[security] fix read rql expression insertion: we should not insert rql expr on variables only referenced in neged relation

[rql2sql] test and fix crash when OR in HAVING where both expresion are 'fake' having terms (eg not using aggregat function)

cleanups

[config] use hashlib to avoid warning w/ py2.6

[req] hashlib has no hash function, but has an hash1 function even in python 2.5

[utils] improve repr() of RepeatList

[doc] fix typo

[selectors] use before-registry-reset event to init is_instance cache: cleaner code and avoid reloading bug (making hooks test fail for instance)

[vreg] new [before|after]-registry-reset event, taking vreg as argument

[doc] update book for adapters

[reledit] fix relation cardinality handling

[selectors] provide a new, optimized, is_instance selector that should at some point replace implements (along with the adaptable selector)

[web/views/massmailing] fix cancel button msg/icon

[testlib] improve test description messages

[web/views/reledit] fix typo (-add we used as id component in delete id)

[web/test] fix test (doreledit must have a formid and this is now checked)

[web ui] add missing image

[ITree] small fixes: parent_entity is a IBreadCrumbs method, we should use .parent on ITree

restore bw compat on Entity.related_rql

reledit refactoring * js handling rewritten to exploit all form capabilities (such as file upload ...) * attribute-like composite relations (one ttype, cardinality in '?1' from composite side) are more cutely handled, with a 'add'/'delete' additional actions/icons * a reledit_ctrl rtag to finely control: reloading, edition and default values * a proper chapter in the documentation (book) * many bugfixes

backport stable

cleanup

[idownloadable] make the download view http cache friendly

[publisher] avoid useless rollback after successful commit, which clutters debug logs and may also not be cost-free

[controller] same method defined on the base class

backport stable

merge stable heads

Added tag cubicweb-debian-version-3.8.6-1 for changeset 607a90073911

Added tag cubicweb-version-3.8.6 for changeset 1a24c62aefc5

[dbapi] refactor so that cw 3.8.6 can still speak with a 3.8.5 server

cleanup

[bfss] fix file update to ensure file's content is available on the fs asap... and not only at commit time. So it's consistent with entity creation behaviour. The new file is created at assignement time and removed if the commit is rollbacked.

[ldap] fix exception handling on authentication error

[ldap] cleanup password checking

cleanup

[css] make body bg color configurable

bump version number to trigger migration

3.8.6

[migration] schema should be accessed through .repo

backport stable

[security] use set_operation for relation permission checking operation

[migration] refactor schema migration fix introduced by 5833:d7256ae7c1d1 so the code looks better and avoid clutering lgdb api. Depends on lgdb 1.0.5.

[schema migration] fix name error introduced in parent changeset

[schema migration] avoid potential duplicated ft reindexation due to multiple UpdateFTIndexOp operations by using set_operation

[sql generation] fix bug with inlined relation and referenced by other neged relation we should check in that the column is not null in such cases

[refactor] refactor rtag keys generations.

[fix] fix a uicfg bug in autoform_section When several rtags matches the same relation (for example "* login *" and "CWUser login *") inconsistent rtag could be merged.

[debian] fix logrotate error introduced by 5806:9ef0e95f4d2b: sh don't want spaces here

[debian] fix logrotate error introduced by 5806:9ef0e95f4d2b: sh don't want spaces here

cleanups

[login form] fix bad login field label by using pgettext

updated docstrings on Operation class

do not allow password-less bind: windows accepts this as Anonymous Logon

[#969169] don't display remove link in edition forms if the cardinality is 1

fix name error

fix schema migration hooks (partial) SQL Server requires some additional steps to alter columns (index drop and restore, etc...) and this in turn requires passing a connection on the DB to find out the indexes. Also partially fix an issue where the null_allowed value was not correctly computed. Still some problems in there (see https://www.logilab.net/cwo/ticket/1109558)

delete trailing whitespace

Had thought this could be done in cube, but it really needs to be done earlier in the migration process

EntityFormRenderer redefine open_form and add a div section, so redefine close_form to add the closing div tag

Backed out changeset c29c90223125 which breaks the cw tests

EntityFormRenderer redefine open_form and add a div section, so redefine close_form to add the closing div tag

reduce log verbosity in ldapuser source

[session] refactor session handling so that when calling session.close(), pool of long running transaction of the same session is properly freed

[debug views] set http cache max age to 0 on debug views

cleanup

[schema view] width isn't in authorized th attribute in xhtml DTD. katia, please do it another way.

