Aron Roberts [Fri, 9 Jul 2010 00:35:50 +0000 (00:35 +0000)]
CSPACE-2408: Client tests of the Movement service now generate UTC timestamps, in preparation for the possibility of storing timestamps in the Location Date field (or an equivalent Movement Date field).
Aron Roberts [Thu, 8 Jul 2010 03:48:42 +0000 (03:48 +0000)]
CSPACE-1692,CSPACE-2330: CollectionObject service now returns authority references for all current authref fields (6 PersonAuthority fields and 3 OrgAuthority fields).
Patrick Schmitz [Tue, 6 Jul 2010 15:56:46 +0000 (15:56 +0000)]
CSPACE-749, CSPACE-1643, etc. Added keyword search support to vocab and authorities. Added test for same to Person service. Modified the query builder to put the keyword search where clause into parens so this can be safely combined with other searches (like matching the inAuthority).
Patrick Schmitz [Sat, 3 Jul 2010 19:24:50 +0000 (19:24 +0000)]
NOJIRA - Ported Authority cleanup to Location. This also addresses a number of missing elements in Location, around authRefs, named access, etc. Also cleaned up some inconsistent naming on the field that tracks term status, across all the authorities. Finally, added in more checks in test code across the authorities to ensure that ClientResponse instances are cleanly released.
Patrick Schmitz [Sat, 3 Jul 2010 04:35:22 +0000 (04:35 +0000)]
NOJIRA - Refactored autorities support. Fixed several inconsistencies, and simplified the code. Still some more to do to port this to Location, and to make authRefs and refObjs support more consistent.
Patrick Schmitz [Tue, 29 Jun 2010 16:33:18 +0000 (16:33 +0000)]
CSPACE-600, preparation for CSPACE-849, and fixed CSPACE-2291. This refactors the bulk of the vocabulary doc handlers into a superclass. Will port these changes to Person, Org, and Location, to simplify the maintenance of these services. Also aligns vocabulary to the other Authority services, to provide a more consistent API.
Aron Roberts [Fri, 25 Jun 2010 18:20:35 +0000 (18:20 +0000)]
CSPACE-2242: Created client tests to demonstrate bug, identified by Chris, in which value instances of a repeatable single String scalar field are not persisted if the first value instance is blank. (Note that the failing Assert is currently commented out in this check-in to avoid triggering service test failures.)
Patrick Schmitz [Wed, 23 Jun 2010 06:26:51 +0000 (06:26 +0000)]
CSPACE-590, CSPACE-2126, modifying authorities to support shortIdentifier. This is now used to create refNames, and used to get by name. Updated associated utilities for creating authorities and items. Updated all the various tests that create authorities and instances.
Aron Roberts [Fri, 18 Jun 2010 23:36:53 +0000 (23:36 +0000)]
CSPACE-2180: Test case for a pseudorandom number generator in the ID service that returns probabilistic results now only generates warnings, not assertion exceptions, when the expected result is not obtained.
Aron Roberts [Fri, 18 Jun 2010 00:03:15 +0000 (00:03 +0000)]
CSPACE-2138: Added 'web' field, removed 'notes' field, in Contact schema, in the services, per latest changes to Limited for 0.8 Name Authority schemas on the wiki.
Aron Roberts [Thu, 17 Jun 2010 23:32:14 +0000 (23:32 +0000)]
CSPACE-2138: Changed 'status' field to 'termStatus' in Person schema, in the services, per latest changes to Limited for 0.8 Name Authority schemas on the wiki.
Aron Roberts [Thu, 17 Jun 2010 23:06:28 +0000 (23:06 +0000)]
CSPACE-2138: Changed 'status' field to 'termStatus' in Organization services schema, per latest changes to Limited for 0.8 Name Authority schemas on the wiki. Services schema and wiki schema are now aligned on use of foundingDate and foundingPlace, as well as on subBody, per updates to the wiki schema.
Aron Roberts [Thu, 17 Jun 2010 04:08:37 +0000 (04:08 +0000)]
CSPACE-2138: Removed 'honorifics' field from the Person schema in the services layer. This field is equivalent to and redundant - at least according to the wiki schema and its multiple-source crosswalks - with the 'nameAdditions' field.
