Changes in the Month 2007-08
| Date | Version | Comment | Author | Action | Diff |
|---|---|---|---|---|---|
| 2007-08-31 | 2.0 | Clone returned date objects. | rfrovarp | update | Diff |
| 2007-08-31 | 2.0 | Two more cases of storing external references to mutable objects. | rfrovarp | update | Diff |
| 2007-08-31 | 2.0 | Forgot to cast the clone. | rfrovarp | update | Diff |
| 2007-08-31 | 2.0 | Date objects are mutable, so store copy. Fixed up variables so they are all in one place. | rfrovarp | update | Diff |
| 2007-08-31 | 2.0 | Protects paramList. Using final only protects the reference to the array, not the references contained within. Shallow clone is good enough to get around this. | rfrovarp | update | Diff |
| 2007-08-31 | 2.0 | Removed unused variable. | rfrovarp | update | Diff |
| 2007-08-31 | 2.0 | Performance increase. Use StringBuffer instead of straight string concatenation inside of loops. | rfrovarp | update | Diff |
| 2007-08-31 | 2.0 | Performance increase. Use StringBuffer instead of straight string concatenation inside of loops. | rfrovarp | update | Diff |
| 2007-08-31 | 2.0 | Fixes bug 43137. | rfrovarp | update | Diff |
| 2007-08-31 | 2.0 | Fixes bug 43198. | rfrovarp | update | Diff |
| 2007-08-31 | 2.0 | Will hopefully fix bug 42370 | rfrovarp | update | Diff |
| 2007-08-31 | 2.0 | Synchronize access to committed. | rfrovarp | update | Diff |
| 2007-08-31 | 2.0 | Fixed possible NPE. | rfrovarp | update | Diff |
| 2007-08-31 | 2.0 | Fixed possible synchronization issue with loading and lastModified | rfrovarp | update | Diff |
| 2007-08-31 | 2.0 | Added check to SourceNode if it was loaded when it is locked. This can help to uncover situations where the repository might become corrupted. See bug 43136, comment #18. | andreas | update | Diff |
| 2007-08-30 | 2.0 | Translate image/pjpeg to image/jpeg for purposes of reading image dimensions. Fixes bug 43245. | rfrovarp | update | Diff |
| 2007-08-30 | 2.0 | Avoid returning null-value DocumentLocator objects | andreas | update | Diff |
| 2007-08-29 | 2.0 | Store publication ID instead of publication object in DocumentIdentifier. See bug 43240. | andreas | update | Diff |
| 2007-08-29 | 2.0 | Put simple object instead of source wrapper in sourceUris map. This avoids a memory leak. See bug 43240. | andreas | update | Diff |
| 2007-08-29 | 2.0 | Disable browsing button in built in image and link windows since we now use plugins. | rfrovarp | update | Diff |
| 2007-08-29 | 2.0 | [minor change] refactoring - extract field | andreas | update | Diff |
| 2007-08-29 | 2.0 | Mark AxisUUIDGenerator as ThreadSafe | andreas | update | Diff |
| 2007-08-29 | 2.0 | Mark AxisUUIDGenerator as ThreadSafe | andreas | update | Diff |
| 2007-08-29 | 2.0 | Fixed lenya-document URL (removed trailing slash) | andreas | update | Diff |
| 2007-08-29 | 2.0 | Replaced lenyadoc URL with lenya-document URL | andreas | update | Diff |
| 2007-08-29 | 2.0 | Clear source node RCML entries when deleting. Otherwise, the last check-in entry will keep active. See bug 43163 for more information. | andreas | update | Diff |
| 2007-08-29 | 2.0 | Move check-in of nodes to finally block to avoid stale checked-in nodes (see bug 43163) | andreas | update | Diff |
| 2007-08-29 | 2.0 | Avoid exception for lenya-document URLs on non-document URLs (fixes bug 43227). | andreas | update | Diff |
| 2007-08-28 | Docs | Added hint about client-side caching to performance guide | andreas | update | Diff |
| 2007-08-28 | 2.0 | Use global parameter for pipeline expiration | andreas | update | Diff |
| 2007-08-28 | 2.0 | Performance optimization: re-arranged pipelines in global-sitemap.xmap | andreas | update | Diff |
| 2007-08-28 | 2.0 | Fixed revision writability check in DocumentImpl | andreas | update | Diff |
| 2007-08-28 | 2.0 | Fixed meta data generator call | andreas | update | Diff |
| 2007-08-27 | 2.0 | Replaced file handling in ResourceExistsAction with TraversableSource handling | andreas | update | Diff |
| 2007-08-27 | 2.0 | Avoid NPE in PageEnvelopeModule for non-publication URLs | andreas | update | Diff |
