Structure CMS™ Version 7.2.1 Structure CMS™ RSS Release Feed

Secure by Default — PAR-Based File Access and Unified OCI Authentication

New Features

PAR-Based Form Downloads: Form file attachments are now served via Pre-Authenticated Requests (PARs) with a 1-hour expiry, generated on demand per download. CSV exports generate 30-day PAR URLs for file upload fields. Attachment references are stored as permanent IDs and storage keys rather than CDN URLs.

Aight Collections in Backup & Restore: Added 13 Aight tenant database models to the backup and restore system. Backup operations now support collection exclusion at backup time, with a Super Admin gate for the exclusion UI.
OCI Form Upload Bucket Configuration: Form uploads now use a dedicated OCI bucket separate from the media asset bucket, configurable via environment variable or credentials with fallback to legacy bucket settings.

Unified OCI Instance Principal Authentication: All OCI operations now use instance principal authentication for staging and production environments, with automatic fallback to config file credentials for development. Namespace is auto-resolved from the instance principal rather than hardcoded credentials.
Backup & Restore OCI Improvements: Added a dedicated backup bucket resolver for staging and production environments and fixed a nil crash in the backups controller during download operations.