Skip to content

Release 3.7.0
Compare
Choose a tag to compare
@zlamalp zlamalp released this 22 Jul 07:11
v3.7.0
This tag was signed with the committer’s verified signature.
zlamalp Pavel Zlámal
GPG key ID: FE5B5180982CF76A
Learn about vigilant mode.
afde3da
This commit was signed with the committer’s verified signature.
zlamalp Pavel Zlámal
GPG key ID: FE5B5180982CF76A
Learn about vigilant mode.

Changelog (since 3.6.0)

  • This version contains DB changes and they must be apllied
    when Perun is shut down!
  • Because of changes in AuditMessage object this version requires
    equal version of all consumers - e.g LDAPc to be deployed at the
    same time.

CORE

  • Reverted changes to BBMRI lifescience hostel modules.
  • Ignore AlreadyMemberException in BBMRI modules.
  • Split relation to perun attribute in registration form items into
    source and destination attribute. Form item value can be
    then pre-filled from different attribute than stored or doesn't
    have to be stored or pre-filled at all, based on your settings.
  • Switching member to EXPIRED state will now trigger attribute
    validation (when former state is INVALID or DISABLED).
  • Added "lastAccess" property to UserExtSource and display it
    in administrative GUI.
  • Added suspended and suspendedTo params to Member and RichMember
    objects. They will hold suspension state of Member in the future,
    while SUSPENDED member status will be removed from the life-cycle.
    It is not used anyhwere yet, except the member object.
    Regarding deserialization, "suspendedTo" is required (null or date in
    string format), while "suspended" is a boolean flag derived from the
    current date and its relation to "suspendedTo" property.
  • Added methods to set or removed new suspended state for member.
  • Enabled locking of groups members during add/remove group member operations.
    It will prevent any future inconsistencies in group memberships caused by
    complex group relation structures and synchronizations and manuall changes.
  • Rework of internal AuditMessage / AuditEvent handling. We now exclusivelly
    use JSON format of messages. It still contains original string data, but
    wrapping object and API has changed and required proper version of all
    consumers (eg. LDAPc).
  • Removed support for sending notifications to Jabber service.
  • Support group synchronization in exact times (specified as list of HH:MM rounded
    to 5 minutes).
  • Store also start time of last successful group synchronization.
  • Fixed unnecessary session initiation for BA/Kerberos authz.
  • Fixed format of audit message for planned service propagation.
  • Fixed setting authz to members group for vo managers.
  • Fixed bad sql when checking security manager role for user.
  • Fixed user resolving for user:virt:loa on user deletion.
  • Fixed attribute module for systemUnixGroupName which prevented
    value deletion even if group was not system unix group.
  • Added requestor to message body, when errors are reported
    to the mail address instead of mail.

LDAPC

  • Big improvements of LDAP initialization performance in new LDAPc.
  • Fixed removal of non-existent entries from LDAP during sync.
  • Allow oracle driver inclusion during build of new LDAPc.

GUI

  • Delete VO members using single callback for list of members.
  • Fixed message in GUI when user changes mail.
  • Show new settings related to the group synchronization
    in pop-up window for group sync state.

API

  • Big rework of AuditMessagesManager API.
  • AuditMessage now contains AuditEvent instead of simple string message.
    It is still mainly used to read audit events/messages data.
  • Added getAttributes() method for resource, group and member which will
    retrieve attributes for all related entities, including facility and resource.
  • Added new methods to AuthzResolver getUser/GroupRoles().

CLI

  • Added CLI for listing facilities by owner.
  • Support SPONSOR role in setRole unsetRole tools.
  • Added tools listOfExpiredGroupMembers and
    listOfNotExpiringGroupMembers which can list members and
    show their group expiration.

OTHER

  • Removed unused default oidc settings for devel.
  • Removed unused auditer-exporter module.
  • Removed TextFile and SvgImage deserializers. Removed GraphViz library
    responsible for drawing attribute dependencies images. It will be returned
    as a string and UI app will draw the graphs.
  • Removed all references for unused auditer_subscribers table.
  • Updated Spring to 5.1.8.
  • Updated RPC API docs for moveGroup() and some other methods.
  • Removed all custom JSON, CSV parsing, we exclusivelly use jackson library (v2).
Assets 8
Loading