| 2007-08-24 | 2.0 | Removed fallback:// for publication-does-not-exist.jx (makes no sense) | andreas | update | Diff |
| 2007-08-24 | 2.0 | [minor change] fixed sitemap parameter, improved comments | andreas | update | Diff |
| 2007-08-24 | 2.0 | Added tee transformer and simple load test to development module | andreas | add | Diff |
| 2007-08-24 | 2.0 | Updating default pub sitemap to new LenyaMetaDataGenerator syntax | andreas | update | Diff |
| 2007-08-24 | 2.0 | Updating collection sitemap to new LenyaMetaDataGenerator syntax | andreas | update | Diff |
| 2007-08-24 | 2.0 | [minor change] removed outdated fixme comment | andreas | update | Diff |
| 2007-08-24 | 2.0 | [minor change] removed dead code | andreas | update | Diff |
| 2007-08-24 | 2.0 | Added revision handling to SVG image resizing. | andreas | update | Diff |
| 2007-08-24 | 2.0 | Add revision number to Document interface, added revision handling to LenyaMetaDataTransformer and DocumentInfoModule. This fixes bug 42932. | andreas | update | Diff |
| 2007-08-23 | Site | Publish from forrestbot | thorsten | update | Diff |
| 2007-08-23 | Docs | Updating changes pages | thorsten | update | Diff |
| 2007-08-23 | Docs | added hint about disabling XML prettyprinting | nettings | update | Diff |
| 2007-08-23 | 2.0 | added comment about disabling prettyprinting in production | nettings | update | Diff |
| 2007-08-23 | 2.0 | Improved Ajax menubar generation (load single menus on demand) | andreas | add | Diff |
| 2007-08-23 | Docs | Fixing unique id. Thanks forrestbot. | thorsten | update | Diff |
| 2007-08-23 | Docs | Adding documentation about the properties module | thorsten | update | Diff |
| 2007-08-23 | Docs | using unique ids | thorsten | update | Diff |
| 2007-08-23 | Docs | Adding some documentation about the properties module | thorsten | update | Diff |
| 2007-08-23 | 2.0 | Adding context prefix to MENU_URL. Otherwise it will not work if you use lenya with tomcat in a non ROOT context | jann | update | Diff |
| 2007-08-23 | 2.0 | Bug 42558 lenya.properties.xml per publication. Patch submitted by Markus Angst. Thank you very much Markus. Adding example to the default pub. | thorsten | add | Diff |
| 2007-08-23 | 2.0 | Bug 42558 lenya.properties.xml per publication. Patch submitted by Markus Angst. Thank you very much Markus. Additional added logging in an empty catch. | thorsten | update | Diff |
| 2007-08-22 | 2.0 | Don't alert error messages when loading the menu | andreas | update | Diff |
| 2007-08-22 | 2.0 | Fixed usecase state machine transition (fixes bug 43185). | andreas | update | Diff |
| 2007-08-22 | 2.0 | Always strip spaces from node name in create usecase. | andreas | update | Diff |
| 2007-08-22 | 2.0 | Make user names case insensitive. Fixes bug 41848. | rfrovarp | update | Diff |
| 2007-08-22 | 2.0 | Added menu module, e.g. for asynchronous menu loading | andreas | add | Diff |
| 2007-08-22 | 2.0 | Prepare core for Ajax menu | andreas | update | Diff |
| 2007-08-22 | 2.0 | [minor change] removed unused namespace declarations | andreas | update | Diff |
| 2007-08-22 | 2.0 | Fixed execution order in usecases flowscript | andreas | update | Diff |
| 2007-08-22 | 2.0 | Use transparent background for sitetree icons | andreas | update | Diff |
| 2007-08-21 | 2.0 | Set expiration to 2 hours for language-selector SVG images to reduce server load | andreas | update | Diff |
| 2007-08-21 | 2.0 | Use default extension 'html' to avoid extension lookup for each document (expensive) | andreas | update | Diff |
| 2007-08-21 | 2.0 | Introduce Persistable interface. This allows to save complex objects (meta data, site tree) only once before the session is committed. Optimistic usecases lock their nodes before the usecase is executed (see bug 43136). | andreas | update | Diff |
| 2007-08-21 | 2.0 | UuidToUrlTransformer: lookup document extension only if necessary (expensive) | andreas | update | Diff |
| 2007-08-21 | 2.0 | [minor change] removed unused field | andreas | update | Diff |
| 2007-08-21 | 2.0 | [minor change] added some javadocs | andreas | update | Diff |