Aron Roberts [Wed, 16 Jun 2010 04:39:47 +0000 (04:39 +0000)]
CSPACE-2136: Updated Loans In (aka Loan In) schema at the services layer to the Limited for 0.8 schema. Made the lenders field non-repeatable, which may have a salutary impact on as many as four currently open JIRAs.
Aron Roberts [Tue, 15 Jun 2010 22:34:33 +0000 (22:34 +0000)]
CSPACE-2135,CSPACE-1220: Updated Intake schema at the services layer to the Limited for 0.8 schema. Removed three fields and changed the names of two fields.
Aron Roberts [Tue, 15 Jun 2010 19:48:14 +0000 (19:48 +0000)]
CSPACE-2133,CSPACE-1796,CSPACE-1219: Updated Acqusition schema at the services layer to Limited for 0.8 schema. Added one field, removed three fields, and changed the names of seven fields.
Aron Roberts [Tue, 15 Jun 2010 01:19:50 +0000 (01:19 +0000)]
CSPACE-2134: Updated Cataloging schema for release 0.8, adding one field and changing the names of 12 others - two required by wiki schema changes, and ten for consistency with other layers / clarity.
Sanjay Dalal [Mon, 14 Jun 2010 23:50:35 +0000 (23:50 +0000)]
CSPACE-1929
The delete on accountrole sub resource of the account service now requires a POST with parameter _method=delete (/accounts/{accountcsid}/accountroles?_method=delete) and entity body (like POST for create). The delete only deletes the relationships found in the entity body.
test: all service tests
NOTE: all the tests pass with the first run. in the second run dimension service tests fail. this might be because some problem (debugging) introduced by eith the security/client/AuthorizationServiceTest or security/client/MultiTenancyTest which use "dimensions" service for security testing
Sanjay Dalal [Mon, 14 Jun 2010 18:21:21 +0000 (18:21 +0000)]
CSPACE-1300
CSPACE-1930
The delete on permrole sub resource of authorization/permissions and authorization/roles services now requires a POST with parameter _method=delete (/authorization/roles/{rolecsid}/permroles?_method=delete) and entity body (like POST for create). The delete only deletes the relationships found in the entity body.
test: all service tests, permissionrole, rolepermission, authorization and multi tenancy tests
M services/authorization-mgt/service/src/main/java/org/collectionspace/services/authorization/PermissionResource.java
M services/authorization-mgt/service/src/main/java/org/collectionspace/services/authorization/storage/PermissionRoleDocumentHandler.java
M services/authorization-mgt/service/src/main/java/org/collectionspace/services/authorization/storage/AuthorizationDelegate.java
M services/authorization-mgt/service/src/main/java/org/collectionspace/services/authorization/RoleResource.java
M services/authorization-mgt/service/src/main/java/org/collectionspace/services/authorization/PermissionRoleSubResource.java
M services/authorization-mgt/import/src/main/resources/import-data/import-permissions.xml
M services/authorization-mgt/import/src/main/resources/import-data/import-permissions-roles.xml
M services/authorization-mgt/import/src/main/resources/import-data/import-roles.xml
M services/authorization-mgt/client/src/test/java/org/collectionspace/services/authorization/client/test/PermissionRoleServiceTest.java
M services/authorization-mgt/client/src/test/java/org/collectionspace/services/authorization/client/test/RolePermissionServiceTest.java
M services/authorization-mgt/client/src/main/java/org/collectionspace/services/client/PermissionRoleClient.java
M services/authorization-mgt/client/src/main/java/org/collectionspace/services/client/RolePermissionClient.java
M services/authorization-mgt/client/src/main/java/org/collectionspace/services/client/PermissionRoleProxy.java
M services/authorization-mgt/client/src/main/java/org/collectionspace/services/client/RolePermissionProxy.java
M services/common/src/main/java/org/collectionspace/services/common/storage/jpa/JpaRelationshipStorageClient.java
M services/common/src/main/java/org/collectionspace/services/common/security/SecurityInterceptor.java
M services/security/client/src/test/java/org/collectionspace/services/security/client/test/AuthorizationServiceTest.java
M services/security/client/src/test/java/org/collectionspace/services/security/client/test/MultiTenancyTest.java
Patrick Schmitz [Mon, 14 Jun 2010 05:30:06 +0000 (05:30 +0000)]
CSPACE-1152 and CSPACE-2126. Changed Vocabulary schema to include a shortIdentifier. This is now used as the basis of the refName. Added support to vocabulary for readByName. Added validatorHandler to require that shortIdentifier only contain word chars.
