·
38 commits
to main
since this release
- Several improvements for user account administration:
- User accounts can now be protected using Two-Factor-Authentication through TOTP. For individual users or all users of dedicated installations, this can be enforced.
- Admins can now delete user accounts.
- Admins can now prevent specific user accounts from changing their password, e.g. if it is supposed to be a shared user account where admins manage the password.
- Admins can now enforce users to change their password the first / next time they log in.
- Admins can now disable the functions for users without access to a consultation to request access.
- Users that didn't receive the initial account confirmation e-mail can now request another confirmation e-mail after an hour.
- When going to the Terms and Conditions and/or the Privacy page and back, you will end up in the same consultation than before now.
- Custom input fields in motion forms can now have explanations. They can also be set to be "encouraged but not required" - that is, the user can skip them but will get a warning if they do so.
- Content pages can now have attached files, just like the welcome text on the home page.
- Access to content pages can now be restricted to logged in users, admins or specific user groups.
- When merging amendments into a motion, the default setting now is to create a resolution, not a new motion.
- Security improvement: When logging in, and a new verion of PHP (like 8.4) suggests a stronger default password hashing, the stored hash is updated accordingly.
- A new translation is provided: Montenegrin (thanks to Danilo Boskovic)
- Administrators of an installation can modify the behavior of the CAPTCHAs on registration (see README).
- Some compatibility issues with PHP 8.4 were resolved.
- Bugfix: Tabular data was not encoded correctly in the PHP-based PDF export.
- Bugfix: The setting to open (PDF-)files in new browser tabs was not considered at several places.
- Bugfix: The PDF with all amendments embedded into the motion text could not be generated if a Weasyprint-based PDF layout was selected.
- Bugfix: If a motion with a proposed modified version was copied, merging that proposed version was not possible anymore.
- Bugfix: It was possible for users to submit amendments for withdrawn motions.
- Bugfix: When using "previous / next motion" links for pagination, motions and resolutions were not properly separated.
- Bugfix: Some Youtube-Videos could not be embedded.
- Bugfix: When copying a consultation with motion types whose permissions were restricted to a specific user group, these permissions where not properly copied.
- Bugfix: If an uploaded logo was deleted, the shown logo was broken instead of falling back to the default logo.