| 2007-08-21 | 1.2 | link and typo fixed | michi | update | Diff |
| 2007-08-21 | 2.0 | Added DocumentFactory.existsPublication(id) for simplicity, fixed publication handling in i18n (fixes bug 43171) | andreas | update | Diff |
| 2007-08-21 | 2.0 | Use modifiable session in ReservedCheckinAction (fixes bug 43157) | andreas | update | Diff |
| 2007-08-20 | 2.0 | Fixed class cast problems with delegating sitetree | andreas | update | Diff |
| 2007-08-20 | 2.0 | [minor change] removed invalid catch block | andreas | update | Diff |
| 2007-08-20 | 2.0 | Use SharedItemStore specifically for the site tree. This avoids the problem that the SharedItemStore is filled with Document and other objects. The DelegatingSiteTree can be shared. | andreas | add | Diff |
| 2007-08-20 | 2.0 | Updated InsertAsset to new OutgoingLinkRewriter constructor | andreas | update | Diff |
| 2007-08-20 | 2.0 | Prevent NPE. Not sure how it happened, but I did get a null identity. | rfrovarp | update | Diff |
| 2007-08-19 | 2.0 | Don't create session UUID for immutable sessions | andreas | update | Diff |
| 2007-08-19 | 2.0 | Made SslRedirectAction work with non-access-controller URLs | andreas | update | Diff |
| 2007-08-19 | 2.0 | Moving SSL handling from OutgoingLinkRewriter to SslRedirectAction (much better performance) | andreas | update | Diff |
| 2007-08-19 | 2.0 | PublicationTemplateManager: use file path instead of context:// path (less expensive) | andreas | update | Diff |
| 2007-08-19 | 2.0 | Performance optimization in Query class | andreas | update | Diff |
| 2007-08-19 | 2.0 | Removed execution time check from FallbackSourceFactory (GregorianCalendar is expensive) | andreas | update | Diff |
| 2007-08-19 | 2.0 | Store site structure in area object for better performance | andreas | update | Diff |
| 2007-08-19 | 2.0 | Module manager: compute file URI at startup and not on demand for better performance | andreas | update | Diff |
| 2007-08-19 | 2.0 | Made publication manager more efficient and correct (avoid invalid publication objects) | andreas | update | Diff |
| 2007-08-19 | 2.0 | Don't restrict kupu check-out to session | andreas | update | Diff |
| 2007-08-19 | 2.0 | Added workaround for usecases which can't use the same session for check-in and check-out (BXE, FCKeditor): Allow to check-out a node without the restriction to the same session. See bug 43157. | andreas | update | Diff |
| 2007-08-19 | 2.0 | Consider preconditions when advancing usecase state in webdav.js (avoid state machine exceptions) | andreas | update | Diff |
| 2007-08-19 | 2.0 | Avoid exception in ForceCheckIn.prepareView() | andreas | update | Diff |
| 2007-08-17 | 2.0 | fixed typo in comment | rfrovarp | update | Diff |
| 2007-08-15 | 2.0 | Check meta data key only if no values exist (performance) | andreas | update | Diff |
| 2007-08-15 | 2.0 | [minor change] javadoc fix | andreas | update | Diff |
| 2007-08-15 | 2.0 | Replaced String.split() by StringTokenizer (performance) | andreas | update | Diff |
| 2007-08-15 | 2.0 | Made SourceCache ThreadSafe | andreas | update | Diff |
| 2007-08-15 | 2.0 | Remove SiteUtil.isDocument() | andreas | update | Diff |
| 2007-08-15 | 2.0 | Refactoring, better code readability in document policy manager wrapper | andreas | update | Diff |
| 2007-08-15 | 2.0 | SiteTree: store node factory as field to improve performance | andreas | update | Diff |
| 2007-08-15 | 2.0 | Refactoring (performance improvement) | andreas | update | Diff |
| 2007-08-15 | 2.0 | Use StringTokenizer instead of String.split() for performance reasons | andreas | update | Diff |
| 2007-08-14 | 2.0 | Reverting r565787. Turns out it must run in the current thread for now. | rfrovarp | update | Diff |
| 2007-08-14 | 2.0 | Removed unused variables and redundant null checks and imports as necessary. | rfrovarp | update | Diff |
| 2007-08-14 | 2.0 | Removed new String() so that strings can be interned, removed toString() on strings, converted new Boolean to Boolean.valueOf() to use interned value. | rfrovarp | update | Diff |
