Improve apps management with new app trust levels

[jancborchardt]

Changes required in ownCloud core:

• Add setting to »Enable experimental apps« – (add settings widget in the bottom left)
• Add level tags to all apps: Official, Approved, Experimental
• Short explanation popover for the tags
• Put apps inside the categories, sorted by level
• Headers inbetween the levels when scrolling, big warning header for experimental apps
• Sort apps (especially experimental ones)
• Enable button for experimental says »Enable experimental app« (could be yellow)

For reference, the levels:

1. Official (previously »Recommended«)
2. Approved (previously untagged)
3. Experimental (previously not shown in the apps mgmt at all)

cc @LukasReschke @karlitschek

[LukasReschke]

I will do the required server changes in core. - Self assigning.

[jospoortvliet]

Remember - over time (doesn't have to be done in the first incarnation) we should provide these to users to give them an indication of trustworthyness of apps:

Trust indications

These can be made visible to the user so he/she can build a relationship with the developer(s) and build trust in the application. Goes for all apps but especially relevant for the approved and unapproved apps (lowest two levels).

• ownCloud app store level
• Author(s) information:
  • name, picture, github account link, social media links, blog
  • other apps by author
• how many ppl contributed
• how long app has been maintained
• release cadence (activity)
• bugs solved/open/...
• comments from other users
• number of downloads
• ratings (minimum nr of ratings, ordered by rating, ...)
• flagged

[jancborchardt]

Comments, download numbers and rating are probably the best metric. These are also common from other app stores.

[LukasReschke]

@karlitschek I took a look at the OCS API, I think the easiest would be if we ownCloud server sends the filter=approved and if no filter is sent it just returns any application. A request to /v1/content/data?version=8x0x0x1&categories=922&sortmode=new&page=0&pagesize=100 would then for example return also all not approved apps, while with a &filter=approved it only returns officials and approved ones.

Regarding the trust level, I see that there is a approved field in the returned XML, however, it seems to be 0 in all cases? – Can we reuse this one to indicate the app level or create a new field having an integer? – I'd expect something like that:

• 0 => Totally untrusted code
• 100 => Approved code
• 200 => Official app

Please let me know once we have something sorted out so that I can get some real life code. Would also be awesome to have an category where already a not approved app is in and also an approved / official one so that we can ensure proper testing.

[LukasReschke]

I uploaded an early WIP code to allow @jancborchardt to help styling this thing. It basically does nothing at the moment but has the styles applied and I refactored the whole OCS Client code and added unit tests for it…

See #15314

[DeepDiver1975]

But this is out of scope for 8.1 - we freeze tomorrow -> 8.2

Please focus on 8.1 related issues - THX

[LukasReschke]

But this is out of scope for 8.1 - we freeze tomorrow -> 8.2
Please focus on 8.1 related issues - THX

Well - as per @karlitschek we want this for 8.1 ;-)