mirror of
https://github.com/mattermost/mattermost.git
synced 2026-09-21 05:54:10 +08:00
c8b1cc0046
* Add Action Search render-decision API for ABAC file actions * Add render-permission store, client method, and useRenderPermission hook * Wire upload/download render decisions into UI with invalidation and e2e coverage * Work around false-literal bug in ABAC file-access e2e specs * add related schemas and fix format * remove redundant comment in upload file enforcement test * Fix stale post-list ETags and missing live updates after ABAC policy or attribute changes * Enhance channel access control event handling by marking non-current channels stale for lazy reconciliation * Refactor ETag handling and improve permission policy checks in channel and post APIs * Remove unnecessary blank line in access control policy update function * Align action search API with AuthZEN spec: add results list, discovery mode, reserve subject/page fields * Nest ActionSearchResult to AuthZEN canonical shape and apply code review fixes * Refactor action search request type formatting and update test loop for clarity * Implement ABAC permission checks for channel access in searchAccessControlDecisionActions * Scope ABAC render ETag to target channel, cache policy and CPA epochs in localcachelayer, and fail-closed on unknown resource types * add stub for ETag cache invalidation in access control policy tests * Jitter render reconcile on system-scoped permission policy updates to avoid a thundering herd * Make the ABAC ETag epochs deletion-sensitive by folding a row count into each * Address web app review: reuse RESET_POSTS_IN_CHANNEL, batch decision fetches, and simplify the upload affordance * Split the render-decision reducer per key and scope invalidation stamps per resource * MM-68283 - Use aria-disabled on the policy-restricted upload button so its tooltip still opens * MM-68283 - Cover live post redaction without reload and use native Playwright assertions * MM-68283 - Trim comments to the load-bearing reasons and drop dead test fixture fields * MM-68283 - Refetch the channel in view after a policy change instead of relying on a remount * MM-68283 - Apply a refetched post whose file metadata was redacted or restored * MM-68283 - Require metadata on both sides before treating a post's redaction state as changed * Keep the ABAC render caches and materialized attribute view in step with every attribute write * Restructure the ABAC file-permission e2e specs and cover upload enforcement server-side --------- Co-authored-by: Mattermost Build <build@mattermost.com> Co-authored-by: Harshil Sharma <harshilsharma63@gmail.com>
Mattermost is an open core, self-hosted collaboration platform that offers chat, workflow automation, voice calling, screen sharing, and AI integration. This repo is the primary source for core development on the Mattermost platform; it's written in Go and React, runs as a single Linux binary, and relies on PostgreSQL. A new compiled version is released under an MIT license every month on the 16th.
Deploy Mattermost on-premises, or try it for free in the cloud.
Learn more about the following use cases with Mattermost:
Other useful resources:
- Download and Install Mattermost - Install, setup, and configure your own Mattermost instance.
- Product documentation - Learn how to run a Mattermost instance and take advantage of all the features.
- Developer documentation - Contribute code to Mattermost or build an integration via APIs, Webhooks, slash commands, Apps, and plugins.
Table of contents
- Install Mattermost
- Native mobile and desktop apps
- Get security bulletins
- Get involved
- Learn more
- License
- Get the latest news
- Contributing
Install Mattermost
- Download and Install Mattermost Self-Hosted - Deploy a Mattermost Self-hosted instance in minutes via Docker, Ubuntu, or tar.
- Get started in the cloud to try Mattermost today.
- Developer machine setup - Follow this guide if you want to write code for Mattermost.
Other install guides:
- Deploy Mattermost on Docker
- Mattermost Omnibus
- Install Mattermost from Tar
- Ubuntu 20.04 LTS
- Kubernetes
- Helm
- More server install guides
Native mobile and desktop apps
In addition to the web interface, you can also download Mattermost clients for Android, iOS, Windows PC, macOS, and Linux.
Get security bulletins
Receive notifications of critical security updates. The sophistication of online attackers is perpetually increasing. If you're deploying Mattermost it's highly recommended you subscribe to the Mattermost Security Bulletin mailing list for updates on critical security releases.
Get involved
- Contribute to Mattermost
- Find "Help Wanted" projects
- Join Developer Discussion on a Mattermost server for contributors
- Get Help With Mattermost
Learn more
- API options - webhooks, slash commands, drivers, and web service
- See who's using Mattermost
- Browse over 700 Mattermost integrations
License
See the LICENSE file for license rights and limitations.
Get the latest news
- X - Follow Mattermost on X, formerly Twitter.
- Blog - Get the latest updates from the Mattermost blog.
- Facebook - Follow Mattermost on Facebook.
- LinkedIn - Follow Mattermost on LinkedIn.
- Email - Subscribe to our newsletter (1 or 2 per month).
- Mattermost - Join the ~contributors channel on the Mattermost Community Server.
- IRC - Join the #matterbridge channel on Freenode (thanks to matterircd).
- YouTube - Subscribe to Mattermost.
Contributing
Please see CONTRIBUTING.md. Join the Mattermost Contributors server to join community discussions about contributions, development, and more.