[session] promote usage of [deny|all]_all_hooks_but session methods rather than hooks_control context manager directly

[web app] move set of status_out into validation_error_handler to ease readability

[workflow test] don't use session.user, subject to internal changes

[db creation test] more testing of db initialization: call build_db_cache and ensure admin user exists

[source synchronization hooks] Fix/enhance system source hooks They are broken if launched during repository initialization (this was not the case yet, but will be soon...). Add additional checks to ensure one doesn't try to store system source config in the database, as it will be ignored in favor of the "sources" file.

[validation error] refactor validation error handling so translation is done on the web side Users should now use cubicweb.validation_error helper function that will activate the feature with other handy behaviours. Also test testing for message in errors should call exception.tr(unicode) before comparing. Using bare ValidationError keep backward compat.

[repo cleanup] drop code moved to querier by 7e264ce34cd4

[repo cleanup] drop code moved to querier by 7e264ce34cd4

Added tag cubicweb-debian-version-3.15.4-1 for changeset 70cb36c826df

Added tag cubicweb-version-3.15.4 for changeset 63260486de89

[facets] add link 'focus on selection' (closes #525277)

[server/utils] catch ValueError from password verification passlib can raise ValueError when it can't recognized a hash. Treat that as a wrong password.

[test] reindent and use request() rather than bare session this avoid error due to implementation details of session

[repo] fix debug code in DBG_REPO mode (closes #2469942)

[datafeed] properly call hooks for inlined relations on entity creation. Closes #2481156

[sources/native] automatically update passwords using deprecated hashes on login Closes #2465904

[repo pyro] fix previous commit: should not import Pyro in remoterql module/base class, it may be missing

massive copyright update to avoid clutering later patches

minor cleanups/typos

[session / querier] reorganize code to building result set descriptions

[web] search state doesn't need cnx, remove useless test

[schema] rename schema permissions function: session may also be a request, use _cw

[repo initialisation] during repo creation, load all hooks and entities code this simplify code and make it more consistent

[request/session] refactor language handling: don't attempt to sync web/repo languages This decouple thing and make code easier to understand. Previous behaviour was fine w/ validation error that were translated on the server side, but isn't satisfying for notification and all. Now: * translations should be done on the ui side (see previous validation error refactoring) * consistent behaviour: each side (web/repo) is responsible to deal with its request/session of language, no weird interaction between them on this topic * drop on the way the 'session properties' api, used only for that matter. -> much simpler/cleaner/saner api The thing missing being a way for user to tell "My favorite language is xxx but I also want cw to consider my http language header)

[config] turn internal configuration methods building appobjects search path into normal method rather than class method as this is useless and make path filters difficult to override (we had to override the class attribute, as instance attributes were not seen). Also rename related methods for consistency with current vocabulary

fix missing import

backport stable

[hooks/syncshema] fix logging level and nicer message (wrong changeset published previously)

[hooks/syncschema] do not crash on DROP of an already dropped index/... (closes #2465393)

[cwctl] show a better diagnostic message on version violation (closes #2464800)

[tabs] fix pb with non-lazy tabs: style isn't properly set due to missing jquery.ui activation. Closes #2465657 also do a small cleanup on the way, and properly implements render_entity rather than cell_call, as one would expect regarding default PrimaryView code.

[migration] fix backward compat for rename_relation

[datafeed] make cnxset handling of datafeed source more robust currently we may run in some cases where the session has no more cnxset depending on errors and parser's handling of the cnxset. Also, free the cnxset and reacquire it later, letting a chance to other threads to run.

don't use rset.rowcount in predicates, this makes them usable with other types such as lists

[c-c db-check] don't skip is/is_instance_of mandatory relation to avoid telling two opposite messages when the relation is missing. Closes #2465659

[ui tabs] avoid duplicate rset argument if already specified in tab kwargs. Closes #2464786

[entity edition] don't remove values from attribute cache on the repository side This follows changesets 552de9f0c46d, 1527b012802f, 25da1e5c7c50 and 4ba11607d84a. closes #2423719 ?

fix ldapuser test

Prepare 3.15.4

migration: replace empty passwords with random ones on upgrade

ldapuser2ldapfeed: create CWUsers with random passwords, not empty ones

[source/native] only system source users should be authenticated by the native source (closes #2465883)

[web test] fix test broken by 199fefe396ab

[fti] add some documentation

[form] add assertion to ensure field has a name when `role_name` is called

Added tag cubicweb-debian-version-3.15.3-1 for changeset 7ad423a5b6a8

Added tag cubicweb-version-3.15.3 for changeset 0e012eb80990

[pkg] prepare 3.15.3 release

[entity edition] stop comparing values as it may trigger exceptions (e.g. timeseries cube tests) Rely on a changes in yams instead where we have guarantee to have only comparable objects. This follows changesets 1527b012802f, 25da1e5c7c50 and 4ba11607d84a, and should definitly closes #2423719

[tabbed view] make tabs optionaly lazy: lazy=False on the tabbed view trigger synchronous tabs. Closes #2443038 This is useful for tabs holding a self-posted form for instance.

