v0.2.28

Doca 0.2.28 — User groups and shared permission management

简体中文

Adds group creation, avatars, roles, named/link invitations with consent, leaving, ownership handover and dissolution. Group grants join personal permissions in Invite collaborators and member management for documents, libraries, knowledge books and shared folders. Shared folders use a folder-sharing icon, with groups immediately below.

Shared membership adds a related-user directory relationship. Administrators configure group search with per-user overrides: joined groups by default, explicit permission intersections, or all active groups. Foreign rosters remain private. Revocation/dissolution immediately removes the corresponding source and reauthorizes connected sessions and knowledge results.

Personal and group grants use the same compact two-line controls, including role changes, descendant scope and confirmed removal. Personal source details reuse those controls; independently granted group access remains effective. Group previews show three avatars, with profile cards and a More popover. Effective group roles appear in bold blue.

Document-tree drag operations now show a loading status through saving and tree refresh, block further dragging while pending and clear the status after success or failure.

The approved schema addition retains the compatibility generation and historical data: seven empty group/ACL tables plus an explicitly initialized joined-groups policy. Startup/hourly cleanup removes associations after 24 hours while retaining content, tombstones and audit. Back up databases, attachments, configuration and master keys, and update every server and Web together. Downgrade needs separate preservation and recovery review; do not drop the added tables or overwrite later writes to bypass older-version review. See behavior, upgrade rules and verification.

GitHub Release assets and native Linux amd64/arm64 Docker Hub images are the publication targets. Publication does not update a running site. Fresh installations can use doca-compose-v0.2.28.yaml; existing sites must preserve their deployment identity and volumes. The 0.2.27 renderer/configuration requirements still apply when upgrading from earlier versions.

Web assets are attached as doca-web-assets-v0.2.28.tar.gz.
Extract it and publish the assets directory unchanged.
Set DOCA_ASSET_BASE to the HTTPS prefix that contains that assets directory, with no trailing slash.

Fresh installations can use the attached doca-compose-v0.2.28.yaml: edit the origin and generated master key, then run docker compose up -d. Administrator initialization is built into the image. A SHA-256 checksum is attached. Existing installations must preserve their project, volumes and key.

Image-only deployment files and initialization instructions are attached as doca-deploy-v0.2.28.tar.gz with a SHA-256 checksum.
Transfer this bundle to servers without GitHub access; no source checkout is needed.
The container image is separate. Pull the matching smartdoca/doca image or transfer it with docker save/load.