GET',
     '/api/boards/:boardId/cards/:cardId/checklists',
     function(req, res) {
-      Authentication.checkUserId(req.userId);
       const paramBoardId = req.params.boardId;
       const paramCardId = req.params.cardId;
+      Authentication.checkBoardAccess(req.userId, paramBoardId);
       const checklists = Checklists.find({ cardId: paramCardId }).map(function(
         doc,
       ) {
@@ -292,10 +292,10 @@ if (Meteor.isServer) {
     'GET',
     '/api/boards/:boardId/cards/:cardId/checklists/:checklistId',
     function(req, res) {
-      Authentication.checkUserId(req.userId);
       const paramBoardId = req.params.boardId;
       const paramChecklistId = req.params.checklistId;
       const paramCardId = req.params.cardId;
+      Authentication.checkBoardAccess(req.userId, paramBoardId);
       const checklist = Checklists.findOne({
         _id: paramChecklistId,
         cardId: paramCardId,
@@ -336,10 +336,10 @@ if (Meteor.isServer) {
     'POST',
     '/api/boards/:boardId/cards/:cardId/checklists',
     function(req, res) {
-      Authentication.checkUserId(req.userId);
       // Check user is logged in
       //Authentication.checkLoggedIn(req.userId);
       const paramBoardId = req.params.boardId;
+      Authentication.checkBoardAccess(req.userId, paramBoardId);
       // Check user has permission to add checklist to the card
       const board = Boards.findOne({
         _id: paramBoardId,
@@ -398,9 +398,9 @@ if (Meteor.isServer) {
     'DELETE',
     '/api/boards/:boardId/cards/:cardId/checklists/:checklistId',
     function(req, res) {
-      Authentication.checkUserId(req.userId);
       const paramBoardId = req.params.boardId;
       const paramChecklistId = req.params.checklistId;
+      Authentication.checkBoardAccess(req.userId, paramBoardId);
       Checklists.remove({ _id: paramChecklistId });
       JsonRoutes.sendResult(res, {
         code: 200,

models/customFields.js

@@ -301,8 +301,8 @@ if (Meteor.isServer) {
     req,
     res,
   ) {
-    Authentication.checkUserId(req.userId);
     const paramBoardId = req.params.boardId;
+    Authentication.checkBoardAccess(req.userId, paramBoardId);
     JsonRoutes.sendResult(res, {
       code: 200,
       data: CustomFields.find({ boardIds: { $in: [paramBoardId] } }).map(
@@ -330,9 +330,9 @@ if (Meteor.isServer) {
     'GET',
     '/api/boards/:boardId/custom-fields/:customFieldId',
     function(req, res) {
-      Authentication.checkUserId(req.userId);
       const paramBoardId = req.params.boardId;
       const paramCustomFieldId = req.params.customFieldId;
+      Authentication.checkBoardAccess(req.userId, paramBoardId);
       JsonRoutes.sendResult(res, {
         code: 200,
         data: CustomFields.findOne({
@@ -361,8 +361,8 @@ if (Meteor.isServer) {
     req,
     res,
   ) {
-    Authentication.checkUserId(req.userId);
     const paramBoardId = req.params.boardId;
+    Authentication.checkBoardAccess(req.userId, paramBoardId);
     const board = Boards.findOne({ _id: paramBoardId });
     const id = CustomFields.direct.insert({
       name: req.body.name,
@@ -406,9 +406,9 @@ if (Meteor.isServer) {
     'PUT',
     '/api/boards/:boardId/custom-fields/:customFieldId',
     (req, res) => {
-      Authentication.checkUserId(req.userId);
       const paramBoardId = req.params.boardId;
       const paramFieldId = req.params.customFieldId;
+      Authentication.checkBoardAccess(req.userId, paramBoardId);
 
       if (req.body.hasOwnProperty('name')) {
         CustomFields.direct.update(
@@ -479,9 +479,9 @@ if (Meteor.isServer) {
     'POST',
     '/api/boards/:boardId/custom-fields/:customFieldId/dropdown-items',
     (req, res) => {
-      Authentication.checkUserId(req.userId);
       const paramBoardId = req.params.boardId;
       const paramCustomFieldId = req.params.customFieldId;
+      Authentication.checkBoardAccess(req.userId, paramBoardId);
       const paramItems = req.body.items;
 
       if (req.body.hasOwnProperty('items')) {
@@ -522,10 +522,10 @@ if (Meteor.isServer) {
     'PUT',
     '/api/boards/:boardId/custom-fields/:customFieldId/dropdown-items/:dropdownItemId',
     (req, res) => {
-      Authentication.checkUserId(req.userId);
       const paramBoardId = req.params.boardId;
       const paramDropdownItemId = req.params.dropdownItemId;
       const paramCustomFieldId = req.params.customFieldId;
+      Authentication.checkBoardAccess(req.userId, paramBoardId);
       const paramName = req.body.name;
 
       if (req.body.hasOwnProperty('name')) {
@@ -563,10 +563,10 @@ if (Meteor.isServer) {
     'DELETE',
     '/api/boards/:boardId/custom-fields/:customFieldId/dropdown-items/:dropdownItemId',
     (req, res) => {
-      Authentication.checkUserId(req.userId);
       const paramBoardId = req.params.boardId;
       paramCustomFieldId = req.params.customFieldId;
       paramDropdownItemId = req.params.dropdownItemId;
+      Authentication.checkBoardAccess(req.userId, paramBoardId);
 