| 2007-08-14 | 2.0 | getAttributeNS() will never return null. It will return an empty string if the lookup fails, so I believe this is correct. The non-short circuiting or is confusing and I don't see the reason for it here. Change them back if I'm wrong. | rfrovarp | update | Diff |
| 2007-08-14 | 2.0 | Prevent NPE in final handleError() method. | rfrovarp | update | Diff |
| 2007-08-14 | 2.0 | Fixed equal objects must have equal hash codes problem. | rfrovarp | update | Diff |
| 2007-08-14 | 2.0 | Make sure only one thread is getting to the DateFormat object at a time. | rfrovarp | update | Diff |
| 2007-08-14 | 2.0 | Now releases lock while waiting for indexer to be released. | rfrovarp | update | Diff |
| 2007-08-14 | 2.0 | Should be start() instead of run(). Unless the code is supposed to run in the current thread, but at that point creating the thread is pointless. | rfrovarp | update | Diff |
| 2007-08-14 | 2.0 | Added RepositoryItem.getSession(), removed NodeFactory.setSession() | andreas | update | Diff |
| 2007-08-14 | 2.0 | LanguageExistsAction: code simplification, javadoc cleanup | andreas | update | Diff |
| 2007-08-14 | 2.0 | Don't store DocumentFactory instance in PublicationFactory, this seemed to cause trouble (see bug 43110) | andreas | update | Diff |
| 2007-08-14 | 2.0 | Don't store DocumentFactory instance in PublicationFactory, this seemed to cause trouble (see bug 43110) | andreas | update | Diff |
| 2007-08-14 | 2.0 | Re-added newVersion parameter to RCML | andreas | update | Diff |
| 2007-08-13 | 2.0 | DateFormat is NOT thread safe. To be so it must be externally synchronized. I don't see any benefit, so I've just removed the static. | rfrovarp | update | Diff |
| 2007-08-13 | 2.0 | Allow those with edit permission to cut and copy. They already can create, delete, nudge, and paste. | rfrovarp | update | Diff |
| 2007-08-13 | 2.0 | Now looks like all the other create usecases: no menu, wrapped in the standard usecase template. | rfrovarp | update | Diff |
| 2007-08-13 | 2.0 | Cleans up the look of the insert link display. Wraps the form inside of the standard box that is used everywhere else. Also goes back to the side by side layout. Can easily be changed to top to bottom if desired. Most of the changes are formatting as a result of the added divs. Thanks to Jonathan Albers for the help. | rfrovarp | update | Diff |
| 2007-08-13 | 2.0 | Fixed up string equality issues. | rfrovarp | update | Diff |
| 2007-08-13 | 2.0 | Cleaned up debugging message. Include name of IP range in error message instead of null. | rfrovarp | update | Diff |
| 2007-08-13 | 2.0 | Make public static field immutable | rfrovarp | update | Diff |
| 2007-08-13 | 2.0 | Fix potential NPE | rfrovarp | update | Diff |
| 2007-08-13 | 2.0 | Removed unused variable. | rfrovarp | update | Diff |
| 2007-08-13 | 2.0 | Removed unused variable. | rfrovarp | update | Diff |
| 2007-08-13 | 2.0 | Provide language parameter in sitetree links to avoid the failing of the UuidToUrlTransformer | andreas | update | Diff |
| 2007-08-13 | 2.0 | UuidToUrlTransformer: handle non-document start URLs | andreas | update | Diff |
| 2007-08-13 | 2.0 | Add method to resolve links without providing a start document | andreas | update | Diff |
| 2007-08-13 | Docs | replaced publication.xconf by publication.xml | nettings | update | Diff |
| 2007-08-13 | 2.0 | removed unused workflow validation xsd. ported xsd to rng, it is now applied during build. this change requires the xsi:schemaLocation attribute to be removed from custom workflow declarations. fixes bug http://issues.apache.org/bugzilla/show_bug.cgi?id=42351 | nettings | update | Diff |
| 2007-08-13 | 2.0 | whitenoise, rearranged class properties. FIXME: what is the "synchronized" attribute in workflow transitions? looks like dead code, because it's not in the default pub, and the validation schema does not even mention it... | nettings | update | Diff |
| 2007-08-12 | 2.0 | removed unused stylesheet from core. it apparently converted the output of the directory generator to a webDAV propfind reply. the webdav module implements the same functionality with its webdav.propfind usecase. | nettings | remove | Diff |
