<commit_before>+++
categories = ["Releases"]
tags = ["Releases"]
title = "Beta Release v0.30.0"
date = 2020-09-20T10:00:00Z
author = "<NAME>"
image = "/images/blog-cover-images/library-priscilla-du-preez.jpg"
description = "The v0.30 release introduces the audit log, adds chapters to the API, improves code editing and more"
slug = "beta-release-v0-30-0"
draft = false
+++

Although intended to be a quick release cycle, v0.30 is now here 5 months after the last major release. Sketchy personal health, a poorly pet & a busy day-job workload, combined with constant working-from-home, have reduced the amount of time I could afford to spare working on the project but with normality somewhat returning I present BookStack v0.30 which includes an assortment of enhancements. 


* [Update instructions](https://www.bookstackapp.com/docs/admin/updates)
* [GitHub release page](https://github.com/BookStackApp/BookStack/releases/tag/v0.30.0)


Before we get into the features, just a couple of important advisories:


**Security Notice** - Possible Privilege Escalation

Thanks to [@Defelo](https://github.com/BookStackApp/BookStack/issues/2105)
it was advised that current privilege escalation situations are not made clear when applying role permissions.
Any user with a "Manage app settings", "Manage users" or "Manage roles & role permissions" system permission 
assigned to one of their roles could technically alter their own permissions to gain wider access.
A clear advisory of these cases has been added in the UI in v0.30
but admins are advised to review which users have these permissions with the above in mind.
<commit_msg>Updated blog post timings<commit_after>+++
categories = ["Releases"]
tags = ["Releases"]
title = "Beta Release v0.30.0"
date = 2020-09-20T09:30:00Z
author = "<NAME>"
image = "/images/blog-cover-images/library-priscilla-du-preez.jpg"
description = "The v0.30 release introduces the audit log, adds chapters to the API, improves code editing and more"
slug = "beta-release-v0-30-0"
draft = false
+++

Although intended to be a quick release cycle, v0.30 is now here 5 months after the last major release. Sketchy personal health, a poorly pet & a busy day-job workload, combined with constant working-from-home, have reduced the amount of time I could afford to spare working on the project but with normality somewhat returning I present BookStack v0.30 which includes an assortment of enhancements. 


* [Update instructions](https://www.bookstackapp.com/docs/admin/updates)
* [GitHub release page](https://github.com/BookStackApp/BookStack/releases/tag/v0.30.0)


Before we get into the features, just a couple of important advisories:


**Security Notice** - Possible Privilege Escalation

Thanks to [@Defelo](https://github.com/BookStackApp/BookStack/issues/2105)
it was advised that current privilege escalation situations are not made clear when applying role permissions.
Any user with a "Manage app settings", "Manage users" or "Manage roles & role permissions" system permission 
assigned to one of their roles could technically alter their own permissions to gain wider access.
A clear advisory of these cases has been added in the UI in v0.30
but admins are advised to review which users have these permissions with the above in mind.

{'fraction_non_alphanumeric': 0.0811470408785845, 'fraction_numerical': 0.026235509456985967, 'mean_word_length': 4.772887323943662, 'pattern_counts': {'":': 0, '<': 5, '<?xml version=': 0, '>': 5, 'https://': 6, 'lorem ipsum': 0, 'www.': 2, 'xml': 0}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 0, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
{'dir': 'git-commits-cleaned', 'id': '804104', 'n_tokens_mistral': 955, 'n_tokens_neox': 884, 'n_words': 409}