• last updated 5 hours ago
Constraints
Constraints: committers
 
Constraints: files
Constraints: dates
Added missing data model upgrade from version 5.2, affecting long lived installations.

  1. … 1 more file in changeset.
- bump version number of OpenACS to 5.9.1b3 and DotLRN to 2.9.1b3

  1. … 79 more files in changeset.
Bump version numbers for OpenACS 5.9.1b1

  1. … 81 more files in changeset.
Added new database utility to retrieve primary keys of a table.

Source for the postgres version: https://wiki.postgresql.org/wiki/Retrieve_primary_key_columns

Source for the oracle version: http://stackoverflow.com/questions/4749650/function-that-would-return-the-data-retreived-from-a-select-query-oracle

  1. … 4 more files in changeset.
Added new database functions to check for various properties and constraints in database metadata:

- foreign key constraint

- unique constraint

- not null constraint

- get column default value

  1. … 4 more files in changeset.
- add nonces to script tags

- add body handlers

  1. … 7 more files in changeset.
- Added support for W3C Content Security Policy(CSP)

* For details about CSP, see https://www.w3.org/TR/CSP/

* New calls:

security::csp::nonce:

Generate a CSP nonce token token

security::csp::require /directive/ /value/:

Add a requirements of a page to the CSP in order to generate

later a tailored policy with the minimal permissions for

this page. For example, the following requirement is

currently added per default to the oacs-master template to

permit style tags and style attribites in the markup.

security::csp::require style-src 'unsafe-inline'

security::csp::render:

Generate a policy from the requirements

* Added Kernel Parameter CSPEnabledP to activate/desctivate CSP

(default on)

- Bump version numbers

acs-tcl to 5.9.1d11

acs-bootstrap-installer to 5.9.1d4

acs-kernel to 5.9.1d17

  1. … 7 more files in changeset.
- add kernel parameter to make ad_session_id cookies secure (useful on sites, where all sessions are via https, improves security rating on e.g. mozillas observatory tool)

  1. … 1 more file in changeset.
composition-rel reform:

- apply changes developed by Michael Steigman for making rel-types

configurable whether these should be composable or not

(default is: these are composable, which was up to now the only

choice)

- improved documentation of log argument lists of SQL functions

- Background:

http://openacs.org/forums/message-view?message_id=5330734

http://openacs.org/forums/message-view?message_id=4031049

- bump version number of acs-kernel to 5.9.1d16

  1. … 34 more files in changeset.
- added kernel parameter MaxUrlLength (default 2000) to remove

hard-coded length in request-processor-procs.

- lifted data model restriction of 100 characters for url-segments

(changing types of "site_nodes.name" from "varchar(100)" to "text")

(PostgreSQL only)

- site_node__node_id

* use built-in string functions instead of characterwise loop

* use default for last argument

* Improve source-code documentation

- bumped version number of kernel to 5.9.1d15

  1. … 3 more files in changeset.
- remove dependency on acs_object_party_privilege_map

  1. … 2 more files in changeset.
- added new function acs_permission.permissions_all as replacement for acs_permssions_all

- removed all dependencies on acs_permssions_all in kernel (such that acs_object_paths and acs_object_context_index can be dropped for PostgreSQL)

  1. … 8 more files in changeset.
- Add SQL schema acs_permission to allow to call sql-functions for

Oracle and PostgreSQL in exactly the same way

- Move postgres permission function to the new neamespace and provide

stubs for backward compatibility

- New function permission::get_parties_with_permission

to support a restricted form of reverse lookup for permssions

in order to reduce the dependencies on

acs_object_party_privilege_map for PostgreSQL

- make upgrade scripts more robust (support repeated loading)

- bump verison number of acs-tcl to 5.9.1d9

- bump version number of acs-kernel to 5.9.1d11

  1. … 12 more files in changeset.
- replace obsolete all_object_party_privilege_map by acs_object_party_privilege_map

- bump version number to 5.9.1d10

  1. … 6 more files in changeset.
Remove type discrepancy introduced in 2002:

- acs_object_types.object_type has type varchar(1000), while

- acs_object_types.supertype has type varchar(100)

... several more data types are involved, using acs_object_types.object_type as foreign key

  1. … 5 more files in changeset.
- Slightly faster (around 10%) versions for the base permission query functions.

In the new versions the lookup of acs__magic_object_id was moved out of the loop.

  1. … 2 more files in changeset.
- rename attribute "tag" to "originating_rel_id" to avoid confusion

- Create an "identity relationship" (-10)

- Use the new identity relation instead of value "0" in party_approved_member_map

- Add a foreign key to avoid garbage in "originating_rel_id"

- Speed up referential integrity

- Improve get_func_definition() to return SQL function/procedure

definitions with argument names and defaults (contained just types before)

  1. … 3 more files in changeset.
clean up of inconsistency between old and new installations

--

-- Since many years, new installations are created with "Registered

-- Users" (object_id -2) having object_type as "application_group" and

-- the context id of the main subsite (see

-- acs-kernel/sql/postgresql/acs-install.sql).

--

-- However, it seems as if some prior upgrade scripts have not cared

-- sufficiently to update all installation correctly (some have still

-- "group", some have no context_id set). This upgrade script tries to

-- bring everything in sync such that "newer" and "older"

-- installations behave the same.

--

  1. … 1 more file in changeset.
- bump version number to 5.9.1d5

- sharpen the comment and warning about unintended uses of db_nextval

- use a sequence name without t_ prefix for anon_func_seq

- bump version number to 5.9.1d4

  1. … 4 more files in changeset.
- drop useless view

- report usage of deprecated views (deprecated since at least 10 years) in error.log

  1. … 2 more files in changeset.
- fix typo in parameter name TclTraceLogSeverities

  1. … 5 more files in changeset.
- bump version number

- bump version numbers from 5.9.0b* to 5.9.0

  1. … 32 more files in changeset.
- bump version numbers

  1. … 75 more files in changeset.
*** empty log message ***

  1. … 75 more files in changeset.
- delete parameters from database, that were deleted from .info files ages ago

  1. … 2 more files in changeset.
- add missing handling for "merged" user state

- add message key

  1. … 2 more files in changeset.
- make pretty-naming of acs-core packages more consistent

- bump verision numbers

  1. … 16 more files in changeset.
Bumping up core packages version to 5.10.0d1

  1. … 24 more files in changeset.