Release 3.6.4

Portal logins and tighter access checks

27 October 2026

  • Portal logins — a new accessCollection setting on pages and collections sends signed-out visitors to their own portal's login page, and back to what they asked for
  • Access checks — the ImageWorks and file-links dialogs check access to the object they open, and the site's login collections can no longer be deleted
  • Owned collections — a front-end PUT keeps the owner and protected fields it leaves out, and members can open files in collections they own
  • JumpStart and sync — exports include the access groups they use, and a collection keeps its ID and settings
  • Markdown — image captions, new-tab links, and |markdown(true) to let trusted HTML through
  • Command line — tcms collection:delete and tcms schema:delete, which check what still depends on them first
  • Badges — cms.badge.builtBy() and builtByText() credit the studio that built a site
  • Fixes — SVG uploads in Markdown and styled text stay SVG, Image Batcher finds every gallery, and admin scripts update after an upgrade
Full release notes → All releases →