135255 arebegea: MNT-17427 : api/invite/cancel deletes records in the database with a GET: CSRF/XSS attack
- delete the script/org/alfresco/repository/invite/invite.get
- use the alternatives: script/org/alfresco/repository/site/invitation/invitation.post and script/org/alfresco/repository/site/invitation/invitation.delete
- updating the tests
- updating the controller for the invitation.delete to a java controller
- fix test fallout (SiteServiceTest testInviteDisabledUser - expected error status code)
- improve security by allowing only invitationIDs that belong the the site passed as parameter to be canceled
- be consistent and return 404 when an invitationID can not be found
git-svn-id: https://svn.alfresco.com/repos/alfresco-enterprise/alfresco/HEAD/root@137384 c4b6b30b-aa2e-2d43-bbcb-ca4b014f7261
134416 amukha: Merged 5.2.N (5.2.1) to 5.2.0 (5.2.0)
134396 amukha: Merged DEV to 5.2.N (5.2.1)
133903 sglover: MNT-17247 "Disabled user can log into Alfresco Share using external authentication" take user disabled status in to account for external authentication subsystem + tests
133907 sglover: MNT-17247 "Disabled user can log into Alfresco Share using external authentication" don't propagate user disabled exception
133930 sglover: MNT-17247 "Disabled user can log into Alfresco Share using external authentication" move test class and add to a test suite
134295 amukha: MNT-17247: Disabled user can log into Alfresco Share using external authentication
- Added a test to simulate creation of missing person during external auth log in.
134315 amukha: MNT-17247: Disabled user can log into Alfresco Share using external authentication
- Added a fallback to supprt the logging in by non provisioned users.
134354 amukha: MNT-17247: Disabled user can log into Alfresco Share using external authentication
- Added a test with deauthorized user. Refactored existing test to start context once.
134359 jvonka: REPO-1227: External authentication - prevent disabled user from authenticating
- add log warning (with masked username, similar to brute force attack) if authentication bypassed when setting user details
134372 amukha: MNT-17247: Disabled user can log into Alfresco Share using external authentication
- Updated core and data model (contain new logging)
134390 amukha: MNT-17247: Disabled user can log into Alfresco Share using external authentication
- isEnabled flag for users is returned correctly
- Added tests
git-svn-id: https://svn.alfresco.com/repos/alfresco-enterprise/alfresco/HEAD/root@134976 c4b6b30b-aa2e-2d43-bbcb-ca4b014f7261
133996 rneamtu: ACE-5416: Merged 5.2.N (5.2.1) to 5.2.0 (5.2.0)
133567 rneamtu: ACE-5639: Comment Activitiy Feed Entries made outside of site show @@NULL@@
- If siteInfo does not exists do not post comment related activity
git-svn-id: https://svn.alfresco.com/repos/alfresco-enterprise/alfresco/HEAD/root@134203 c4b6b30b-aa2e-2d43-bbcb-ca4b014f7261
133416 rneamtu: Merged 5.2.N (5.2.1) to 5.2.0 (5.2.0)
133350 rneamtu: ACE-5647: [Win7,chrome] Configure dashboard - Configuration not saved after removing dashlets to trashcan
-Run the deleteDocument action as pathRunAsUser (system for non-admin users) same as is done for updateDocument and createDocument.
git-svn-id: https://svn.alfresco.com/repos/alfresco-enterprise/alfresco/HEAD/root@133563 c4b6b30b-aa2e-2d43-bbcb-ca4b014f7261
132544 rneamtu: SHA-1867 : Unable to create links in Shared Files / My Files root node from the Search Results page
- Added method WebScriptUtil.resolveNodeReference() which will resolve nodeRef
git-svn-id: https://svn.alfresco.com/repos/alfresco-enterprise/alfresco/HEAD/root@132675 c4b6b30b-aa2e-2d43-bbcb-ca4b014f7261
132357 adavis: Merged 5.2.N-SERVLET-3.0 (5.2.1) to 5.2.N (5.2.1)
131490: REPO-1238 / REPO-1413: Use data-model with the OpenCMIS upgrade.,
131493: REPO-1238 / REPO-1413: OpenCMIS upgrade to 1.0.0.