| 2007-08-12 | Docs | update resource type tutorial to reflect configuration change | nettings | update | Diff |
| 2007-08-12 | 2.0 | whitenoise, reorganized source code. no functional change. | nettings | update | Diff |
| 2007-08-12 | 2.0 | resource type configuration cleanup part 2: <schema src="foo://bar.rng" language="http://relaxng.org/ns/structure/0.9"/> becomes <schema uri="foo://bar.rng" namespace="http://relaxng.org/ns/structure/0.9"/> | nettings | update | Diff |
| 2007-08-12 | 2.0 | resource type configuration cleanup part 1: <sample-name>foo://bar</sample-name> becomes <sample uri="foo://bar"/> | nettings | update | Diff |
| 2007-08-12 | 2.0 | Improved load test | andreas | update | Diff |
| 2007-08-12 | 2.0 | Use more readable XML format for RCML files | andreas | update | Diff |
| 2007-08-12 | 2.0 | Moved transaction locking from UnitOfWorkImpl to SessionImpl | andreas | update | Diff |
| 2007-08-12 | 2.0 | [minor change] removed unused import | andreas | update | Diff |
| 2007-08-12 | 2.0 | [minor change] removed unused import | andreas | update | Diff |
| 2007-08-12 | 2.0 | [refactoring] better code re-use in DocumentFactoryImpl | andreas | update | Diff |
| 2007-08-12 | 2.0 | [minor change] improved error message | andreas | update | Diff |
| 2007-08-12 | 2.0 | Added transition check for AbstractUsecase methods | andreas | update | Diff |
| 2007-08-12 | 2.0 | Remove unnecessary session selection code from sitetree implementation | andreas | update | Diff |
| 2007-08-12 | 2.0 | Advance state machine in AbstractUsecase after corresponding method succeeded | andreas | update | Diff |
| 2007-08-12 | 2.0 | Load site structure for area every time it is requested to avoid stale site objects | andreas | update | Diff |
| 2007-08-11 | 2.0 | added note to readme about removal of policy authorizer, since it requires changes to custom publications. | nettings | update | Diff |
| 2007-08-10 | 2.0 | Removed unnecessary modification check from site tree (handled by transaction) | andreas | update | Diff |
| 2007-08-10 | 2.0 | Use revision history for last modification date in source nodes, more accurate than file system | andreas | update | Diff |
| 2007-08-10 | 2.0 | Removed unnecessary lock check | andreas | update | Diff |
| 2007-08-10 | 2.0 | Introduced global transaction lock | andreas | update | Diff |
| 2007-08-10 | 2.0 | Avoid NPE in force check-in usecase | andreas | update | Diff |
| 2007-08-10 | 2.0 | Fixed javadoc error, synchronize lock method in SourceNode | andreas | update | Diff |
| 2007-08-10 | 2.0 | Log error message when indexing failed. | andreas | update | Diff |
| 2007-08-10 | Docs | Updated docs: path to document2txt.xsl, formatting and some additions to release guidelines, hint about notification in lucene module | andreas | update | Diff |
| 2007-08-10 | 2.0 | Extend the UsecaseAuthorizerImpl to check the page access. This is done by a ac.visit pseudo-usecase. For more info, see bug 42952. Thanks a lot to Joern Nettingsmeier for the patch (I applied it because it depended on some changes to the role resolving). | andreas | update | Diff |
| 2007-08-10 | 2.0 | Removed PolicyAuthorizer, moved role resolving to DefaultAccessController | andreas | update | Diff |
| 2007-08-10 | 2.0 | Added method AbstractUsecase.prepareView() and use it in ForceCheckIn usecase. | andreas | update | Diff |
| 2007-08-10 | 2.0 | Fixed revision control issue: Don't consider only backup entries when checking for the last modified version. | andreas | update | Diff |
| 2007-08-10 | 2.0 | Added usecase to force the check-in of documents. | andreas | update | Diff |
| 2007-08-10 | 2.0 | Removed method Node.getRcml() for safety reasons. This lead to the removal of the revision controller class and some refactorings. | andreas | update | Diff |
| 2007-08-10 | 1.2 | Adding upload feature to neutron usecase. Thanks to Thomas Comiotto | jann | add | Diff |
| 2007-08-09 | 2.0 | Updating load test after changes to usecase flowscript | andreas | update | Diff |
