Julien Cristau <julien.cristau@logilab.fr> [Thu, 22 Jan 2015 16:41:27 +0100] rev 10154
[pkg] 3.18.8
Julien Cristau <julien.cristau@logilab.fr> [Wed, 21 Jan 2015 15:58:33 +0100] rev 10153
[security] Test case and fix for an INSERT security hole
7099bbd685aa introduced a untested corner case in which an Entity with no
attribute specified could be created whatever the permissions.
Report and test case by Christophe de Vienne, fix by Aurelien Campeas. Thanks!
Closes #4854359
Julien Cristau <julien.cristau@logilab.fr> [Thu, 08 Jan 2015 12:20:36 +0100] rev 10152
[pkg] 3.20.2
Julien Cristau <julien.cristau@logilab.fr> [Thu, 22 Jan 2015 15:46:24 +0100] rev 10151
[debian] cubicweb 3.20 breaks cubicweb-bootstrap << 0.6.6
Closes #4842316
Julien Cristau <julien.cristau@logilab.fr> [Thu, 08 Jan 2015 15:37:20 +0100] rev 10150
[pkg] don't include extra files in tarballs
Blind wildcards for dirs that may contain generated or temporary files
can lead to trouble and unreproducible results.
Julien Cristau <julien.cristau@logilab.fr> [Thu, 08 Jan 2015 12:36:48 +0100] rev 10149
[pkg] exclude generated js_api documentation from tarballs
Julien Cristau <julien.cristau@logilab.fr> [Thu, 08 Jan 2015 12:36:20 +0100] rev 10148
[doc] remove old and unused argouml files
Julien Cristau <julien.cristau@logilab.fr> [Thu, 08 Jan 2015 12:36:01 +0100] rev 10147
[web/data] remove unused xcf files
Julien Cristau <julien.cristau@logilab.fr> [Thu, 08 Jan 2015 12:22:43 +0100] rev 10146
[doc] remove nonexistent css from theme
Denis Laxalde <denis.laxalde@logilab.fr> [Tue, 20 Jan 2015 10:32:34 +0100] rev 10145
[doc] Drop autoclass directive for IDownloadableLineView
This class has been dropped in 3.20.
Julien Cristau <julien.cristau@logilab.fr> [Thu, 08 Jan 2015 12:19:34 +0100] rev 10144
[pkg] include missing files from doc/book/ in release tarballs
Closes #4832700
Denis Laxalde <denis.laxalde@logilab.fr> [Wed, 07 Jan 2015 16:22:27 +0100] rev 10143
[datafeed] Set headers parameter to an empty dict in DataFeedParser.retrieve_url
This parameter is then passed to urllib2.Request, which expects a dict and
won't check for None.
Closes #4842333.
Denis Laxalde <denis.laxalde@logilab.fr> [Thu, 22 Jan 2015 10:43:24 +0100] rev 10142
[views/forms] Fix EntityFieldsForm.link_to when parent entity is being created
When the parent entity is being created and the inlined form is displayed, the
parent entity has no eid yet and `peid` is usually 'A'. So int() raises a
ValueError.
Closes #4627739.
Christophe de Vienne <christophe@unlish.com> [Sat, 03 Jan 2015 04:06:06 +0100] rev 10141
[entities] Optimize CWUser.properties.
This property gets called each time a user connects to a repository,
which means a lot.
This optimisation cuts its execution time by 5 according to my tests
Julien Cristau <julien.cristau@logilab.fr> [Tue, 04 Mar 2014 12:41:21 +0100] rev 10140
[schema] Typo and indentation fix in RQLVocabularyConstraint doc string
Julien Cristau <julien.cristau@logilab.fr> [Wed, 07 Jan 2015 15:52:50 +0100] rev 10139
Added tag cubicweb-version-3.20.1, cubicweb-debian-version-3.20.1-1, cubicweb-centos-version-3.20.1-1 for changeset 43eef610ef11
Julien Cristau <julien.cristau@logilab.fr> [Wed, 07 Jan 2015 15:24:40 +0100] rev 10138
[pkg] 3.20.1
Julien Cristau <julien.cristau@logilab.fr> [Wed, 07 Jan 2015 15:24:08 +0100] rev 10137
i18n update (closes #4826490)
Julien Cristau <julien.cristau@logilab.fr> [Wed, 07 Jan 2015 15:01:23 +0100] rev 10136
merge 3.19.7 into 3.20
Julien Cristau <julien.cristau@logilab.fr> [Wed, 07 Jan 2015 14:07:17 +0100] rev 10135
merge two default heads
Julien Cristau <julien.cristau@logilab.fr> [Wed, 07 Jan 2015 14:56:33 +0100] rev 10134
Added tag cubicweb-version-3.19.7, cubicweb-debian-version-3.19.7-1, cubicweb-centos-version-3.19.7-1 for changeset ac4f5f615597
Julien Cristau <julien.cristau@logilab.fr> [Wed, 07 Jan 2015 14:38:25 +0100] rev 10133
[pkg] 3.19.7
Julien Cristau <julien.cristau@logilab.fr> [Wed, 07 Jan 2015 11:55:12 +0100] rev 10132
Added tag cubicweb-version-3.20.0, cubicweb-debian-version-3.20.0-1, cubicweb-centos-version-3.20.0-1 for changeset 7e6b7739afe6
Julien Cristau <julien.cristau@logilab.fr> [Tue, 06 Jan 2015 19:00:53 +0100] rev 10131
[pkg] prepare 3.20 release
Julien Cristau <julien.cristau@logilab.fr> [Tue, 23 Dec 2014 11:18:15 +0100] rev 10130
[skeleton] simplify debian rules file
Julien Cristau <julien.cristau@logilab.fr> [Mon, 22 Dec 2014 14:39:50 +0100] rev 10129
[migration] don't crash when deleting a non-existing rtype
When asked to delete a relation type, instead of checking if it was
computed or not, just delete both the CWRType and CWComputedRType.