- Compilation errors fixed
- Removed old JAX-WS listener from web.xml + sun-jaxws.xml - obsolete after the upgrade (OpenCMIS has replaced JAX-WS with Apache CXF)
- Set chemistry-opencmis-test-browser version to 0.14.0, since it was removed in 1.0.0 (TODO: see if something from 1.0.0 can be used instead)
- Changed dependency on XmlSchema 1.4.7 to xmlschema-core 2.2.1 (required by Apache CXF) - implications of this change still to be addressed.,
131569: REPO-1238 / REPO-1413: OpenCMIS upgrade to 1.0.0.
- Possible fix for the browser binding - since OpenCMIS 0.13.0, repository URLs always require a cmisselector parameter (see CMIS-893).,
131671: REPO-843 Upgrade our Servlet API usage to 3.0.1 (from 2.4 / 2.5)
- Modifications to weblogic-application.xml to allow Weblogic 12.2.1.1 to start with the changes
made so far for the 1.0 Open CMIS upgrade (REPO-1238). This follows the Servlet 3.0 upgrade
which resulted in WebLogic not starting. The Open CMIS upgrade has helped with fixing the WebLogic
start up issue, however...
- Some of the changes are TEMPORARY to pick up classes and resources from either the JRE or WebLogic
rather than the alfresco.war. These should be coming from the alfresco.war, but we will still need to
upgrade the jars that we package. See comments being added to REPO-1413 related to the CMIS upgrade.
- It is likely that there are other entries in this file that are not needed.,
131758: REPO-1238 / REPO-1413: OpenCMIS upgrade to 1.0.0 - Fix for CMISTCKVersioning tests.
- The VersioningSmokeTest from the OpenCMIS TCK has been enhanced with the case of checking-in documents with new properties (not just new content). This touches the part of code in CMISConnector that parses the secondary types (aspects), removes the old ones and adds the new. The problem was that even the working copy aspect was removed for checked out documents. This is illegal and an error was thrown.
- Applies to CMIS 1.1.,
131815: REPO-1238 / REPO-1413: OpenCMIS upgrade to 1.0.0 - Fix for CMISTCKVersioning tests.
- The VersioningSmokeTest from the OpenCMIS TCK has been enhanced with the case of checking-in documents with new properties (not just new content). So the tests check-in a document with the same name as the original name causing the rename of the working copy to fail. I added an extra check on the name format for working copies.
- Applies to CMIS 1.0.,
131843: REPO-1238 / REPO-1413: OpenCMIS upgrade to 1.0.0 - Fix for CMISTCKCRUD tests.
- The SetAndDeleteContentTest from the OpenCMIS TCK has been enhanced with tests that append content. The case where the content was 0 bytes failed, because of an "unnecessary" (hopefully) check on the content data length.,
131859: REPO-1413 : Upgrade to OpenCMIS 1.0 - update dependencies and fix compilation and/or build test failures
- fixed failing testVersioningPropertiesHaveDefaultValue ,
131868: REPO-1413 : Upgrade to OpenCMIS 1.0 - update dependencies and fix compilation and/or build test failures
- fixed new failing tests,
131876: REPO-1238 / REPO-1413: OpenCMIS upgrade to 1.0.0
- Fix for versioning related tests.,
131907: REPO-1238 / REPO-1413: OpenCMIS upgrade to 1.0.0
- Removed unused dependency on chemistry-opencmis-test-browser,
132064: REPO-1238 / REPO-1413: OpenCMIS upgrade to 1.0.0
- Removed unnecessary excludes, updated data-model, added junit dependency for legacy-lucene which was relying on a now unused dependency to get the junit.,
132069: REPO-1238 / REPO-1413: OpenCMIS upgrade to 1.0.0
- Upgrade jaxb libraries to 2.2.11, alfresco-core to 6.7.,
132110: REPO-843 Upgrade our Servlet API usage to 3.0.1 (from 2.4 / 2.5)
- Further modifications to weblogic-application.xml
- Checked file only contains references to files that we actually package in alfresco.war.