[web form] refactor Form.__init__ so that extra kwargs are set earlier in the process. Closes #2443040 (eg if you want to use them in .session_key)

[test rql completion] dont limit number of completion, else we've impredicable results. Also should tell rql.parse to not print error on stdout This repairs test introduced by dcd9bc1d1bca which closes #2439846

[entity] fix deprecation warnings (closes #2423719)

merge oldstable in stable

Added tag cubicweb-debian-version-3.14.9-1 for changeset 68c762adf2d5

Added tag cubicweb-version-3.14.9 for changeset 9337812cef6b

[ui] provide an autocomplete RQL bar (closes #2439846)

[ajax] improve backward compatibility for redefined ajax functions (closes #2447189) If an ajax function from stdlib (e.g. js_reledit_form) was redefined in a cube, the cube version should still takes the precedence< => check for existing ajax function on deprecated controller _before_ checking ajax function availability on the new one.

prepare version 3.14.9

[composite] apply composite on new enty too (closes #2450679) Before this changesets, automatic deletion did not applied to entity created in the same transaction. This patch remove this filtering in the dedicated operation. The original filtering where introduced by 5d889b4928bb but no rational where found for this changes. The former behavior is seen as inconsistent and creates bug in some cubes.

[storage] relies on event=='deleted' to detect "delete" event (closes #2450680) When we delete a previously edited entity, it *will* have a cw_edited attribute even if the goal is to delete it. The function get an argument that explicitly contains the "delete" event. The code now uses that instead.

[composite] apply composite on new enty too Before this changesets, automatic deletion did not applied to entity created in the same transaction. This patch remove this filtering in the dedicated operation. The original filtering where introduced by 5d889b4928bb but no rational where found for this changes. The former behavior is seen as inconsistent and creates bug in some cubes.

[storage] relies on event=='deleted' to detect "delete" event When we delete a previously edited entity, it *will* have a cw_edited attribute even if the goal is to delete it. The function get an argument that explicitly contains the "delete" event. The code now uses that instead.

[web navigation] previous / next icons are missing mandatory alt attribute

[testlib] consider rset for template / view selection (closes #2447183) The original code did something like: kwargs['rset'] = rset viewfunc = lambda **k: viewsreg.main_template(req, template, **kwargs) kwargs.pop('rset') return self._test_view(viewfunc, view, template, kwargs) meaning that by the time ``viewfunc`` (i.e. the lambda function) is called, ``rset`` was popped from ``kwargs`` and had no chance to be passed to ``main_template``.

[documentation] fix some ReST compilation problems

[test] remove no more necessary attribute cache manipulation to repair test

[entity] more tweaks for entity attribute cache handling on cw_set/cw_create to fix test regression * when an attribute is listed in dont-cache-attrs, purge any previous value * test value is actually modified in EditedEntity.__setitem__ before adding attribute to dont-cache-attrs

[entity/hooks] fix regression introduced by 4ba11607d84a on create_entity, attributes weren't cached, but they are since 4ba11607d84a and this triggered a bug: used values may be transformed by hooks (e.g. TidyHtmlFields), ending in invalid value in the cache. This is the regression. Now, set_attributes used to update the attributes cache while suffering from the very same pb. This is the now fixed old bug. Transformed attributes are now recorded in a transaction shared variable, and those are omitted from the client cache.

[doc] use :meth: and remove doc to deprecated methods

[doc] add passlib to list of dependencies

Added tag cubicweb-debian-version-3.15.2-1 for changeset 9aa5553b2652

Added tag cubicweb-version-3.15.2 for changeset 2afc157ea9b2

[test] missing future import

[web test] fix tests broken by 8de41063d629

3.15.2

[web login] fix after login redirection: redirect expect an url not a relative path. Breaks on cases like '?vid=aview'. Closes #2423575

[config] load_configuration should not crash because of fs errors. Closes #2286215

[entity api] unify set_attributes / set_relations into a cw_set method. Closes #2423719 Allowing similar usage as create_entity/cw_instantiate. Update cw code base to remove deprecated calls.