Patrick Schmitz [Mon, 14 Jun 2010 05:29:19 +0000 (05:29 +0000)]
CSPACE-1152 and CSPACE-2126. Changed Vocabulary schema to include a shortIdentifier. This is now used as the basis of the refName. Added support to vocabulary for readByName. Added validatorHandler to require that shortIdentifier only contain word chars.
Patrick Schmitz [Fri, 11 Jun 2010 20:02:41 +0000 (20:02 +0000)]
CSPACE-1895 Work towards adding repeating sections. For now, just put in notes in the key places where we need to make changes to support this, as we explore alternatives.
Sanjay Dalal [Fri, 11 Jun 2010 19:09:27 +0000 (19:09 +0000)]
CSPACE-595 added a test for multi-tenancy. it uses two pre-configured users in ROLE_TEANAT_ADMINISTRATOR to create an account, a role and a permission for a service for each tenant. It then creates (potentially concurrently) dimension object as the newly created user for a tenant, tries to update the other tenant's object and fails successfully, tries to delete the other tenant's object and fails successfully.
test: MultiTenancyTest, all service tests
M services/authorization-mgt/service/src/main/java/org/collectionspace/services/authorization/storage/RoleJpaFilter.java
M services/authorization-mgt/service/src/main/java/org/collectionspace/services/authorization/storage/PermissionDocumentHandler.java
M services/authorization-mgt/service/src/main/java/org/collectionspace/services/authorization/storage/PermissionRoleUtil.java
M services/authorization-mgt/service/src/main/java/org/collectionspace/services/authorization/storage/PermissionJpaFilter.java
M services/authorization-mgt/service/src/main/java/org/collectionspace/services/authorization/storage/AuthorizationDelegate.java
M services/authorization-mgt/service/src/main/java/org/collectionspace/services/authorization/storage/RoleDocumentHandler.java
M services/common/src/main/java/org/collectionspace/services/common/storage/jpa/JpaStorageUtils.java
M services/common/src/main/java/org/collectionspace/services/common/security/SecurityUtils.java
M services/account/service/src/main/java/org/collectionspace/services/account/storage/AccountDocumentHandler.java
M services/account/service/src/main/java/org/collectionspace/services/account/storage/AccountJpaFilter.java
A services/security/client/src/test/java/org/collectionspace/services/security/client/test/MultiTenancyTest.java
Aron Roberts [Fri, 11 Jun 2010 00:39:53 +0000 (00:39 +0000)]
CSPACE-2123: Added missing resource URL paths for the Relation service to the tenant bindings file. After this change, permissions are now successfully created for these paths.
Aron Roberts [Wed, 9 Jun 2010 21:10:16 +0000 (21:10 +0000)]
CSPACE-2121: Reverting inadvertent change to username in exec:java in pom.xml, used during testing of this issue and not relevant to the fix. This username value and its corresponding password value in exec:java do not appear to be used currently.
Aron Roberts [Wed, 9 Jun 2010 21:04:40 +0000 (21:04 +0000)]
CSPACE-2121: Added 'install' as a dependency of setup_hibernate.cfg in Ant buildfile in authorization-mgt/import. If the local target directory, created by 'install', was missing, a copy task failed in the 'import' target.
