Sylvain Thénault <sylvain.thenault@logilab.fr> [Thu, 17 Jan 2013 14:39:51 +0100] rev 8651
Improve entity json export (closes #2559931)
Make output from __json_encode__ predictable; use it in the ejsonexport
view.
Sylvain Thénault <sylvain.thenault@logilab.fr> [Thu, 17 Jan 2013 14:40:57 +0100] rev 8650
[web/application/test] drop useless code
This is already done in CubicWebTC
Pierre-Yves David <pierre-yves.david@logilab.fr> [Thu, 17 Jan 2013 15:11:37 +0100] rev 8649
[test] precheck initial condition
Julien Cristau <julien.cristau@logilab.fr> [Wed, 16 Jan 2013 17:42:16 +0100] rev 8648
[packaging] Fix search in squeeze cubicweb-documentation package (closes #2558496)
Work around broken combination of jquery 1.4 and sphinx 0.6 in squeeze by
patching up doctools.js.
Julien Cristau <julien.cristau@logilab.fr> [Wed, 16 Jan 2013 17:41:45 +0100] rev 8647
[packaging] don't compress txt files (closes #2558496)
Sylvain Thénault <sylvain.thenault@logilab.fr> [Wed, 09 Jan 2013 21:48:59 +0100] rev 8646
[wf/test] fix tests broken by changes from another patch which have slipped there
Aurelien Campeas <aurelien.campeas@logilab.fr> [Wed, 09 Jan 2013 16:06:20 +0100] rev 8645
[merge] backport stable
Aurelien Campeas <aurelien.campeas@logilab.fr> [Wed, 09 Jan 2013 15:46:05 +0100] rev 8644
[web/test] fix stale reference to the changelog view (closes #2423532)
David Douard <david.douard@logilab.fr> [Wed, 09 Jan 2013 18:03:17 +0100] rev 8643
Added tag cubicweb-debian-version-3.15.8-1 for changeset 4ef457479337
David Douard <david.douard@logilab.fr> [Wed, 09 Jan 2013 18:03:17 +0100] rev 8642
Added tag cubicweb-version-3.15.8 for changeset 459d0c48dfaf
Aurelien Campeas <aurelien.campeas@logilab.fr> [Wed, 09 Jan 2013 16:04:26 +0100] rev 8641
[test] fix possible views test (closes #2544358)
Aurelien Campeas <aurelien.campeas@logilab.fr> [Wed, 09 Jan 2013 15:40:41 +0100] rev 8640
prepare 3.15.8
Aurelien Campeas <aurelien.campeas@logilab.fr> [Wed, 09 Jan 2013 14:29:29 +0100] rev 8639
[ldapfeed] if a deactivated user becomes available again in its source, reactivate it (closes #2542776)
* cwusers that see their ldap source counterpart disappear are
deactivated
* until now they were not activated again on reappearance
* note this behaviour in the doc
Aurelien Campeas <aurelien.campeas@logilab.fr> [Tue, 08 Jan 2013 15:53:22 +0100] rev 8638
[ldaputils,ldapparser] correctly compute "deleted" users (closes #2542083)
* in ldaputils.py, removal of an unneeded method (checking existence
of an object in the ldap, but not using the configuration filters)
* in the ldapparser, memoize the (filtered) search so as to serve both
.process and .is_deleted
* add a non regression test for the 'user-filter' source config entry
+ deletion
Sylvain Thénault <sylvain.thenault@logilab.fr> [Thu, 03 Jan 2013 23:27:56 +0100] rev 8637
[dataimport] new ignore_errors argument to ucsvreader, default to False. Closes #2547200
David Douard <david.douard@logilab.fr> [Tue, 18 Dec 2012 11:40:51 +0100] rev 8636