- Add additional entries identified by WebLogic's CAT
- Exclude myfaces-api-1.1.10.jar classes (used by the Explorer UI, removed in 5.0 but still used by Cloud).
- Exclude classes that cause start up exception. We must use the RT or Weblogic versions.,
132161: REPO-1238 / REPO-1413: OpenCMIS upgrade to 1.0.0
- code review changes
132356: Change to using data-model 6.6
git-svn-id: https://svn.alfresco.com/repos/alfresco-enterprise/alfresco/HEAD/root@132365 c4b6b30b-aa2e-2d43-bbcb-ca4b014f7261
131857 rneamtu: SHA-1629 : Creating a link to file in a different location
- Added support for multiple files in doclink.post webscript
- Added unit test for api/node/doclink api
- Added marker aspect app:linked for nodes that have links attached
git-svn-id: https://svn.alfresco.com/repos/alfresco-enterprise/alfresco/HEAD/root@132306 c4b6b30b-aa2e-2d43-bbcb-ca4b014f7261
131775 rneamtu: Reverse merged 5.2.N (5.2.1)
131742 rneamtu: SHA-1629 : Creating a link to file in a different location
- Added support for multiple files in doclink.post webscript
git-svn-id: https://svn.alfresco.com/repos/alfresco-enterprise/alfresco/HEAD/root@132299 c4b6b30b-aa2e-2d43-bbcb-ca4b014f7261
131769 ahind: Fix for SEARCH-222 SOLR 6 - Improved indexing for categories
- return ancestor based path for better support to internationalise categories etc (by UUID matching the public AIP)
git-svn-id: https://svn.alfresco.com/repos/alfresco-enterprise/alfresco/HEAD/root@132297 c4b6b30b-aa2e-2d43-bbcb-ca4b014f7261
130285 gjames: Merged searchapi (5.2.1) to 5.2.N (5.2.1)
130022 gjames: Merged 5.2.N-AHIND (5.2.1) to searchapi (5.2.1)
129926 ahind: SEARCH-31 SOLR 6 - Shard based on date - SOLR implementation
- Support returning a date, datetime or string property to use for sharding
git-svn-id: https://svn.alfresco.com/repos/alfresco-enterprise/alfresco/HEAD/root@130357 c4b6b30b-aa2e-2d43-bbcb-ca4b014f7261
129764 jvonka: REPO-1144: LockService - add isLocked & isLockedAndReadOnly common helper methods to public API
- remove duplicated code from various locations to use the new methods
- add sanity checks to Lock*Test
git-svn-id: https://svn.alfresco.com/repos/alfresco-enterprise/alfresco/HEAD/root@130225 c4b6b30b-aa2e-2d43-bbcb-ca4b014f7261
129501 jcule: REPO-1023: Service Pack: MNT-16454 Can't use WebDAV to delete files which have the versionable aspect
- check that node is is actually locked before unlocking to avoid access denied
git-svn-id: https://svn.alfresco.com/repos/alfresco-enterprise/alfresco/HEAD/root@130207 c4b6b30b-aa2e-2d43-bbcb-ca4b014f7261
129874 kroast: Merged 5.1.N (5.1.2) to 5.2.N (5.2.1)
129680 kroast: Merged 5.0.N (5.0.5) to 5.1.N (5.1.2) (PARTIAL MERGE)
129458 cpopa: Merged 5.0.2 (5.0.2.24) to 5.0.N (5.0.4)
129454 cpopa: MNT-15376 : NTLM authentication sometimes fails with IE10+ (chrome OK) - concurrent socket threads
- Synchronize the processing of Type1 and Type3 messages on the same session.
