Apostrophe 3.44.0 Additional permissions, new styles for checkboxes, and fixes

[BoDonkey]

Well Met, Apostrophiles!

Per-locale permission with a new `combo` style checkboxes for selecting from a long list of choices.

---

This release cycle saw a lot of work on the @apostrophecms-pro/advanced-permission module. This module already allowed you fine control of permission at both the user and individual document level, but now you can also assign permissions based on locale.

As usual, work on this enterprise module has spun off benefits for all Apostrophe users! The checkboxes schema field has two new options allowing users to easily select from long lists of choices. See our field schema reference documentation for more info.

In this release, the REST API was also updated to easily turn on GET access for guests. In the past, this required more extensive configuration of the publicApiProjection. Get all the pieces!

Moving forward, our devs are working on building templating for empty pages, so that users can have a library of pages ready to add to their projects. Additionally, work is being put into the import and export of pages and Palette settings. But you already knew this from visiting our Productboard, right?!?

Check out the complete changelogs below for details. Until next time, Keep Calm and Code On!

Apostrophe 3.44.0

Adds

• checkboxes fields now support a new style: 'combobox' option for a better multiple-select experience when there
  are many choices.
• If the new guestApiAccess option is set to true for a piece type or for @apostrophecms/page,
  Apostrophe will allow all logged-in users to access the GET-method REST APIs of that
  module, not just users with editing privileges, even if publicApiProjection is not set.
  This is useful when the goal is to allow REST API access to "guest" users who have
  project-specific reasons to fetch access content via REST APIs.
• test-lib/utils.js has new createUser and loginAs methods for the convenience of
  those writing mocha tests of Apostrophe modules.

Enterprise modules

Contact us or visit our new pricing page to learn more.

@apostrophecms-pro/palette 3.1.4

This module provides an in-context interface for changing the values of developer-set CSS properties. The values are stored in an Apostrophe piece singleton (like @apostrophecms/global) and applied to the site whenever the stylesheet link is included in a template. Adjusting values via the palette interface renders changes to the site instantly. Contact us or visit our new pricing page to learn more.

Fixes

• Fix error in browser console when the current user doesn't have the required permission to view the palette document

@apostrophecms-pro/advanced-permission 1.5.0

This module provides more granular control over content permission. It allows the creation of custom groups with proscribed abilities and the ability to assign users to as few or as many groups as desired. Users and groups can also be assigned per-document and per-locale permissions allowing for fine control of who can edit and publish any document. Contact us or visit our new pricing page to learn more.

Adds

• Per-locale permissions are now implemented. Note that after upgrading to this release, editors of sites with more than one locale will be unable to edit until locale permissions are granted to them, either directly or via one of their groups. Admins can always edit everything and are not impacted by this.
• UX improvement: change "Add Item" to "Add User" and "Add Group."
• The getReq method now has conveniences to cover locale permissions testing.

@apostrophecms-pro/cypress-tools 1.0.0-beta.6

Automated functional browser tests are an important part of quality assurance for enterprise websites and web applications. Cypress is an industry-standard, open-source library for carrying out automated functional browser tests. This module provides a collection of conveniences for testing ApostropheCMS sites and applications within Cypress. Contact us or visit our new pricing page to learn more.

Fixes

• Working around use of wrong npm tag, no code changes.