Sanjay Dalal [Wed, 9 Jun 2010 17:32:38 +0000 (17:32 +0000)]
CSPACE-1782 where clauses in JPA services now use current tenant id
test: all service tests
M services/authorization-mgt/service/src/main/java/org/collectionspace/services/authorization/storage/RoleJpaFilter.java
M services/authorization-mgt/service/src/main/java/org/collectionspace/services/authorization/storage/PermissionJpaFilter.java
M services/authorization-mgt/import/src/main/resources/import-data/import-permissions.xml
M services/authorization-mgt/import/src/main/resources/import-data/import-permissions-roles.xml
M services/authorization-mgt/import/src/main/resources/import-data/import-roles.xml
M services/authorization-mgt/client/src/test/java/org/collectionspace/services/authorization/client/test/PermissionServiceTest.java
M services/common/src/main/java/org/collectionspace/services/common/storage/jpa/JpaDocumentFilter.java
M services/common/src/main/java/org/collectionspace/services/common/storage/jpa/JpaStorageClientImpl.java
M services/common/src/main/java/org/collectionspace/services/common/storage/jpa/JpaStorageUtils.java
M services/common/src/main/java/org/collectionspace/services/common/security/SecurityInterceptor.java
M services/common/src/main/java/org/collectionspace/services/common/document/DocumentFilter.java
M services/account/service/src/main/java/org/collectionspace/services/account/storage/AccountStorageClient.java
M services/account/service/src/main/java/org/collectionspace/services/account/storage/AccountJpaFilter.java
M services/account/client/src/test/java/org/collectionspace/services/account/client/test/AccountServiceTest.java
Sanjay Dalal [Tue, 8 Jun 2010 00:23:27 +0000 (00:23 +0000)]
CSPACE-595 first pass at the side-by-side tenant test, although not used concurrently yet
CSPACE-1035 nuxeo domain (for each tenant) is created at the startup time if it does not already exist
- added pahma-domain (hearstmuseum.berkeley.edu) to the tenant bindings in addition to the default-domain (movingimages.us) that is currently used. both bindings are similar in this first pass, i.e. both tenants use the same set of services with same service object bindings as well.
- each tenant binding now specifies repository domain(s) used
- each repository domain embodies information about the repository client needed
- tenantrepository uses repository javaclient instead of using nuxeo connector directly
- each service binding now specifies the repository domain used
- account factory on the client side now takes tenant id from new property cspace.tenant that is added to collection-space-client.properties
- removed deadwood from test-xxx.sql scripts
- role and permissions doc handlers now utilize tenant id if provided by the consumer at the time of creation, if not, they continue to use logged in user's tenant id
-
!!ATTENTION!!
-ant create_db from the trunk (to verify nuxeo domain is created)
-ant import from the trunk (no need to checkin import-*.xml files)
-ant undeploy deploy from the trunk
M trunk/services/authorization-mgt/service/src/main/java/org/collectionspace/services/authorization/storage/PermissionDocumentHandler.java
M trunk/services/authorization-mgt/service/src/main/java/org/collectionspace/services/authorization/storage/RoleDocumentHandler.java
M trunk/services/authorization-mgt/import/src/main/java/org/collectionspace/services/authorization/importer/AuthorizationSeed.java
M trunk/services/authorization-mgt/import/src/main/resources/import-data/import-permissions.xml
M trunk/services/authorization-mgt/import/src/main/resources/import-data/import-permissions-roles.xml
M trunk/services/authorization-mgt/import/src/main/resources/import-data/import-roles.xml
M trunk/services/authorization-mgt/import/src/main/resources/log4j.properties
M trunk/services/authorization-mgt/client/src/test/java/org/collectionspace/services/authorization/client/test/RoleServiceTest.java
M trunk/services/authorization-mgt/client/src/test/java/org/collectionspace/services/authorization/client/test/PermissionServiceTest.java
M trunk/services/authorization/pstore/src/main/resources/db/mysql/test_authorization.sql
M trunk/services/authentication/pstore/src/main/resources/db/mysql/test_authentication.sql
M trunk/services/common/src/main/java/org/collectionspace/services/common/repository/RepositoryClient.java
