Created a notion of clearance level distinct from (but related to)
classification level. A clearance level references the highest
classification level it has access to. A SecurityClearance now contains a
ClearanceLevel, which in turn contains a ClassificationLevel.
Created a ClearanceLevelManager and initialise it at the same time as the
ClassificationLevelManager.
+review RM
git-svn-id: https://svn.alfresco.com/repos/alfresco-enterprise/modules/recordsmanagement/HEAD@103929 c4b6b30b-aa2e-2d43-bbcb-ca4b014f7261
The API can be accessed through the following URI:
http://localhost:8080/alfresco/service/api/classification/reasons
Note that the private classificationService bean is currently being used
as there is an issue with the authentication when using the public bean.
Log error message contains:
Caused by: net.sf.acegisecurity.AccessDeniedException: Access is denied.
RM method security check was performed.
Failed on method: getClassificationReasons()
; nested exception is net.sf.acegisecurity.AccessDeniedException: Access is denied.
at org.alfresco.module.org_alfresco_module_rm.security.RMMethodSecurityInterceptor.beforeInvocation(RMMethodSecurityInterceptor.java:299)
+review RM @taksoy
git-svn-id: https://svn.alfresco.com/repos/alfresco-enterprise/modules/recordsmanagement/HEAD@101042 c4b6b30b-aa2e-2d43-bbcb-ca4b014f7261
* friendlier names for Version relationship
* added "Versions" event .. too allow auotmatic disposition of versioned records
* patch for above
* bug fix for events not being populated when auto-filling rule used
git-svn-id: https://svn.alfresco.com/repos/alfresco-enterprise/modules/recordsmanagement/HEAD@92116 c4b6b30b-aa2e-2d43-bbcb-ca4b014f7261
76115: Update version to 2.1.1
83912: Updated the Alfresco dependency from 4.2.2 to 4.2.3.1 for RM 2.2
89173: Merged BRANCHES/v2.1.0.x to BRANCHES/v2.2:
68559: (RECORD ONLY) Change base Alfresco version from 4.2.0-RC4 to 4.2.0
68568: (RECORD ONLY) Merge from HEAD to BRANCHES/V2.1.0.x
68569: (RECORD ONLY) Update module version to 2.1.0.1
76475: (RECORD ONLY) Merge HEAD to BRANCHES/V2.1.0.x:
76597: (RECORD ONLY) Merge HEAD to BRANCHES/V2.1.0.x:
74932: RM-1461: CLONE - RM slower then standard repo/sites when rendering document details when folder contains 15k documents
76598: (RECORD ONLY) Merged HEAD to BRANCHES/V2.1.0.x:
75102: RM Performance testing
76599: (RECORD ONLY) Update module version to 2.1.0.2
76601: (RECORD ONLY) Merged HEAD to BRANCHES/V2.1.0.x:
75186: RM Performance Improvements
89251: Merge BRANCHES/V2.1.0.x to BRANCHES/V2.2:
68559: Change base Alfresco version from 4.2.0-RC4 to 4.2.0
68568: Merge from HEAD to BRANCHES/V2.1.0.x
68569: Update module version to 2.1.0.1
76475: Merge HEAD to BRANCHES/V2.1.0.x:
76597: Merge HEAD to BRANCHES/V2.1.0.x:
74932: RM-1461: CLONE - RM slower then standard repo/sites when rendering document details when folder contains 15k documents
76598: Merged HEAD to BRANCHES/V2.1.0.x:
75102: RM Performance testing
76599: Update module version to 2.1.0.2
76601: Merged HEAD to BRANCHES/V2.1.0.x:
75186: RM Performance Improvements
76673: Root container cache to improve unfiled record browse performance
* relates to RM-1594 and RM-1595
76850: RM performance enhancements
* serach improvements
* in-place record browse improvements
* saved search via file plan browse improvements
76851: Additional unit test to check extended security with cache is working as expected.