Julien Cristau <julien.cristau@logilab.fr> [Fri, 19 Dec 2014 12:39:42 +0100] rev 10128
[debian] include "metapackage" in the cubicweb package's description
Lets lintian know it's ok for it to be empty.
Julien Cristau <julien.cristau@logilab.fr> [Fri, 19 Dec 2014 12:37:37 +0100] rev 10127
[debian] ensure all packages use ${misc:Depends} and ${python:Depends}
Julien Cristau <julien.cristau@logilab.fr> [Fri, 19 Dec 2014 12:35:43 +0100] rev 10126
[debian] update cubicweb-dev's lintian override
Switching from python-support to dh-python changed the installation path.
Adrien Di Mascio <Adrien.DiMascio@logilab.fr> [Wed, 03 Dec 2014 16:29:16 +0100] rev 10125
[server] add a db-namespace option in source definition (closes #1631339)
"namespace" is preferred to the postgresql term "schema" to try and
avoid confusion with cubicweb's schema.
cubicweb now depends on logilab-database >= 1.13.0
Adrien Di Mascio <Adrien.DiMascio@logilab.fr> [Fri, 19 Dec 2014 12:08:01 +0100] rev 10124
[serverctl] add db_transaction context manager
Adrien Di Mascio <Adrien.DiMascio@logilab.fr> [Thu, 28 Mar 2013 19:24:46 +0100] rev 10123
[server] refactor cleanup() code used by "cubicweb-ctl delete"
Try to make each logical step (i.e. "delete database" and "delete user")
a bit more visible and explicit.
This is a preparatory work to easily plug the "delete namespace" feature.
David Douard <david.douard@logilab.fr> [Mon, 05 May 2014 11:09:51 +0200] rev 10122
[views] visual refactorings (closes #3803685)
- pageContent:
- remove the shadow
- add a light border
- slightly round the corners
- left column:
- ensure width make it aligned with the logo (header)
- ensure the top border of the first box is aligned with the pageContent div
- do not use serif font for box headers
Julien Cristau <julien.cristau@logilab.fr> [Thu, 18 Dec 2014 17:54:29 +0100] rev 10121
[web] everything old is new again
Kill the "new" cubicweb.css, and move cubicweb.old.css back in its
place. Closes #4763360.
David Douard <david.douard@logilab.fr> [Wed, 12 Nov 2014 22:20:02 +0100] rev 10120
[pkg] bump version to 3.20.0
David Douard <david.douard@logilab.fr> [Mon, 05 May 2014 11:25:59 +0200] rev 10119
[views] use icons for user menu and login (header) (closes #3803684)
- use icons from the embedded pictograms font for:
- authenticated user menu (userActionsBox)
- login (CookieLoginComponent)
- do not display "anonymous" when not logged in
Aurelien Campeas <aurelien.campeas@logilab.fr> [Thu, 04 Dec 2014 11:37:18 +0100] rev 10118
[utils] provide a function to return an admin connection from an appid
Closes #4723580.
Denis Laxalde <denis.laxalde@logilab.fr> [Tue, 16 Dec 2014 11:37:52 +0100] rev 10117
[debian] Install wsgi directory in cubicweb-web package
Closes #4752375.
David Douard <david.douard@logilab.fr> [Thu, 11 Dec 2014 15:02:23 +0100] rev 10116
[test] fixes to make tests pass with recent lxml
lxml (on jessie at least, ie. 3.4.0) does not remove endlines anymore.
Rémi Cardona <remi.cardona@logilab.fr> [Fri, 05 Dec 2014 12:08:13 +0100] rev 10115
[server] Remove useless 'is None' checks
'pb' is never none since 3386fd89c914 when support for the 'APYCOT_ROOT'
env var was removed.
Aurelien Campeas <aurelien.campeas@logilab.fr> [Wed, 17 Dec 2014 10:55:53 +0100] rev 10114
[security] check attributes: dispatch on the "add" action if entity was just created
cw_set on a just-created entity (i.e. created in the same transaction)
should behave the same as setting the attribute directly on creation:
check the 'add' permissions, not 'update'.
Closes #4740310.