M trunk/services/common/src/main/java/org/collectionspace/services/common/context/AbstractServiceContextImpl.java
M trunk/services/common/src/main/java/org/collectionspace/services/common/ServiceMain.java
M trunk/services/common/src/main/java/org/collectionspace/services/common/config/TenantBindingConfigReaderImpl.java
M trunk/services/common/src/main/java/org/collectionspace/services/common/document/JaxbUtils.java
M trunk/services/common/src/main/java/org/collectionspace/services/nuxeo/client/java/RepositoryJavaClientImpl.java
M trunk/services/common/src/main/java/org/collectionspace/services/nuxeo/client/java/TenantRepository.java
M trunk/services/common/src/main/config/services/service-config.xml
M trunk/services/common/src/main/config/services/tenant-bindings.xml
M trunk/services/common/src/main/resources/tenant.xsd
M trunk/services/common/src/main/resources/service.xsd
M trunk/services/account/pstore/src/main/resources/db/mysql/test_account.sql
M trunk/services/account/client/src/test/java/org/collectionspace/services/account/client/test/AccountRoleServiceTest.java
M trunk/services/account/client/src/test/java/org/collectionspace/services/account/client/test/AccountServiceTest.java
M trunk/services/account/client/src/main/java/org/collectionspace/services/client/AccountFactory.java
M trunk/services/account/client/src/main/java/org/collectionspace/services/client/AccountClient.java
M trunk/services/security/client/src/test/java/org/collectionspace/services/security/client/test/AuthenticationServiceTest.java
M trunk/services/security/client/src/test/java/org/collectionspace/services/security/client/test/AuthorizationServiceTest.java
M trunk/services/client/src/main/java/org/collectionspace/services/client/AbstractServiceClientImpl.java
M trunk/services/client/src/main/java/org/collectionspace/services/client/CollectionSpaceClient.java
M trunk/services/client/src/main/resources/collectionspace-client.properties
D trunk/src/main/resources/db/mysql/service-dump.sql
Sanjay Dalal [Fri, 4 Jun 2010 21:32:32 +0000 (21:32 +0000)]
CSPACE-2003, CSPACE-1969 ImportAuthZ now inserts default roles, permissions and permission-roles into the database in addtion to inserting ACLs in Spring. These could be retrieved using the respective authz services.
CSPACE-2004, CSPACE-1926 ImportAuthZ now creates a ROLE_TENANT_ADMINISTRATOR for each tenant that has all privileges to all services used by that tenant. It also creates a ROLE_TENANT_READER. This role has only READ, SEARCH privileges for all services used by the tenant
test: ant import, mvn test (service level)
Aron Roberts [Fri, 4 Jun 2010 18:46:30 +0000 (18:46 +0000)]
CSPACE-2077: Moved assertion that checks for number of authority references returned out of a conditional block; added debug message for authrefs returned, in all AuthRefsTests of services.
Aron Roberts [Fri, 4 Jun 2010 00:12:45 +0000 (00:12 +0000)]
CSPACE-2028: Added missing 'collection' field to CollectionObject schema in the Services layer, merging changes made to the 0.7 release branch to services trunk.
Sanjay Dalal [Thu, 3 Jun 2010 19:44:26 +0000 (19:44 +0000)]
CSPACE-1937 if a role/permission/account does not have any relationship (to permission, role, role, resp.), return empty result instead of 404
test: added tests for this case in accountrole, permissionrole and rolepermission
M authorization-mgt/client/src/test/java/org/collectionspace/services/authorization/client/test/PermissionRoleServiceTest.java
M authorization-mgt/client/src/test/java/org/collectionspace/services/authorization/client/test/RolePermissionServiceTest.java
M account/client/src/test/java/org/collectionspace/services/account/client/test/AccountRoleServiceTest.java
M account/service/src/main/java/org/collectionspace/services/account/storage/AccountRoleDocumentHandler.java
M authorization-mgt/service/src/main/java/org/collectionspace/services/authorization/storage/PermissionRoleDocumentHandler.java
M common/src/main/java/org/collectionspace/services/common/storage/jpa/JpaRelationshipStorageClient.java
Aron Roberts [Wed, 2 Jun 2010 23:03:51 +0000 (23:03 +0000)]
CSPACE-1875: In Loan Out records in the Services Layer, merged into trunk from the 0.7 Release Branch, three scalar fields were added: loanedObjectStatus, loanedObjectStatusNote, and loanedObjectStatusDate. This is an interim step until sub-loans are implemented in a later release.