- Synchronize safely by using WebUtils.getSessionMutex(session) than the session object directly
- Reuse the previously cached Type2Message in the Share SSOAuthenticationFilter
git-svn-id: https://svn.alfresco.com/repos/alfresco-enterprise/alfresco/HEAD/root@129879 c4b6b30b-aa2e-2d43-bbcb-ca4b014f7261
129220 kroast: Merged 5.1.N (5.1.2) to 5.2.N (5.2.1)
129145 kroast: Merged 5.0.N (5.0.4) to 5.1.N (5.1.2)
128659 cpopa: Merged 5.0.2 (5.0.2.22) to 5.0.N (5.0.4)
128657 cpopa: MNT-15376 : NTLM authentication sometimes fails with IE10+ (chrome OK) - concurrent socket threads
- Reuse the previously created NTLM details cache when a type1 request is being reissued on the same session.
git-svn-id: https://svn.alfresco.com/repos/alfresco-enterprise/alfresco/HEAD/root@129377 c4b6b30b-aa2e-2d43-bbcb-ca4b014f7261
128660 jkaabimofrad: Merged 5.1.N (5.1.2) to 5.2.N (5.2.1)
128649 jkaabimofrad: Merged JAMAL/MNT-16371 (5.1.2) to 5.1.N (5.1.2)
128626 jkaabimofrad: MNT-16371: Turned off Inherit Permissions and explicitly added the Site Manager role for the Site to the surf-config folder when it is first created. Also, revoked ownership privileges for surf-config contents.
git-svn-id: https://svn.alfresco.com/repos/alfresco-enterprise/alfresco/HEAD/root@129299 c4b6b30b-aa2e-2d43-bbcb-ca4b014f7261
128569 adavis: MNT-16381 Transformers must validate the content stream mimetype
- Ensure error when indexer is the caller includes the file name rather than null.
NodeContentGet now calls transform method with TransformationOptions parameter and the original
transformer method was deprecated as it should be been when this extra parameter was added.
- Set the strictMimeTypeCheck and retryTransformOnDifferentMimeType properties on dynamically created
pipeline and fail over transformers from global properties as is don for static transformers.
git-svn-id: https://svn.alfresco.com/repos/alfresco-enterprise/alfresco/HEAD/root@129293 c4b6b30b-aa2e-2d43-bbcb-ca4b014f7261
128215 adavis: Merged 5.1.N (5.1.2) to 5.2.N (5.2.1)
128190 amorarasu: Merged 5.1.1 (5.1.1) to 5.1.N (5.1.2)
128171 amukha: MNT-16401: Delete comment notification from Blog or Links is not displayed in Site Activities dashlet
- Corrected the comemnts webscript.
- Added JUnit tests.
git-svn-id: https://svn.alfresco.com/repos/alfresco-enterprise/alfresco/HEAD/root@129278 c4b6b30b-aa2e-2d43-bbcb-ca4b014f7261
128168 adavis: MNT-16381 Transformers must validate the content stream mimetype
- Addition of AbstractContentTransformer2.strictMimeTypeCheck(...) to check that the
declared mimetype is the same as the Tika derived mimetype. Controlled by a new alfresco
global property content.transformer.strict.mimetype.check (set to true by default).
- Added the UnsupportedTransformationException to a number of transformation callers as
they should have been handling it already.
- Modified DifferrentMimeTypeTest to test the new strictMimeTypeCheck.
git-svn-id: https://svn.alfresco.com/repos/alfresco-enterprise/alfresco/HEAD/root@129272 c4b6b30b-aa2e-2d43-bbcb-ca4b014f7261
128093 arebegea: Merged 5.1.N (5.1.2) to 5.2.N (5.2.1)
128045 arebegea: Merged 5.0.N (5.0.4) to 5.1.N (5.1.2)
127999 rneamtu: Merged DEV to 5.0.N (5.0.4)
127518 rneamtu: MNT-15457 : Can not define site filter via solr-facets-config-custom.properties file
- Set qname for SITE special facetable property
git-svn-id: https://svn.alfresco.com/repos/alfresco-enterprise/alfresco/HEAD/root@129267 c4b6b30b-aa2e-2d43-bbcb-ca4b014f7261
124450 aleahu: Merged 5.1.N (5.1.2) to 5.2.N (5.2.1)
124423 aleahu: Merged 5.0.N (5.0.4) to 5.1.N (5.1.2)
124409 cturlica: MNT-15715: CLONE - The file extension of any unknown mimetype is lost during download and replaced by .bin.