[workflow ui] fix state/transition edition form on existing entity. Closes #2423531 It should not return unrelated entities only in case where the entity exists. Also fix a deprecation warning, vocabulary values should be an unicode string.

[predicates] fix predicates that erroneously evaluate the entity passed as a parameter as a boolean, instead of testing its existence in the keyword arguments -using the kwargs.get('entity') idiom instead of 'entity' in kwargs or similar- ; closes #2424288

[book] fix build warnings/errors. Closes #2430042

[ldap feed] add missing future import

[ldap feed] fix error since with read security activated, password value is not selecteable (closes #2406597). Also add a note in the book about packages required to connect to an ldap server

[config] Set CWDEV, aka dev mode, according to presence of the i18n directory, not .hg

[book] Some tweaks to fix cubicweb-documentation package generation - Fix up PYTHONPATH setting to make sure sphinx can find cubicweb modules - Add a few missing build-dependencies

[webconfig] debug mode should not be special wrt data_url handling (closes #2405487)

[test] missing future import

[ldap] allow working connection to some ADs (closes #2408829)

[entity] fix unrelated_rql for creation form vocabulary for relation with specific permissions (closes #2423854)

[form widgets] fix JQueryDatePicker and JQueryTimePicker so they consider widget custom attributes. Closes #2423720

[web app] handle Redirect raised during session establishment, as this may be used by eg openid authentication. Closes #2430018

backport stable

[ldapuser2ldapfeed] fix confusing script structure and decode the extid to avoid an UnicodeDecodeError (closes #2413437)

[migraction] rename rename_relation method to rename_relation_type for consistency

[web app] only log tb when explicitly asked

typo

[views/tables|css] show actions in small tabs instead of menu indirection (closes #2004109)

stable is now 3.15

oldstable is now 3.14

[test] update server security test using login and new temporary_permissions context managers

[testlib] introduce temporary_permissions context manager Fix a test failure due to cached method on the way as usage of the context manager enforce proper interaction with schema objects

[rql2sql] remove debug print and fix bug introduced in 8469:69ad9a509bc3

[html form] use __linkto url parameter value as a default value of the corresponding field in a creation form (closes #2407770)

[rql2sql] fix generated SQL when an attribute relation with a variable is ored with another attribute relation. Closes #2410405

[repository] drop unused argument

[ui] actions box should be displayed if there are some actions, not if context is an entity. Closes #2419040

backport stable

[packaging] bump rql dependency to 0.29 (closes #2410042) Needed for add_eid_restriction with 4 args, usage of which was introduced in changeset aed065b97f12 (refactor entity fetch_rql method to use a RQL syntax tree instead of RQL strings)

[rql security] fix rql bug when using yams inheritance and read permissions (closes #2410156) problems occurings when querying using is_instance_of while a subtype has some permissions not shared by the parent type

[c-c schema] devtools: the output file for cw-ctl schema is not supposed to exist When using the 'file' type, logilab-common errors out if the file doesn't exist. Which, if the option refers to an output file, is not so useful. Use 'string' instead.

[fti] allow usage of custom RQL to fetch entities to index (closes #2410509)

[fti] make db-rebuild-fti accept etypes on command line (closes #2410508)

backport stable

[fti] drop entity cache once an etype is indexed (closes #2410507)

[server/utils] add_looping_task can be used any time (closes #2408814)

[formrenderers] if a tag object gets there, it blows (closes #2410462) - cwtags monkeypatches cubicweb's UStringIO's .write and .getvalue methods - but it cannot monkeypatch list.append ...

[login] redirect to real instance root if no postlogin_path is provided When not postlogin_path is provided, the login form issue a redirect to "/". The instance root may not be at "/" on the server. Then issuing a redirect to "/" send the user to the wrong location. We now redirect to "." which works fine because the "login" controller a direct children of instance root (http://babar.com/instance/login). All other redirection of the login controller use relative path too and then rely on this relative path from the login controleur to the instance root. This mechanism may be considered fragile and may deserve a proper fix. but this is to be discussed and implemented in another changeset.

[web/application] declare default 'content' value sooner (closes #2406560) It may be used while processing AuthenticationError. Such error may be raised before the former declaration.