       CustomFields.direct.update(
         { _id: paramCustomFieldId },
@@ -598,8 +598,8 @@ if (Meteor.isServer) {
     'DELETE',
     '/api/boards/:boardId/custom-fields/:customFieldId',
     function(req, res) {
-      Authentication.checkUserId(req.userId);
       const paramBoardId = req.params.boardId;
+      Authentication.checkBoardAccess(req.userId, paramBoardId);
       const id = req.params.customFieldId;
       CustomFields.remove({ _id: id, boardIds: { $in: [paramBoardId] } });
       JsonRoutes.sendResult(res, {

models/lib/fileStoreStrategy.js

@@ -4,7 +4,7 @@ import { createObjectId } from './grid/createObjectId';
 import { httpStreamOutput } from './httpStream.js';
 //import {} from './s3/Server-side-file-store.js';
 import { ObjectID } from 'bson';
-var Minio = require('minio');
+var Minio = require('@wekanteam/minio');
 
 export const STORAGE_NAME_FILESYSTEM = "fs";
 export const STORAGE_NAME_GRIDFS     = "gridfs";

models/lists.js

@@ -493,8 +493,8 @@ if (Meteor.isServer) {
    */
   JsonRoutes.add('GET', '/api/boards/:boardId/lists', function(req, res) {
     try {
-      Authentication.checkUserId(req.userId);
       const paramBoardId = req.params.boardId;
+      Authentication.checkBoardAccess(req.userId, paramBoardId);
 
       JsonRoutes.sendResult(res, {
         code: 200,
@@ -528,9 +528,9 @@ if (Meteor.isServer) {
     res,
   ) {
     try {
-      Authentication.checkUserId(req.userId);
       const paramBoardId = req.params.boardId;
       const paramListId = req.params.listId;
+      Authentication.checkBoardAccess(req.userId, paramBoardId);
       JsonRoutes.sendResult(res, {
         code: 200,
         data: Lists.findOne({
@@ -557,8 +557,8 @@ if (Meteor.isServer) {
    */
   JsonRoutes.add('POST', '/api/boards/:boardId/lists', function(req, res) {
     try {
-      Authentication.checkUserId(req.userId);
       const paramBoardId = req.params.boardId;
+      Authentication.checkBoardAccess(req.userId, paramBoardId);
       const board = Boards.findOne(paramBoardId);
       const id = Lists.insert({
         title: req.body.title,
@@ -595,9 +595,9 @@ if (Meteor.isServer) {
     res,
   ) {
     try {
-      Authentication.checkUserId(req.userId);
       const paramBoardId = req.params.boardId;
       const paramListId = req.params.listId;
+      Authentication.checkBoardAccess(req.userId, paramBoardId);
       Lists.remove({ _id: paramListId, boardId: paramBoardId });
       JsonRoutes.sendResult(res, {
         code: 200,

models/swimlanes.js

@@ -399,8 +399,8 @@ if (Meteor.isServer) {
    */
   JsonRoutes.add('GET', '/api/boards/:boardId/swimlanes', function(req, res) {
     try {
-      Authentication.checkUserId(req.userId);
       const paramBoardId = req.params.boardId;
+      Authentication.checkBoardAccess(req.userId, paramBoardId);
 
       JsonRoutes.sendResult(res, {
         code: 200,
@@ -435,9 +435,10 @@ if (Meteor.isServer) {
     res,
   ) {
     try {
-      Authentication.checkUserId(req.userId);
       const paramBoardId = req.params.boardId;
       const paramSwimlaneId = req.params.swimlaneId;
+      Authentication.checkBoardAccess(req.userId, paramBoardId);
+
       JsonRoutes.sendResult(res, {
         code: 200,
         data: Swimlanes.findOne({
@@ -465,8 +466,9 @@ if (Meteor.isServer) {
    */
   JsonRoutes.add('POST', '/api/boards/:boardId/swimlanes', function(req, res) {
     try {
-      Authentication.checkUserId(req.userId);
       const paramBoardId = req.params.boardId;
+      Authentication.checkBoardAccess(req.userId, paramBoardId);
+
       const board = Boards.findOne(paramBoardId);
       const id = Swimlanes.insert({
         title: req.body.title,
@@ -503,9 +505,9 @@ if (Meteor.isServer) {
     '/api/boards/:boardId/swimlanes/:swimlaneId',
     function(req, res) {
       try {
-        Authentication.checkUserId(req.userId);
         const paramBoardId = req.params.boardId;
         const paramSwimlaneId = req.params.swimlaneId;
+        Authentication.checkBoardAccess(req.userId, paramBoardId);
         Swimlanes.remove({ _id: paramSwimlaneId, boardId: paramBoardId });
         JsonRoutes.sendResult(res, {
           code: 200,