[schema view] fix typo

[rql2sql] #1089207: do not encode Unicode strings from RQL statements to db encoding

fix bad merge

[css] more css rework, need visual test in compat/new modes

backport stable

[config] fix dumb name error

[form] apply patch #933771: format_single_value / vocabulary methods should *always* return actual value as an unicode string

backport stable

[repo] fix 'c-c start --loglevel LEVEL' for repository only configuration. Closes #1058269.

[transaction w/ separated web/repo processes] the dbapi should explicitly specify a transaction id to avoid confusion when web server / repository run in separated processes

[dbapi] Connection.load_appobjects should load site_cubicweb files as well, they may contains necessary RQL extension function definitions. Also kill some broken deprecated code in this method.

backport stable

Added tag cubicweb-debian-version-3.8.5-1 for changeset 5d05b08adeab

Added tag cubicweb-version-3.8.5 for changeset 2de32c0c293b

[repo] call entity.check() once before_update hooks has been called, to let them a chance to transform data

3.8.5

[debian] #1027463: logrotate script should filter out warnings

[schema migration] fix fix introduced in 5803:589e2e3fb997, test for backend alter column support should be done in the operation, else the associated index is not dropped while this is supported

[schema migration] fix backend compatibility issue by using type_from_constraints / sql_change_col_type instead of bare ALTER COLUMN

[schema migration] don't try to drop column if backend doesn't support column alteration (eg sqlite)

[session] when rollback_on_failure is false, we should not try to reconnect if the sql raised an error

Use SQL standard ALTER TABLE command (with ADD instead of ADD COLUMN)

reduced logging verbosity in ldapuser source

use sessionid in log message

constraints can contain unicode values

[entity] fix .complete so we don't crash on missing mandatory relation. Also simplify code. Closes #1058267

closes #1059729: cw-ctl upgrade : i18n upgrade not performed if DB does not need upgrade

[devtools/qunit] prefix jquery_dir with 'file://' (as this is used from within a web browser)

[devtools/qunit] Locate jquery through cubicwew config to handle installed setup

[rql2sql] use new dbhelper.sql_concat_string function to deal with sql string concatenation. This together with lgdb 1.0.4 fixes #1055133: SQL Server support : string concatenation issue

[session] update session's timestamp in session.execute, so long running transactions are not erroneously closed by the repository

[repo session] expected argument is the source, not the session

[devtools/qunit] in safe mode, ffox launches a stupid popup

[ldapuser] quieter ldap result info, fix commented block style

[qunit] use safe mode for firefox

[qunit] Move qunit.js and qunit.css in devtools/datadirectory

[test] fix stupd name error

[test] fix test w/ closed connection pb

[ms] orderby/groupby/having attributes of Select node should be resetted to empty tuple, not None

[devtools/teslib] be more defensive on rollbacks

[rql2sql] when using HAVING to by-pass rql limitation (not to filter on result of an aggregat function), we should emit SQL that doesn't use HAVING to avoid potential backend error because variables are not grouped. Closes #1061603.

[doc/book/faq] question on security

[qunit] check that the browser has not died by himself before we asked him to stop.

[qunit] improve output of suprocess error The exception message now include the stdout and stderr of the called process

[test] workaround connection leak making tests fail under windows environment (though we've still probably some open connection leak to resolve...)

[web request] in python 2.5 hashlib has no .hash attribute

[web actions] fix recent refactoring, leading to missing redirect parameters in action's url

[packaging] more cleanups, handle javascript test files

backport stable

[facet] use vreg.parse so the rql syntax tree is properly annotated as well

[text search] fix fulltext_container indexation

[md5script] cleanup

[py2.6] use hashlib to silence python 2.6 deprecation warnings

[autoform] do not show remove link for inline form if card == 1