| 2007-08-09 | 2.0 | Added SourceNodeRcmlFactory which creates per-URI singleton RCML objects (forgot in last commit) | andreas | add | Diff |
| 2007-08-09 | 2.0 | Refactored revision control: clean up XML reading+writing. RCML objects are now singletons per source URI. This allows to synchronize access per RCML object, avoiding synchronization issues which occured when running load tests. UnitOfWork.commit() and rollback() are now synchronized via the class object to avoid inter-usecase commit synchronization issues (also occured during load tests). | andreas | update | Diff |
| 2007-08-09 | 2.0 | Create continuation for usecase if preconditions failed, but don't advance/execute. | andreas | update | Diff |
| 2007-08-09 | 2.0 | Send notification message if a document could not be indexed (temporary workaround for bug 42510 until we have an indexing queue) | andreas | update | Diff |
| 2007-08-09 | 2.0 | Moved UUIDGenerator service from impl to api | andreas | add | Diff |
| 2007-08-09 | 2.0 | Don't create continuation if usecase preconditions failed. This avoids the 'no transition for event checkExecutionConditions in state start' errors. | andreas | update | Diff |
| 2007-08-08 | 2.0 | Fixes bug 43064. Thanks to Markus Angst for the bug report and patch. | rfrovarp | update | Diff |
| 2007-08-08 | 2.0 | Removed debugging code. | rfrovarp | update | Diff |
| 2007-08-08 | 2.0 | Fixes issue with the script eating backspaces in the editing area. Thanks to Jörn for reporting. | rfrovarp | update | Diff |
| 2007-08-08 | 2.0 | UsecaseAuthorizerImpl: Removed unused code, updated javadocs | andreas | update | Diff |
| 2007-08-07 | 2.0 | grouped properties by scope at the top. no functional changes. | nettings | update | Diff |
| 2007-08-06 | 2.0 | added some comments. there is a (to me) totally mysterious conditional regarding the source of the usecase policy configuration. if you know your way around this piece of code, could you please chuck out my FIXME: comments and add some clarification? thanks. | nettings | update | Diff |
| 2007-08-06 | 2.0 | removed unused SourceResolver. no functional change. | nettings | update | Diff |
| 2007-08-06 | 2.0 | fix internal-only setting. it was wrongly attached to a matcher instead of the pipeline... | nettings | update | Diff |
| 2007-08-06 | 2.0 | added deprecation note (file remains for now as it's being used by kupu and bxe) | nettings | update | Diff |
| 2007-08-06 | 2.0 | removed unused search usecase view from usecase module | nettings | remove | Diff |
| 2007-08-06 | 2.0 | no functional changes. removed erroneous comments from xpatch files. whitenoise. | nettings | update | Diff |
| 2007-08-06 | Docs | moved finished draft from wiki to releases.xml. some loose ties, see NOTE:s and FIXME:s. | nettings | update | Diff |
| 2007-08-05 | Sandbox | an attack on bug http://issues.apache.org/bugzilla/show_bug.cgi?id=42952 * move UsecaseAuthorizer, impl and helper classes from usecase to ac module to avoid circular dependencies * create new usecase ac.visit * change PolicyAuthorizer to check ac.visit permission for each requested page * add usecase policy to default: ac.visit will be granted to editors, admins and reviewers (basically restoring the old implicit behaviour, but now in a clean and obvious way without opening security holes) WARNING: this is a proof-of-concept code that touches security-critical infrastructure. it will compile and has been tested briefly. there has been NO SECURITY AUDIT of any kind. the whole shebang may be utter bogus - it's here as a discussion item. please review and comment. | nettings | add | Diff |
| 2007-08-05 | 2.0 | svn merge -r 562961:562875 https://svn.apache.org/repos/asf/lenya/trunk undo accidental commit - apologies for the noise. | nettings | update | Diff |