76852: Rollback checked in config
77709: RM-1630: Error on manage references page
* regression caused by performance improvements
84337: Update version to 2.1.0.3
84421: Transaction level cahcing of declarative capability evaluation
84676: Fix build
84677: Prevent unnessary repeated creation of QName
84678: Improvements to extended dynamic authorities
* requiredFor set
* direct access to extended permission information, not via service
84679: Correct requiredFor value
88087: RM-1661 (Performance on setting permissions at a high category level)
88092: RM-1661 (Performance on setting permissions at a high category level)
* Fixed failing unit tests
88144: RM-1661 (Performance on setting permissions at a high category level)
88182: RM-1724 (Inheritance is not off for root categories, unfiled records, holds and transfers)
88192: RM-1661 (Performance on setting permissions at a high category level)
* Added unit tests
88193: RM-1661 (Performance on setting permissions at a high category level)
* Fixed failing unit tests
88358: RM-1661 (Performance on setting permissions at a high category level)
* Added unit tests
88685: RM-1742 (Locally Set Permissions for moved Record duplicate parent folder Locally Set Permissions)
88686: RM-1741 (Moved root category doesn't inherit permissions)
88687: RM-1741 (Moved root category doesn't inherit permissions)
* Unit test added
88688: RM-1742 (Locally Set Permissions for moved Record duplicate parent folder Locally Set Permissions)
* Unit test added
88691: RM-1745 (RM Admin role can only be added with read permission on the manage permission page)
88772: RM-1741 (Moved root category doesn't inherit permissions)
88860: RM-1661 (Performance on setting permissions at a high category level)
88864: RM-1661 (Performance on setting permissions at a high category level)
* Fixed failing unit tests
88959: RM-1746 (Moved record/category always have the inheritance on)
88960: RM-1661 (Performance on setting permissions at a high category level)
* Fixed failing unit tests
88961: RM-1661 (Performance on setting permissions at a high category level)
* Fixed failing unit tests
88962: RM-1661 (Performance on setting permissions at a high category level)
* Fixed failing unit tests
89252: Added missing test
89253: Removed warnings
89348: RM-1751 (Merge performance improvements made for RM 2.1.0.3 onto RM 2.2.1)
89455: RM-1751 (Merge performance improvements made for RM 2.1.0.3 onto RM 2.2.1)
git-svn-id: https://svn.alfresco.com/repos/alfresco-enterprise/modules/recordsmanagement/HEAD@89458 c4b6b30b-aa2e-2d43-bbcb-ca4b014f7261
68559: Change base Alfresco version from 4.2.0-RC4 to 4.2.0
68568: Merge from HEAD to BRANCHES/V2.1.0.x
68569: Update module version to 2.1.0.1
76475: Merge HEAD to BRANCHES/V2.1.0.x:
76597: Merge HEAD to BRANCHES/V2.1.0.x:
74932: RM-1461: CLONE - RM slower then standard repo/sites when rendering document details when folder contains 15k documents
76598: Merged HEAD to BRANCHES/V2.1.0.x:
75102: RM Performance testing
76599: Update module version to 2.1.0.2
76601: Merged HEAD to BRANCHES/V2.1.0.x:
75186: RM Performance Improvements
76673: Root container cache to improve unfiled record browse performance
* relates to RM-1594 and RM-1595
76850: RM performance enhancements
* serach improvements
* in-place record browse improvements
* saved search via file plan browse improvements
76851: Additional unit test to check extended security with cache is working as expected.
76852: Rollback checked in config
77709: RM-1630: Error on manage references page
* regression caused by performance improvements
84337: Update version to 2.1.0.3
84421: Transaction level cahcing of declarative capability evaluation
84676: Fix build
84677: Prevent unnessary repeated creation of QName
84678: Improvements to extended dynamic authorities
* requiredFor set
* direct access to extended permission information, not via service
84679: Correct requiredFor value
88087: RM-1661 (Performance on setting permissions at a high category level)
88092: RM-1661 (Performance on setting permissions at a high category level)
* Fixed failing unit tests
88144: RM-1661 (Performance on setting permissions at a high category level)
88182: RM-1724 (Inheritance is not off for root categories, unfiled records, holds and transfers)
88192: RM-1661 (Performance on setting permissions at a high category level)
* Added unit tests
88193: RM-1661 (Performance on setting permissions at a high category level)
* Fixed failing unit tests
88358: RM-1661 (Performance on setting permissions at a high category level)
* Added unit tests
88685: RM-1742 (Locally Set Permissions for moved Record duplicate parent folder Locally Set Permissions)
88686: RM-1741 (Moved root category doesn't inherit permissions)
88687: RM-1741 (Moved root category doesn't inherit permissions)
* Unit test added
88688: RM-1742 (Locally Set Permissions for moved Record duplicate parent folder Locally Set Permissions)
* Unit test added
88691: RM-1745 (RM Admin role can only be added with read permission on the manage permission page)
88772: RM-1741 (Moved root category doesn't inherit permissions)
88860: RM-1661 (Performance on setting permissions at a high category level)
88864: RM-1661 (Performance on setting permissions at a high category level)
* Fixed failing unit tests
88959: RM-1746 (Moved record/category always have the inheritance on)
88960: RM-1661 (Performance on setting permissions at a high category level)
* Fixed failing unit tests
88961: RM-1661 (Performance on setting permissions at a high category level)
* Fixed failing unit tests
88962: RM-1661 (Performance on setting permissions at a high category level)
* Fixed failing unit tests
git-svn-id: https://svn.alfresco.com/repos/alfresco-enterprise/modules/recordsmanagement/BRANCHES/V2.2@89251 c4b6b30b-aa2e-2d43-bbcb-ca4b014f7261
* focus on in-place scenarios with large numbers of DM users and large numbers of in-place records (based on issue informally reported by partner)
* improve performance of dynamic authorities used for in-place security evaluation (L1 transaction cache and more preformant authority look up)
* remove unwanted queries in tree (N+1 for every node) .. killed it for large file plans
* L1 transaction cache for capability condition evaluation .. these are called a LOT so removes some of the bottle necks when evaluating the permissions of a large sets of nodes
* extend helper system test used to load up fileplan and now also create in-place records
* unit and integration tests run .. sanity testing done via the UI
* overall performance of the display of 1000 in-place records in the file plan down from minutes to a few seconds!
git-svn-id: https://svn.alfresco.com/repos/alfresco-enterprise/modules/recordsmanagement/HEAD@75186 c4b6b30b-aa2e-2d43-bbcb-ca4b014f7261
RM-1505: Search Results: Hold Reason field is empty
* specific filtering for ViewHoldReason capability removed .. no longer required as we specify user permissions at the hold level
* deprecated hold related actions are no longer auditable (and so don't appear in the audit view)
* hold service Audits add/remove to/from holds
* hold reason is no longer rolled up onto disposable item .. it no longer makes sense for multiple holds and was a security hole
* hold reason removed from search options
git-svn-id: https://svn.alfresco.com/repos/alfresco-enterprise/modules/recordsmanagement/HEAD@74611 c4b6b30b-aa2e-2d43-bbcb-ca4b014f7261