- Merged V4.2-BUG-FIX (4.2.7) to 5.0.N (5.0.4)
122029 amukha: MNT-14412: The file extension of any unknown mimetype is lost during download and replaced by .bin.
- Now the mimetype guessing is not done for IE if the mimetype is binary (possibly unknown for Alfresco)
git-svn-id: https://svn.alfresco.com/repos/alfresco-enterprise/alfresco/HEAD/root@127755 c4b6b30b-aa2e-2d43-bbcb-ca4b014f7261
124229 amorarasu: Merged 5.1.N (5.1.2) to 5.2.N (5.2.1)
124146 amorarasu: Merged 5.0.N (5.0.4) to 5.1.N (5.1.2)
124109 amorarasu: Merged V4.2-BUG-FIX (4.2.7) to 5.0.N (5.0.4)
124108 amorarasu: MNT-15801 : onContentUpdate policies not working for updates via webdav
- Fixed code merged from 4.1.N, a different LockInfo method is used.
git-svn-id: https://svn.alfresco.com/repos/alfresco-enterprise/alfresco/HEAD/root@127745 c4b6b30b-aa2e-2d43-bbcb-ca4b014f7261
124228 amorarasu: Merged 5.1.N (5.1.2) to 5.2.N (5.2.1)
124145 amorarasu: Merged 5.0.N (5.0.4) to 5.1.N (5.1.2)
124106 rmunteanu: Merged V4.2-BUG-FIX (4.2.7) to 5.0.N (5.0.4)
124105 amorarasu: Merged V4.1-BUG-FIX (4.1.11) to V4.2-BUG-FIX (4.2.7)
123915 rmunteanu: Merged V4.1.7 (4.1.7.18) to V4.1-BUG-FIX (4.1.11)
MNT-15801 : onContentUpdate policies not working for updates via webdav
- Reverted changes made for MNT-11185 and MNT-10966 , reverts that will fix MNT-15746
- Changed fix for MNT-5882 by adding the ASPECT_NO_CONTENT after the content is updated, this way preventing MNT-10966 from reproducing
git-svn-id: https://svn.alfresco.com/repos/alfresco-enterprise/alfresco/HEAD/root@127744 c4b6b30b-aa2e-2d43-bbcb-ca4b014f7261
127462 jkaabimofrad: Merged 5.1.N (5.1.2) to API-STRIKES-BACK (5.2.0)
127454 jkaabimofrad: MNT-16224, RA-1093: Fixed Quickshare issue where deleting a shared node didn't remove the 'shared' aspect. The fix also takes care of the shared nodes that have been deleted but not yet restored, as well as, shared nodes that have already been restored from the trashcan (allow the user to un-share).
git-svn-id: https://svn.alfresco.com/repos/alfresco-enterprise/alfresco/HEAD/root@127615 c4b6b30b-aa2e-2d43-bbcb-ca4b014f7261
123868 jkaabimofrad: RA-856: Added support for REST APIs “/content” endpoints to optionally set their own cache. (Currently, only the Renditions API is setting its own cache)
- Removed the http attachment header setting from the AbstractResourceWebScript, as the ContentStreamer already has this feature
- Reformatted ContentStreamer according to Alfresco code standards
git-svn-id: https://svn.alfresco.com/repos/alfresco-enterprise/alfresco/HEAD/root@126543 c4b6b30b-aa2e-2d43-bbcb-ca4b014f7261
122553 aleahu: Merged 5.0.N (5.0.4) to 5.1.N (5.1.1)
122494 amorarasu: Merged V4.2-BUG-FIX (4.2.7) to 5.0.N (5.0.4)
122434 rneamtu: Merged V4.2.6 (4.2.6) to V4.2-BUG-FIX (4.2.7)
122333 amorarasu: Merged DEV to V4.2.6 (4.2.6)
121922 122190 122271 122292 amorarasu: MNT-13739: Site consumers are able to lock documents (they did not create) via WebDAV
- Went back to using the secured lock service
- Unlock resource after MOVE only if the it was locked
git-svn-id: https://svn.alfresco.com/repos/alfresco-enterprise/alfresco/HEAD/root@123676 c4b6b30b-aa2e-2d43-bbcb-ca4b014f7261
121691 adavis: Merged 5.0.N (5.0.4) to 5.1.N (5.1.1) (PARTIAL MERGE)
121100 amorarasu: Merged DEV to 5.0.N (5.0.4)
120779 amorarasu: MNT-14416: Click the document uploaded via protocol like AOS in Share site My Activities will take you to a folder view
- Set null path for newly created files.