[views/tabs] fix rql/eid param conflict when either one is already in the request form (closes #2405249)

Added tag cubicweb-debian-version-3.15.1-1 for changeset fe5e60862b64

Added tag cubicweb-version-3.15.1 for changeset 783a5df54dc7

[debian] prepare 3.15.1-1

[server/tests] fix tests

[registry|ajaxcontroller] the @ajaxcontroller decorator ought to return a compatible object (closes #2385155)

[cwconfig] shutup on absent i18n/ mo files when in operating in tests

[datafeed] correctly distinguish checked/updated

[ldapfeed] do not crash on ldap user deletion + pull + already deactivated users, cleanups (closes #2392933)

[server/session,repo] turn InternalSession, hence repo.internal_session, into a context manager (closes #2393651)

[ldapparser] missing return

[ldapparser] remove spurious print

fix ldap removal handling in ldapfeed (closes #2376625 and #2385133)

[ldapfeed] fix crash on sql cursor usage (closes #2380246)

[sources/ldapfeed] do not user cwuri as url (closes #2380324)

[web/views/staticcontroller] safety belt for unguessed mimetypes (closes #2380304)

[server/hook] fix identation

backport stable

Added tag cubicweb-debian-version-3.14.8-1 for changeset 81394043ad22

Added tag cubicweb-version-3.14.8 for changeset 15fe07ff6872

[css] do not use display:block for all images, but only for rest generated

3.14.8

[css] make ReST align statement works for images (closes #1280176)

[doc] cubicweb.view documentation (closes: #2099962)

[docstrings] typos corrected

[views] enable paginate toggle on RsetTableView (closes #2200675)

[ui] display author name in box instead of login (closes #1529147)

[doc] remove deprecated doc (wrong link) (closes #2329206)

Fixes for compatibility with passlib 1.6 (closes #2356393) Somebody missed the memo about API backwards compatibility: - calc_checksum is renamed _calc_checksum - passlib.utils.handlers.GenericHandler strict keyword removed - bytes vs str vs unicode issues

[formrenderers] Factor-out render_title to ease customisation in derived classes

[IE] use document.createStyleSheet to add CSS dynamically (closes #2356261)

[pkginfo] the before_shutdown event was not in 3.15.0

[migration] do not crash if the conf file is already migrated (closes #2361061)

[datafeed] fix/finish cleanup started by auc in 8393:c25b96ae4f8a: parser.process prototytpe is (url, raise_on_error=False). Drop partialcommit argument which were never specified

backport stable

[logs table view] properly translate level buy using the correct msgid. Closes #2356329

[data import] don't crash if value isn't in the file, simply no key/value in the output dict. Closes #2356328

[logs table view] only put values starting with http in <a> tag

[db-api] fix typo leading to crash on client connection (config has no translations). Closes #2357044

[data import] allow a request to be given as argument, ease use from web ui

[datafeed] allow the xml datafeed parser to work with client-side connections

small doc updates

[ldapfeed] properly mark email address as encountered during import to avoid deleting them

[merge] backport stable

[server/utils] passlib 1.6 is now less tolerant wrt handler names (closes #2349330)

backport stable

[web] remove some unused imports

[selectors] make multi_columns_rset work with a simple list of lists

[server/hook] a tiny bit of doc about before_server_shutdown

[events] add a new before_shutdown event (closes #2345728)

[ldapparser] cleanup

[ldapparser] reapply dropped fix

[app] turn these info into debug logs (this being too chatty for .info)

fix static file serving when url has parameters (like cache busters do)

[repo test] Avoid hangs in zmq repo unit test - interaction through the zmq event loop from a different thread is only allowed through add_callback - notify the background thread when the client dies with an exception so it doesn't spin forever

[ldap] we may actually get back password from ldap

[ldapfeed, test] use default source config

[ldapfeed, test] use a safe internal session, as in real life

[datafeed] give a dictionary as sourceparams to avoid crash if attempt to import the user is done

[yams] Binary instance passwords should not be given to str()

[ldapfeed] don't crash if entity is None. Closes (superficialy) #2341266

[merge] backport stable fixes

[bin/clonedeps] fix NameError (closes #2334080)

[sources/native] do not let a log message crash on us

[merge] backport stable

[cwconfig] impose an order on appobject paths processing: entities first (closes #2330799)

[serverctl] avoid a crash if zmq-address is not defined/empty (config.get is a false friend wrt dict behaviour)

fix an horrible typo

[migration/3.14.4] prevent migration crash when there are NULLs in asource

Added tag cubicweb-debian-version-3.15.0-1 for changeset 925db25a3250

Added tag cubicweb-version-3.15.0 for changeset 0642b2d03aca

typo

3.15.0

[static web] fix fckeditor static files delivery: remove leading subpath and url parameters from computed file path

[doc] 3.15 services api description

[service-api] Add unified service API on `_cw` attribute This will allow writting generic entity code that could run on both client and repo side. This addition have been discussed with Sylvain Sylvain Thenault.

fix ``call_service`` API and add test service API ``call_service`` was taking a session argument. But Service is an AppoObject and already has the same session accessible as ``self._cw``.