| 2007-08-05 | 2.0 | move UsecaseAuthorizer, impl and helper classes from usecase to ac module to avoid circular dependencies create new usecase ac.visit change PolicyAuthorizer to check ac.visit permission for each requested page add usecase policy to default: ac.visit will be granted to editors, admins and reviewers (basically restoring the old implicit behaviour, but now in a clean and obvious way without opening security holes) WARNING: this is a proof-of-concept code that touches security-critical infrastructure. it will compile and has been tested briefly. there has been NO SECURITY AUDIT of any kind. the whole shebang may be utter bogus - it's here as a discussion item. | nettings | update | Diff |
| 2007-08-05 | Sandbox | experimental new policy authorizer maps url authorization to usecase authorizer via a new pseudo-usecase called ac.visit. addresses bug http://issues.apache.org/bugzilla/show_bug.cgi?id=42952 the current hack-and-slash approach is to delegate a normal uri request http://foo/bar/baz to http://foo/bar/baz?lenya.usecase=ac.visit and thus using all our usecase policy GUI features for page access as well. in the long run, PolicyAuthorizer should probably be removed completely... please review and comment. the branch was necessary, because java dependencies made it necessary to juggle some files between ac and acusecases, which made the changeset too messy for a patch. | nettings | add | Diff |
| 2007-08-05 | 2.0 | javadoc additions. | nettings | update | Diff |
| 2007-08-05 | 2.0 | removed private helper functions, moved code into public interface method. | nettings | update | Diff |
| 2007-08-05 | 2.0 | rearranged methods and properties. no functional change. | nettings | update | Diff |
| 2007-08-05 | 2.0 | made getConfiguration() private. that's all for now.. :) | nettings | update | Diff |
| 2007-08-05 | 2.0 | reordered properties and methods. no functional change. | nettings | update | Diff |
| 2007-08-05 | 2.0 | missed one public helper method in the last commit... | nettings | update | Diff |
| 2007-08-05 | 2.0 | moved login/logout usecase views from ac to acusecases module, where the java part is already. changed xconfs accordingly | nettings | remove | Diff |
| 2007-08-05 | 2.0 | removed unused parameter "requestURI" from UsecaseAuthorizer interface fixed UsecaseAuthorizerImpl and external occurrences accordingly cleaned up UsecaseAuthorizerImpl: * made helper functions private, since they are not part of any interface, and an "Impl" should not add to the externally visible API. * removed duplicate javadocs, added @see to interface docs | nettings | update | Diff |
| 2007-08-04 | 2.0 | tinymce now also uses richard's backspace catcher, for consistency with the other editors. | nettings | update | Diff |
| 2007-08-04 | Docs | Fixed missing </p> tag so the ForrestBot build won't fail again. | bobharner | update | Diff |
| 2007-08-04 | Docs | removed obsolete reference to wf.event parameter, fixed typos, added some links. | nettings | update | Diff |
| 2007-08-04 | Docs | added note about chaperon | nettings | update | Diff |
| 2007-08-04 | Docs | corrected docs: with "lenya-document:" links, even the UUID is optional. | nettings | update | Diff |
| 2007-08-03 | 2.0 | Prevent backspace key as back in the two forms editors. | rfrovarp | update | Diff |
| 2007-08-03 | 2.0 | Use LinkedHashMap to preserve resource type sample order. This fixes bug 42942. | andreas | update | Diff |
| 2007-08-03 | 2.0 | Form editors: add check if source document is null (more robust when running web tests) | andreas | update | Diff |
| 2007-08-03 | 2.0 | Simplified and cleaned up revision control code. The SourceNodeRCML doesn't write to the real source anymore. This is part of the fix for bug 42937. | andreas | update | Diff |
| 2007-08-03 | 2.0 | Revisions usecase: Removed NPE workaround, use parameter for workflow event | andreas | update | Diff |
| 2007-08-03 | 2.0 | javadocs additions | nettings | update | Diff |
| 2007-08-03 | 2.0 | [minor change] removed unused import, fixed special character issue | andreas | update | Diff |
| 2007-08-02 | 2.0 | tried to clarify javadocs, please review! | nettings | update | Diff |
| 2007-08-01 | 2.0 | Correctly retrieves list of preceding siblings now. Can now move node up to top position in a substree. | rfrovarp | update | Diff |