[ldapsource] keep python 2.5 compatibility (closes #2541602)
Aurelien Campeas <aurelien.campeas@logilab.fr> [Tue, 18 Dec 2012 10:42:11 +0100] rev 8635
[ldapuser2ldapfeed] .values -> .iteritems (closes #2542872)
Aurelien Campeas <aurelien.campeas@logilab.fr> [Mon, 17 Dec 2012 14:40:03 +0100] rev 8634
[ldap tests] cleanup in preparation of #2542083
Aurelien Campeas <aurelien.campeas@logilab.fr> [Mon, 17 Dec 2012 14:26:41 +0100] rev 8633
[ldapparser] demote warning level (actually important user info can leak there) (prepares #2542083)
Arthur Lutz <arthur.lutz@logilab.fr> [Thu, 03 Jan 2013 23:10:50 +0100] rev 8632
Remove changelog view (closes #2423532)
Vincent Michel <vincent.michel@logilab.fr> [Wed, 02 Jan 2013 18:17:02 +0100] rev 8631
[dataimport] Allow to replace escape char in the create_copyfrom_buffer
Nicolas Chauvat <nicolas.chauvat@logilab.fr> [Sun, 30 Dec 2012 22:31:10 +0100] rev 8630
[doc] fix function name FTIRANK
Adrien Di Mascio <Adrien.DiMascio@logilab.fr> [Thu, 20 Dec 2012 12:15:57 +0100] rev 8629
[json] enable jsonexport selection on empty rsets (closes #2544358)
Adrien Di Mascio <Adrien.DiMascio@logilab.fr> [Thu, 20 Dec 2012 12:14:14 +0100] rev 8628
[test] fix req default value handling in CubicWebTC.view (closes #2544376)
It's no more than the standard ``if rset`` vs. ``if rset is None`` error.
Aurelien Campeas <aurelien.campeas@logilab.fr> [Wed, 19 Sep 2012 17:16:04 +0200] rev 8627
[ajax] fix attribute lookup (closes #2491038)
Aurelien Campeas <aurelien.campeas@logilab.fr> [Tue, 11 Dec 2012 18:20:00 +0100] rev 8626
[server] add debugging for Hooks & Operations (closes #2470048)
Vincent Michel <vincent.michel@logilab.fr> [Fri, 14 Dec 2012 14:08:14 +0100] rev 8625
[dataimport] Add SQL Store for faster import - works ONLY with Postgres for now, as it requires "copy from" command - closes #2410822
This store will use:
- copy from for massive insertions.
- execute from for update.
The API of this store is similar to the other stores.
Pierre-Yves David <pierre-yves.david@logilab.fr> [Mon, 26 Nov 2012 12:52:33 +0100] rev 8624
[test] swap order in assert of `test_users_and_groups_non_readable_by_guests`
unittest2 order is (expected, got), not the opposite. This help test report
readbility.
Pierre-Yves David <pierre-yves.david@logilab.fr> [Mon, 26 Nov 2012 19:47:12 +0100] rev 8623
[test] fix server/querier/build_descr1 test.
There is no self.transaction of TestCase. I assumed the test writer meant a
session. This seems to make the test pass.
Pierre-Yves David <pierre-yves.david@logilab.fr> [Tue, 27 Nov 2012 12:36:33 +0100] rev 8622
[server] make `test_bfss_fs_importing_transparency` less verbose on failure
Dumping the whole content of a file on failure is a bit annoying. We only print
the bad version here (it's usually the file path).
Pierre-Yves David <pierre-yves.david@logilab.fr> [Fri, 23 Nov 2012 17:12:58 +0100] rev 8621
[entity] drop redundant cache update
This ``cw_attr_cache`` update is redundant, ``_cw_update_attr_cache`` already do this step.