[skel] update newcube skeleton (closes #2312509)

[doc] improved 3.15 blog using developpers'contributions

[devtool-testlib] add deprecated entry point for publish method 6c2119509fac renamed ``publish`` to ``handle_request``. And removed the older testlib function (because the semantic of handle_request is quite different from the publish one). However it seems to do more harm that good and I'm adding proxy with deprecation warning for those.

[doc] improve 3.15 release blog

[web/views/staticcontrollers] restore windows compat

Added tag cubicweb-debian-version-3.14.7-1 for changeset 20ee573bd237

Added tag cubicweb-version-3.14.7 for changeset 3ba3ee5b3a89

3.14.7

[3.15 migration] repo-uri is a c-c command option and does not need migration since it doesn't exist in the configuration file

[remote rql source] fix super call

[zmq] Add a new ZMQ-based RQL source (closes #2290203)

[pyro] Refactor the pyrorql source Extract most of the code that is not related to Pyro from PyroRQLSource in a new RemoteSource abstract class.

[zmq] add unit tests for ZMQ-based repository (server and dbapi)

[dbapi] add possibility to connect to a remote ZMQRepository (closes #2290126)

[repository] fire 'server_shutdown' hooks before waiting for theads This is required for threaded tasks that use the 'server_shutdown' hook to die properly, as for example the ZMQ server in an all-in-one configuration

[zmq] Implement a ZMQ-based Repository (closes #2290125) This Repository server behave mainly like the Pyro-based repository.

backport stable

[test] update create_user call

[test] use setUpClass rather than setUpModule to avoid inter-dependency pb with CubicWebTC sub-classes

[test] with yams#stable, ordernum is different than with yams#default

[bin] Force clone_deps.py to use mercurial command-line interface - closes #2296057

[table view] EntityTableView should accept **kwargs as RsetTableView

Fix a Python 2.5 regression introduced by previous commit

[rql annotation] fix has_text_query detection (if coming from sub-query and if has_text on a column aliases. Closes #2275322

[etwist] fix static directory serving; closes #2174797

[form renderer] refactor inline form renderer to ease overriding. Closes #2282662

[devtools] fix bashism in xvfb-run.sh bash's trap builtin accepts SIGUSR1, whereas dash complains. So use USR1 instead.

[devtools] fix xvfb-run.sh permissions (exec bit)

[form] add a new property telling if the form is being generated or posted. Closes #2262340

[workflow] set default test/plain option for workflow default comment (closes #993083)

[js] get rid of `partial` function (closes #1972794)

[css] change `h3` and `h4` styles(closes #893244)

querier: Improve error message when ERQLExpression fails on some entity (closes #2267081) When an RQL variable is indeed "constant" (we know it's eid) ERQL expression are not inserted but checked prior query execution. If the session have no read access to the entity an `Unauthorized` exception is raised. This changeset add a meaningfull message to this exception:: No read acces on "X" with eid 42.

[js] fix error in loadRemote docstring

[doc] add missing section titles

[doc] fix bad indentation

[server/ldaputils] do not allow ldap.server_down to crash on us

Add missing with_statement import for python2.5 compat

[devtools] make xvfb-run not wait 3s each time (closes #2265710) Ask Xvfb to tell us when it's ready instead of unconditionally waiting 3 seconds. Sync from http://anonscm.debian.org/gitweb/?p=pkg-xorg/xserver/xorg-server.git;a=blob_plain;f=debian/local/xvfb-run;hb=HEAD

[view] breadcrumbs layout broken with long elements (closes #1347486)

[static-file] return Unauthorized on blocked directory listing This is more appropriate than 404 NOT FOUND

[login redirect] only add postlogin_path argument when meaningful

static-file: properly set/use cache header for static file (closes #2255013) This changesets enables the standard http cache mechanism where the static controller may reply "304 Not modified" based on `last-modified` in HTTP response and `if-modified-since` in HTTP query. The last modified time is computed using the file-system information. The pre-existing logic using an `Expires` header to prevent client from sending request stay in place. The new logic just prevents sending the file again if not necessary.

[repository] move task manager instantiation outside repository. Repository callers are in charge of providing a task manager. The task manager is optional when the repository is not a server. This part is not really expected to work well yet. But we aim to remove all task management responsibilities from the Repository object.