git-svn-id: https://svn.alfresco.com/repos/alfresco-enterprise/alfresco/HEAD/root@123650 c4b6b30b-aa2e-2d43-bbcb-ca4b014f7261
121627 rmunteanu: Merged 5.0.N (5.0.4) to 5.1.N (5.1.1)
121496 arebegea: MNT-14409 : Unable to configure search filter for TAG/SITE via extension
- Modified the SolrFacetConfig QName resolver to use the FacetQNameUtils that was also used when added a filter from Share
- Had to move the FacetQNameUtils and the test class FacetQNameUtilsTest to repository project
- Added the FacetQNameUtilsTest test to the AllUnitTestsSuite
git-svn-id: https://svn.alfresco.com/repos/alfresco-enterprise/alfresco/HEAD/root@123645 c4b6b30b-aa2e-2d43-bbcb-ca4b014f7261
120594 cturlica: Merged 5.0.N (5.0.4) to 5.1.N (5.1.1)
120538 aleahu: MNT-14845 : Site Export Rest API creates a corrupted ZIP if the site contains members synced from LDAP
- Fixed by not exporting user node if it doesn't exist
- Added unit tests for site export
git-svn-id: https://svn.alfresco.com/repos/alfresco-enterprise/alfresco/HEAD/root@123625 c4b6b30b-aa2e-2d43-bbcb-ca4b014f7261
120443 arebegea: Revert Merged 5.0.N (5.0.4) to 5.1.N (5.1.1)
120350 aleahu: MNT-14845 : Site Export Rest API creates a corrupted ZIP if the site contains members synced from LDAP
- Fixed by not exporting user node if it doesn't exist
- Added unit tests for site export
git-svn-id: https://svn.alfresco.com/repos/alfresco-enterprise/alfresco/HEAD/root@123622 c4b6b30b-aa2e-2d43-bbcb-ca4b014f7261
120429 arebegea: Merged 5.0.N (5.0.4) to 5.1.N (5.1.1)
120350 aleahu: MNT-14845 : Site Export Rest API creates a corrupted ZIP if the site contains members synced from LDAP
- Fixed by not exporting user node if it doesn't exist
- Added unit tests for site export
git-svn-id: https://svn.alfresco.com/repos/alfresco-enterprise/alfresco/HEAD/root@123621 c4b6b30b-aa2e-2d43-bbcb-ca4b014f7261
120428 arebegea: Revert Merged 5.0.N (5.0.4) to 5.1.N (5.1.1)
120350 aleahu: MNT-14845 : Site Export Rest API creates a corrupted ZIP if the site contains members synced from LDAP
- Fixed by not exporting user node if it doesn't exist
- Added unit tests for site export
git-svn-id: https://svn.alfresco.com/repos/alfresco-enterprise/alfresco/HEAD/root@123620 c4b6b30b-aa2e-2d43-bbcb-ca4b014f7261
120414 arebegea: Merged 5.0.N (5.0.4) to 5.1.N (5.1.1)
120386 abozianu: Merged DEV to 5.0.N (5.0.4)
120352 abozianu: MNT-14411 : Re-created user can't cancel created task
- fix and unit test
git-svn-id: https://svn.alfresco.com/repos/alfresco-enterprise/alfresco/HEAD/root@123619 c4b6b30b-aa2e-2d43-bbcb-ca4b014f7261
