BookStack v24.05.4 has been released.
This is a security release to address issues found in LDAP group syncing, where in certain scenarios a user could be matched to extra roles incorrectly,
-and an issue with content visibility in "book-show" API responses would not have permissions applied properly.
+and an issue with content visibility in "book-show" API responses which would not have permissions applied properly.
Upgrade is strongly advised for instances where LDAP authentication is used with group syncing, or where
the REST API is used to fetch contents of books ("books-read" endpoint).
### LDAP Group Sync
-BookStack has the ability to sync LDAP user groups with BookStack roles. By default this will match LDAP group names (CN values) with the BookStack role display names with casing ignored.
-This can be overridden by via the 'External Authentication IDs' field which can be seen when editing a role while LDAP authentication is enabled. This field can be populated with common names (CNs) of accounts *or* groups. If filled, CNs in this field will be used and the role name will be ignored. You can match on multiple CNs by separating them with a comma. Commas can be escaped with a backslash (`\,`) if you need to map to a CN using a literal comma character.
+BookStack has the ability to sync LDAP user groups with BookStack roles. By default this will match LDAP group names (typically CN values) with the BookStack role display names with casing ignored.
+This can be overridden by via the 'External Authentication IDs' field which can be seen when editing a role while LDAP authentication is enabled. This field can be populated with common names (typically CNs) of accounts *or* groups. If filled, values in this field will be used and the role name will be ignored. You can match on multiple group names by separating them with a comma. Commas can be escaped with a backslash (`\,`) if you need to map to a group name using a literal comma character.
When matching LDAP groups with role names or 'External Authentication IDs' values, BookStack will standardise the names of ldap groups to be lower-cased and spaces will be replaced with hyphens. For example, to match a LDAP group named "United Kingdom" an 'External Authentication IDs' value of "united-kingdom" could be used.