package.json

@@ -1,6 +1,6 @@
 {
   "name": "wekan",
-  "version": "v6.65.0",
+  "version": "v6.71.0",
   "description": "Open-Source kanban",
   "private": true,
   "repository": {
@@ -23,9 +23,9 @@
   "dependencies": {
     "@babel/core": "^7.15.5",
     "@babel/runtime": "^7.15.4",
-    "@excalidraw/excalidraw": "^0.13.0",
     "@mapbox/node-pre-gyp": "^1.0.8",
     "@wekanteam/markdown-it-mermaid": "^0.6.2",
+    "@wekanteam/minio": "^7.0.34",
     "ajv": "^6.12.6",
     "babel-runtime": "^6.26.0",
     "bcryptjs": "^2.4.3",
@@ -51,9 +51,7 @@
     "markdown-it-mathjax3": "^4.3.1",
     "meteor-accounts-t9n": "^2.6.0",
     "meteor-node-stubs": "^1.1.0",
-    "minio": "^7.0.32",
     "moment": "^2.29.4",
-    "mongodb": "^3.7.3",
     "nodemailer": "^6.6.3",
     "os": "^0.1.2",
     "page": "^1.11.6",

packages/wekan-oidc/oidc_server.js

@@ -105,7 +105,9 @@ OAuth.registerService('oidc', 2, null, function (query) {
     });
   }
 
-  Meteor.call('groupRoutineOnLogin',serviceData, serviceData.id);
+  // Fix OIDC login loop for integer user ID. Thanks to danielkaiser.
+  // https://github.com/wekan/wekan/issues/4795
+  Meteor.call('groupRoutineOnLogin',serviceData, ""+serviceData.id);
 
   return {
     serviceData: serviceData,

public/api/wekan.html

@@ -7,7 +7,7 @@
     <meta charset="utf-8">
     <meta content="IE=edge,chrome=1" http-equiv="X-UA-Compatible">
     <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">
-    <title>Wekan REST API v6.65</title>
+    <title>Wekan REST API v6.71</title>
 
     <style>
     </style>
@@ -1558,7 +1558,7 @@ var n=this.pipeline.run(e.tokenizer(t)),r=new e.Vector,i=[],o=this._fields.reduc
 	  	<ul class="toc-list-h1">
         
           <li>
-            <a href="#wekan-rest-api" class="toc-h1 toc-link" data-title="Wekan REST API v6.65">Wekan REST API v6.65</a>
+            <a href="#wekan-rest-api" class="toc-h1 toc-link" data-title="Wekan REST API v6.71">Wekan REST API v6.71</a>
             
           </li>
         
@@ -2161,7 +2161,7 @@ var n=this.pipeline.run(e.tokenizer(t)),r=new e.Vector,i=[],o=this._fields.reduc
     <div class="page-wrapper">
       <div class="dark-box"></div>
       <div class="content">
-        <h1 id="wekan-rest-api">Wekan REST API v6.65</h1>
+        <h1 id="wekan-rest-api">Wekan REST API v6.71</h1>
 <blockquote>
 <p>Scroll down for code samples, example requests and responses. Select a language for code samples from the tabs above or the mobile navigation menu.</p>
 </blockquote>

public/api/wekan.yml

@@ -1,7 +1,7 @@
 swagger: '2.0'
 info:
   title: Wekan REST API
-  version: v6.65
+  version: v6.71
   description: |
     The REST API allows you to control and extend Wekan with ease.
 

sandstorm-pkgdef.capnp

@@ -22,10 +22,10 @@ const pkgdef :Spk.PackageDefinition = (
     appTitle = (defaultText = "Wekan"),
     # The name of the app as it is displayed to the user.
 
-    appVersion = 665,
+    appVersion = 671,
     # Increment this for every release.
 
-    appMarketingVersion = (defaultText = "6.65.0~2022-12-27"),
+    appMarketingVersion = (defaultText = "6.71.0~2023-01-18"),
     # Human-readable presentation of the app version.
 
     minUpgradableAppVersion = 0,

snapcraft.yaml

@@ -1,5 +1,5 @@
 name: wekan
-version: '6.65'
+version: '6.71'
 base: core20
 summary: Open Source kanban
 description: |
@@ -160,9 +160,9 @@ parts:
             # Cleanup
             mkdir .build
             cd .build
-            wget https://github.com/wekan/wekan/releases/download/v6.65/wekan-6.65-amd64.zip
-            unzip wekan-6.65-amd64.zip
-            rm wekan-6.65-amd64.zip
+            wget https://github.com/wekan/wekan/releases/download/v6.71/wekan-6.71-amd64.zip
+            unzip wekan-6.71-amd64.zip
+            rm wekan-6.71-amd64.zip
             cd ..
             ##cd .build/bundle
             ##find . -type d -name '*-garbage*' | xargs rm -rf