[vreg] move base registry implementation to logilab.common. Closes #1916014 A new logilab.common.registry module has been created with content from * cw.vreg (the whole things that was in there) * cw.appobject (base selectors and all). In the process, we've done some renaming: * former selector functions are now known as "predicate", though you still use predicates to build an object'selector * hence `objectify_selector` decorator is now `objectify_predicate` * the top level registry is now `RegistryStore` (was `VRegistry`) Also there is no more need for the @lltrace decorator. On the CubicWeb side, the `selectors` module has been renamed to `predicates`. There should be full backward compat with proper deprecation warnings.

[datafeed] when checking for deletion using cwentity xml parser, use vid=xml to limit resources consumption

[repository] ldap-feed source. Closes #2086984 datafeed based source which copy a subtree of the ldap directory into the system database. Authentication still go through ldap though. Pros: * don't need temporary tables and such for multi-sources RQL queries execution * much more flexible to enhance / configure behaviour (you simply have to replace the parser) * run better when ldap isn't reachable Cons: * no more 'on the fly' discovery of users (though a user authenticating itself will be automatically added if it doesn't exist in the db yet) * synchronization may be heavy if there are a lot of users A new cw.server.ldaputils containing code in common between former ldapuser and new ldapfeed sources has been introduced. Also ldapuser source now uses url instead of custom host/protocol option so it looks like a datafeed source (could be improved).

[datafeed] set delete-entities=yes is now safer, by checking each entity actually seems deleted. Closes #2165381 Parsers now have to implement the `is_deleted(extid, etype, eid)` method that should return a boolean telling if the given entity exists in the external source or not.

[config, migration] fix https-deny-anonymous option type

[js, i18n] translated strings should use " not ' else they are discarded by xgettext. Closes #1892489

[book] Fix typos in rql datetime functions documentation

[search box] allow to specify domid in select arguments. Closes #2162166 needed when one want to display search box twice in a page (eg logilabfr)

[config] fix rql-cache-size initial values (closes #2162160)

[migractions] fix comment to avoid ambiguity. Closes #2015260

[storage] BFSS now create read only file (closes #2151672) In the process binary.to_file now takes a file instead of a file-path. As storage was currently the only user it should not impact anyone.

backport stable

[schema synchronization] don't use sql for TODAY/NOW in keyword arg. Closes #2154815 Also consider TZDatetime on the way

backport oldstable

[req cookie] fix remove_cookie expires which was leading to expires computed to 0 in set_cookie and the Cookie class interpret that has no expires. Closes #2154654

[testlib, postgres] take care, _repo is None when backuping postgres test db, crashing database generation

[base views] make it easier to override EntityStartupView behaviour when the rset is empty; closes #2126364

[excanvas js] missing comma

backport stable

[datafeed] Don't pretend all columns are sortable in datafeed sources import log view. Closes #2146387

[facets] Make hiding facet body optional (closes #2105862)

[manage/index view] fix sources management view appearing in index view although it should not; closes #2126335

[book] add doc about request, session and connection management you need to know when writing tests

[test] test/demonstrate relation permissions overriding