Nicolas Chauvat <nicolas.chauvat@logilab.fr> [Mon, 03 Dec 2012 13:22:10 +0100] rev 8620
[cw-ctl] silence msgcat and msgfmt (closes #2527594)
David Douard <david.douard@logilab.fr> [Wed, 12 Dec 2012 22:13:38 +0100] rev 8619
Added tag cubicweb-debian-version-3.15.7-1 for changeset c5400558f370
David Douard <david.douard@logilab.fr> [Wed, 12 Dec 2012 22:13:37 +0100] rev 8618
Added tag cubicweb-version-3.15.7 for changeset d8916cee7b70
David Douard <david.douard@logilab.fr> [Wed, 12 Dec 2012 22:11:52 +0100] rev 8617
prepare 3.15.7
Sylvain Thénault <sylvain.thenault@logilab.fr> [Tue, 04 Dec 2012 13:41:20 +0100] rev 8616
[migration] fix crash when adding a new meta relation type. Closes #2532483
David Douard <david.douard@logilab.fr> [Mon, 10 Dec 2012 11:50:42 +0100] rev 8615
[ldapfeed] fix connection leak (closes #2532528)
David Douard <david.douard@logilab.fr> [Tue, 04 Dec 2012 16:16:08 +0100] rev 8614
[zmq] add an introductive docstring on ZMQComm
Sylvain Thénault <sylvain.thenault@logilab.fr> [Tue, 11 Dec 2012 16:14:57 +0100] rev 8613
[server config] on quick start, system source is still activated. Closes #2535714
Pierre-Yves David <pierre-yves.david@logilab.fr> [Tue, 11 Dec 2012 17:07:57 +0100] rev 8612
[web] use `inline` `Content-Disposition` by default (closes #2535734)
since known time we have been serving static file with a `filename` parameter on
the `Content-Disposition` header. But since d74addac92bb we explicitly serve
file as attachment if a filename is provided. However this is valid to have
`inline` disposition and `filename` parameter. This changeset revert this part
of d74addac92bb, going back to `inlined` by default.
`IDownloadable` code explicitly request `attachment` content to preserve
expected behavior.
Pierre-Yves David <pierre-yves.david@logilab.fr> [Tue, 11 Dec 2012 16:57:18 +0100] rev 8611
[web] allow configuration of the Content-disposition value
The `set_content_type` function now takes and optional `disposition` parameter
to control the value of this HTTP header.
Use of `Content-disposition: inline` with a filename parameter are valid, so
the presence of filename does not allows to choose between `attachment` and
`inline`
Pierre-Yves David <pierre-yves.david@logilab.fr> [Tue, 11 Dec 2012 17:17:40 +0100] rev 8610
[downloadable] fix filename HTTP header for simple name with space (closes #2535715)
Since d74addac92bb, we export simple ascii filename without any encoding in the
`filename` parameter of the `Content-Disposition` header. If this name contains
space this will fails, the parameter value will be truncated at the space
position. (eg. `filename=jungle babar.txt` read as `jungle`)
We need to quote the filename to prevent this (eg. `filename="jungle babar.txt"`).
Then literal quote and backslash needs to be escaped too.
The new escaping is correct according this extensive test case data base:
http://greenbytes.de/tech/tc2231/
Nicolas Chauvat <nicolas.chauvat@logilab.fr> [Mon, 03 Dec 2012 00:03:03 +0100] rev 8609
merge fixes from stable
David Douard <david.douard@logilab.fr> [Fri, 30 Nov 2012 21:19:36 +0100] rev 8608
Added tag cubicweb-debian-version-3.15.6-1 for changeset b05e156b8fe7
David Douard <david.douard@logilab.fr> [Fri, 30 Nov 2012 21:19:35 +0100] rev 8607
Added tag cubicweb-version-3.15.6 for changeset 0163bd9f4880
David Douard <david.douard@logilab.fr> [Fri, 30 Nov 2012 21:18:05 +0100] rev 8606
prepare 3.15.6
David Douard <david.douard@logilab.fr> [Tue, 27 Nov 2012 14:48:03 +0100] rev 8605
[web] add a digital signature to error form (closes #2522526)
Simple (and quite weak) implementation of a digital signature of the content
to be submited by email in the error report view generated by ErrorView.