Aron Roberts [Tue, 1 Jun 2010 19:38:01 +0000 (19:38 +0000)]
CSPACE-1227,CSPACE-1916: Filled out CollectionObject schema, in the Services Layer, with the remaining fields required by Cataloging Schema Limited for 0.7 on the wiki. Note that briefDescription is still a single, non-repatable scalar in this check-in, and that the three fields - relatedObjectNumber, relatedObjectAssociation, and relatedObjectNote - are not included, per Megan in IRC on 2010-06-01. Changes a Nuxeo document type, and thus requires stopping the 2 JBoss servers and performing an 'ant deploy'.
Aron Roberts [Mon, 31 May 2010 17:48:36 +0000 (17:48 +0000)]
CSPACE-1946: TEMPORARILY commenting out the block, in SecurityInterceptor, that checks whether a services client is authorized to access resources at a particular URL. This effectively DISABLES authorization checks on access requests to the services layer. This is a temporary workaround, suggested in one of Sanjay's comments on this issue, to facilitate testing on nightly.collectionspace.org on 2010-05-31, and should be reversed as soon as practical.
Aron Roberts [Fri, 28 May 2010 23:52:22 +0000 (23:52 +0000)]
CSPACE-1911: 'Banners' output between Services client tests now properly show calling class and line number in their log statements. Banner generation is now separated from test setup (e.g. specifying expected status code, valid status codes), in the client test framework, and each can be used independently. Formerly banners were output as an undocumented side effect of test setup; while that was convenient, it was not good practice.
Sanjay Dalal [Thu, 27 May 2010 22:28:53 +0000 (22:28 +0000)]
CSPACE-1937 blocker, dup of 1299
CSPACE-1299 added permrole as a subresource of role. it is now possible to associate one or more permissions from a role service using roles/id/permroles
test: authorization-mgt, all service tests
Sanjay Dalal [Thu, 27 May 2010 19:20:39 +0000 (19:20 +0000)]
CSPACE-1828 service name fixes role name with ROLE_{uppercase role name} if ROLE_ is not present in the role name
CSPACE-1944 role name in role once set cannot be changed
CSPACE-1945 resource name in permission once set cannot be changed
test: authorization-mgt/client
Aron Roberts [Thu, 27 May 2010 18:52:30 +0000 (18:52 +0000)]
CSPACE-1407: In tenant bindings for Movement service, added (uncommented) 'currentLocation' and 'normalLocation' as authority reference fields for this service, now that the StorageLocation / Location service is available.
Richard Millet [Thu, 27 May 2010 06:04:04 +0000 (06:04 +0000)]
CSPACE-864: Added a native Nuxeo "repeatable" information group to the CollectionObject schema for the "otherNumber" information group "otherNumber" = {otherNumberValue, otherNumberType}.
Sanjay Dalal [Wed, 26 May 2010 23:18:24 +0000 (23:18 +0000)]
CSPACE-1935 moved import driver out of test framework into a standalone utility
use ant import at any level to invoke the driver. requires build.
!!NOTE!!
this change overrides req. of mvn test (at authorization-mgt/import) as described in r2225 to import default permissions
cd trunk
mvn test -DskipTests
ant import
ant undeploy deploy
mvn test
D trunk/services/authorization-mgt/import/src/test/java/org/collectionspace/services/authorization/importer/AuthorizationSeedTest.java
D trunk/services/authorization-mgt/import/src/test/java/org/collectionspace/services/authorization/importer/AbstractAuthorizationTestImpl.java
D trunk/services/authorization-mgt/import/src/test/resources/applicationContext-authorization-test.xml
D trunk/services/authorization-mgt/import/src/test/resources/log4j.properties
A trunk/services/authorization-mgt/import/src/main/java/org/collectionspace/services/authorization/driver
A + trunk/services/authorization-mgt/import/src/main/java/org/collectionspace/services/authorization/driver/AuthorizationSeedDriver.java
A trunk/services/authorization-mgt/import/src/main/java/org/collectionspace/ImportAuthz.java
M trunk/services/authorization-mgt/import/src/main/resources/import-data/import-permissions.xml
M trunk/services/authorization-mgt/import/src/main/resources/import-data/import-permissions-roles.xml
A + trunk/services/authorization-mgt/import/src/main/resources/applicationContext-authorization-test.xml
A + trunk/services/authorization-mgt/import/src/main/resources/log4j.properties
M trunk/services/authorization-mgt/import/pom.xml
M trunk/services/authorization-mgt/import/build.xml
M trunk/services/authorization-mgt/build.xml
M trunk/services/pom.xml
M trunk/services/build.xml
M trunk/build.xml
Sanjay Dalal [Wed, 26 May 2010 17:05:34 +0000 (17:05 +0000)]
CSPACE-1364, CSPACE-1365
Enabled access control for all the services at the record/procedure type level. Permissions are seeded (authorization-mgt/import) for ROLE_ADMINISTRATOR using the tenant bindings. Seeding still happens through a test driver in the import module...would be moved to a Java main class later.