Christophe de Vienne <christophe@unlish.com> [Tue, 09 Dec 2014 15:18:58 +0100] rev 10113
[doc] Add BigInt to the list of built-in types
Julien Cristau <julien.cristau@logilab.fr> [Wed, 02 Apr 2014 15:32:17 +0200] rev 10112
[devtools] call turn_repo_off in tearDown (closes #4673491)
lets it catch leaked sessions even when running a single test
Julien Cristau <julien.cristau@logilab.fr> [Mon, 01 Dec 2014 15:57:12 +0100] rev 10111
[book] typos / clarifications in create-instance section
Clarify that cubicweb-ctl upgrade needs to be run whenever cubicweb or a
cube is upgraded. Related to #2632425.
Aurelien Campeas <aurelien.campeas@logilab.fr> [Thu, 12 Jun 2014 18:31:21 +0200] rev 10110
[repository] don't mangle the stack trace on exception
Christophe de Vienne <christophe@unlish.com> [Thu, 27 Nov 2014 13:40:37 +0100] rev 10109
[pkg] Make twisted recommended only
It's not necessary when using wsgi or pyramid.
Closes #4639508
Christophe de Vienne <christophe@unlish.com> [Thu, 27 Nov 2014 12:11:29 +0100] rev 10108
[devtools] Use the pause_trace context manager instead of pause_tracing/resume_tracing
The later were deprecated in logilab-common 0.63.1
Nicolas Chauvat <nicolas.chauvat@logilab.fr> [Thu, 23 Oct 2014 15:47:17 +0200] rev 10107
[serverctl] rename remove_cube to drop_cube (closes #4545093)
For the sake of consistency, since commands are currently named:
- add_{cube,entity,attribute,relation}
- drop_{entity,attribute,relation}
- remove_cube
Alain Leufroy <alain@leufroy.fr> [Thu, 15 May 2014 23:18:17 +0200] rev 10106
[wsgi] add tornado http server
Alain Leufroy <alain@leufroy.fr> [Thu, 15 May 2014 23:07:43 +0200] rev 10105
[wsgi] add message about the active interface
Similarly to what done in "stdlib".
Alain Leufroy <alain@leufroy.fr> [Thu, 15 May 2014 23:05:15 +0200] rev 10104
[cwctl] rewrite wsgi method choices
This will help devs to add new choices by adding their callback to WSGI_CHOICES.
Note:
``options`` becomes a property because ``wsgichoices()`` should be
evaluated at the last-minute.
Julien Cristau <julien.cristau@logilab.fr> [Mon, 01 Dec 2014 11:35:05 +0100] rev 10103
[skeleton/debian] use dh_python2 instead of dh_pysupport for new cubes
The former is deprecated.
Julien Cristau <julien.cristau@logilab.fr> [Tue, 21 Oct 2014 18:09:41 +0200] rev 10102
[web] Add source for jquery.qtip.js
Downloaded from
https://github.com/Craga89/qTip1/raw/master/1.0.0-rc3/jquery.qtip-1.0.0-rc3.js
Related to #3851121.
Julien Cristau <julien.cristau@logilab.fr> [Tue, 21 Oct 2014 18:01:06 +0200] rev 10101
[web] Replace minified copy of jquery.flot.js 0.6 with non-minified version
Related to #3851121
Julien Cristau <julien.cristau@logilab.fr> [Thu, 23 Oct 2014 11:42:20 +0200] rev 10100
[web] Update jquery-treeview to the latest version
Files copied from commit 61f230828ace1b54c2cc54bc549ece261b11842e of
https://github.com/jzaefferer/jquery-treeview
Julien Cristau <julien.cristau@logilab.fr> [Thu, 23 Oct 2014 11:20:44 +0200] rev 10099
[web/css] move jquery.treeview.css override to a separate file
Patched embedded code copies are a maintenance disaster (even more so
than plain embedded code copies). Let's not do that.
Julien Cristau <julien.cristau@logilab.fr> [Wed, 22 Oct 2014 14:39:51 +0200] rev 10098
[web] Stop patching jquery.treeview.js
This logically reverts part of e9b7cd2e9012 "allow treeview to work
correctly in a tab #345293".
The treeview and ajax code have suffered a number of changes since then, this
change doesn't seem to be necessary anymore. It is most likely unneeded since
f65208c9dbdc "[javascript] use jQuery.one('ajax-loaded') instead of
jQuery.bind() in add_onload to avoid multiple callback executions".
Rémi Cardona <remi.cardona@logilab.fr> [Wed, 22 Oct 2014 14:28:01 +0200] rev 10097
[web] Beautify jquery.treeview.js
Fully mechanical, just whitespace changes.
Aurelien Campeas <aurelien.campeas@logilab.fr> [Thu, 06 Nov 2014 18:17:29 +0100] rev 10096
[entities/wfobjs] add missing `DBG_SEC` debugging informations and a new `transition` capability
Aurelien Campeas <aurelien.campeas@logilab.fr> [Thu, 06 Nov 2014 14:35:25 +0100] rev 10095
[warnings] put an end to warnings in the sqlite driver over `str` being sent instead of unicode strings