The signature is a simple hmac hash computed using a secret key (generated at
repository startup) and the "secret" form content to be included in the
notification email. The controller can then check this content has not been
modified or forged by a malicious user.
Nicolas Chauvat <nicolas.chauvat@logilab.fr> [Wed, 28 Nov 2012 11:44:15 +0100] rev 8604
[web/views] bugfix: the mime type is text/plain, not text/txt (closes #2526345)
Arthur Lutz <arthur.lutz@logilab.fr> [Tue, 27 Nov 2012 17:16:23 +0100] rev 8603
[doc] fix of personnal etc directory in book
David Douard <david.douard@logilab.fr> [Tue, 27 Nov 2012 12:24:56 +0100] rev 8602
[web] add a Forbidden exception
This is similar to the Unauthorized exception, but generates a 403 error
instead of a 401 (Unauthorized)
Katia Saurfelt <katia.saurfelt@logilab.fr> [Tue, 27 Nov 2012 11:38:03 +0100] rev 8601
[web] add a ``anonymize-jsonp-queries`` option in file configuration (closes #2465388)
This option controls connection anonymizing before executing any query
for CSRF / safety reason.
Pierre-Yves David <pierre-yves.david@logilab.fr> [Tue, 27 Nov 2012 11:27:49 +0100] rev 8600
[downloadable] fix filename in HTTP header (closes #2522325, #2522324)
Before this changeset we use the `filename` header with utf8 encoded filename
all the time.
However RFC6266 says:
The parameters "filename" and "filename*" differ only in that "filename*"
uses the encoding defined in [RFC5987], allowing the use of characters not
present in the ISO-8859-1 character set ([ISO-8859-1]).
Therefore, we alter the code to:
1. Use `filename` and `ascii` encoding whenever possible,
2. use `filename*` with `utf8` encoding otherwise (with a filename fallback for
old browser)
We also switch the `content-disposition` value to attachement if filename is
specified, this will result as a mandatory download according to RFC6266. This
mandatory download is the expected behavior.
We changes the filename encoding to RFC5987 which is simpler, supported by all
and modern browser (including IE from version 6) and does not suffer from the
continuation issue. (see ticket #2522324 for details)
Sylvain Thénault <sylvain.thenault@logilab.fr> [Tue, 27 Nov 2012 11:18:42 +0100] rev 8599
docstring typo
Sylvain Thénault <sylvain.thenault@logilab.fr> [Thu, 22 Nov 2012 16:13:43 +0100] rev 8598
[facet] make BitFieldFacet allow special 0 value. Closes #2522697
Nicolas Chauvat <nicolas.chauvat@logilab.fr> [Fri, 16 Nov 2012 12:28:30 +0100] rev 8597
[doc] ubuntu LTS is now Precise Pangolin
Sylvain Thénault <sylvain.thenault@logilab.fr> [Fri, 16 Nov 2012 11:53:17 +0100] rev 8596
backport stable
Arthur Lutz <arthur.lutz@logilab.fr> [Fri, 16 Nov 2012 11:52:06 +0100] rev 8595
[server] implement base_url with secure=True (closes #2508638)
Sylvain Thénault <sylvain.thenault@logilab.fr> [Fri, 16 Nov 2012 11:41:38 +0100] rev 8594
[validation api] properly use yams 0.36 validation error api and update message catalog. Follows bbe0d6985e59
the creation of the `translate` method in the 23a10f049447 yams commit.
Pierre-Yves David <pierre-yves.david@logilab.fr> [Fri, 09 Nov 2012 15:27:40 +0100] rev 8593
[wsgi] saner use of `self.config` instead of `config`
Pierre-Yves David <pierre-yves.david@logilab.fr> [Fri, 09 Nov 2012 17:14:18 +0100] rev 8592
[server] fix repository initialisation
Changeset d753d6a6798f was breaking database creation. Dropping the
`config.creating` clause lead to trying to load the schema from database even in
creation mode. Conditional are a bit altered and reordered to prevent this to
happen.