Test do/should not delete the seeded permissions...fixed those tests that were doing the same. These tests now either do not delete permissions
or create permissions for non-functional services.
Wired delete for account role and permission role sub resources.
All alternate URIs with which a service could be accessed shoudl be in service bindings element named uriPath
test: all tests multiple times
!!NOTE!!
cd trunk/services
ant create_db
mvn clean install -DskipTests
ant undeploy deploy
mvn test
If you are not running all the tests, at least seed default permissions using the following
cd trunk/services/authorization-mgt/import
mvn test
M trunk/services/authorization-mgt/service/src/main/java/org/collectionspace/services/authorization/PermissionResource.java
M trunk/services/authorization-mgt/service/src/main/java/org/collectionspace/services/authorization/storage/AuthorizationDelegate.java
M trunk/services/authorization-mgt/service/src/main/java/org/collectionspace/services/authorization/PermissionRoleSubResource.java
M trunk/services/authorization-mgt/import/src/test/java/org/collectionspace/services/authorization/importer/AuthorizationSeedTest.java
M trunk/services/authorization-mgt/import/src/test/resources/applicationContext-authorization-test.xml
M trunk/services/authorization-mgt/import/src/test/resources/log4j.properties
M trunk/services/authorization-mgt/import/src/main/java/org/collectionspace/services/authorization/importer/AuthorizationSeed.java
M trunk/services/authorization-mgt/import/src/main/java/org/collectionspace/services/authorization/importer/AuthorizationGen.java
M trunk/services/authorization-mgt/import/src/main/resources/import-data/import-permissions.xml
M trunk/services/authorization-mgt/import/src/main/resources/import-data/import-permissions-roles.xml
M trunk/services/authorization-mgt/import/pom.xml
M trunk/services/authorization-mgt/client/src/test/java/org/collectionspace/services/authorization/client/test/PermissionServiceTest.java
M trunk/services/authorization-mgt/client/src/test/java/org/collectionspace/services/authorization/client/test/PermissionRoleServiceTest.java
M trunk/services/pom.xml
M trunk/services/authorization/service/src/main/java/org/collectionspace/services/authorization/spring/SpringPermissionManager.java
M trunk/services/authorization/service/src/main/java/org/collectionspace/services/authorization/spring/SpringAuthorizationProvider.java
M trunk/services/authorization/service/src/main/java/org/collectionspace/services/authorization/spring/SpringPermissionEvaluator.java
M trunk/services/authorization/service/src/main/java/org/collectionspace/services/authorization/CSpaceResourceImpl.java
M trunk/services/authorization/service/src/main/java/org/collectionspace/services/authorization/URIResourceImpl.java
M trunk/services/authorization/service/src/main/java/org/collectionspace/services/authorization/AuthZ.java
M trunk/services/authorization/service/src/main/java/org/collectionspace/services/authorization/spi/CSpacePermissionManager.java
M trunk/services/authorization/service/src/main/resources/applicationContext-authorization.xml
_M trunk/services/location/jaxb
M trunk/services/common/src/main/java/org/collectionspace/services/common/storage/jpa/JpaStorageClientImpl.java
M trunk/services/common/src/main/java/org/collectionspace/services/common/storage/jpa/JpaRelationshipStorageClient.java
M trunk/services/common/src/main/java/org/collectionspace/services/common/security/SecurityInterceptor.java
M trunk/services/common/src/main/config/services/tenant-bindings.xml
M trunk/services/common/src/main/resources/service.xsd
M trunk/services/account/service/src/main/java/org/collectionspace/services/account/AccountRoleSubResource.java
M trunk/services/account/service/src/main/java/org/collectionspace/services/account/AccountResource.java
_M trunk/services/note/service
_M trunk/services/note/jaxb
_M trunk/services/note/client
M trunk/services/security/client/src/test/java/org/collectionspace/services/security/client/test/AuthenticationServiceTest.java
M trunk/services/security/client/src/test/java/org/collectionspace/services/security/client/test/AuthorizationServiceTest.java
Aron Roberts [Wed, 26 May 2010 04:09:38 +0000 (04:09 +0000)]
CSPACE-1911: In client test framework, 'banner' signifying the start of a test can now be output using a passed-in Logger. This reflects the caller's class name and line number in the log statement, and can also print the class name in the banner. Examples of such calls are implemented, for now, only in PersonAuthoritySearchTest, but can be trivially bulk-implemented in all other test classes.
Aron Roberts [Wed, 26 May 2010 03:12:40 +0000 (03:12 +0000)]
CSPACE-1895: Moved 'note' module slightly down, below account (and generally below authZ- and authN-related modules) in main services POM, per discussion with Sanjay. JIRA issue pertains to Location, but includes Patrick's work on a new, generalizable Note (aka Comment) service, which is the relevant module to this minor change.
Aron Roberts [Tue, 25 May 2010 00:52:36 +0000 (00:52 +0000)]
CSPACE-809,CSPACE-562,CSPACE-1685: Created standalone class for Search tests, pulling partial term matching tests out of PersonServiceTest, to aid in rapidly creating tests for partial term matching (and later, keyword searches), and as an early step in the direction of moving some search test functionality into base classes in the client test framework.
Aron Roberts [Tue, 25 May 2010 00:48:02 +0000 (00:48 +0000)]
CSPACE-1911: Minoir formatting changes to test banner in BaseServiceTest, intended to make it easier to spot transitions between tests and to output log statements showing relevant test class and line number. Trivial change in class comment in AbstractServiceTestImpl.
Aron Roberts [Fri, 21 May 2010 21:26:55 +0000 (21:26 +0000)]
CSPACE-384: Minor cleanup of base classes in client test framework, in preparation for work on issues such as CSPACE-1685, as well as re-familiarization for current work on CSPACE-809.
Richard Millet [Fri, 21 May 2010 20:48:41 +0000 (20:48 +0000)]
CSPACE-1244: On updates, treating tags (xml elements) with empty content as blank value that -so blank elements essentially deletes field values from the database records.
Aron Roberts [Fri, 21 May 2010 04:11:21 +0000 (04:11 +0000)]
CSPACE-809,CSPACE-1886: Fixed trivial but embarrassing typo in Lech Walesa's name, used for partial term matching tests in PersonServiceTest. Also allows noting that a UTF-8 test of partial matches, as per CSPACE-1886, is present but currently fails and is commented out for now.
Aron Roberts [Fri, 21 May 2010 04:00:48 +0000 (04:00 +0000)]
CSPACE-809,CSPACE-1880: Introduced first partial term matching client tests, in the Person service. Identified and made a tentative fix for CSPACE-1880 issue, required to make the partial term matching tests succeed, and pending Richard's more knowledgeable and detailed examination of this issue.
Sanjay Dalal [Wed, 19 May 2010 20:57:19 +0000 (20:57 +0000)]
NOJIRA moved ServiceLayerTests to new module common-test that is built after authorization-mgt module so permissions could be inserted in db before running the service layer tests
test: all service tests
Sanjay Dalal [Wed, 19 May 2010 18:17:34 +0000 (18:17 +0000)]
CSPACE-1482 import module with the help of tenant bindings now generates and imports default permissions for all the services for all the tenants for ROLE_ADMINISTRATOR
Richard Millet [Wed, 19 May 2010 07:37:18 +0000 (07:37 +0000)]
CSPACE-1081: Relation list should probably include relationship type
CSPACE-1846: Relation Service needs to paginate list results.
CSPACE-602: Update Relations service/manager to use Nuxeo queries instead of "get all" and filter with Java code