Aron Roberts [Fri, 23 Jul 2010 22:42:02 +0000 (22:42 +0000)]
CSPACE-2535: Made five fields repeatable in Organization records (records of items within an OrgAuthority), in the services layer: contactName, group, function, subBody, and historyNote (formerly history). Changes the relevant Nuxeo document type schema, and as such requires an 'ant deploy' and a 2-server restart.
Aron Roberts [Fri, 23 Jul 2010 22:19:15 +0000 (22:19 +0000)]
CSPACE-2534: Temporarily comment out Nuxeo layout widgets for repeatable fields in Person records until we identify how to represent these complexTypes in layouts.
Aron Roberts [Fri, 23 Jul 2010 00:10:29 +0000 (00:10 +0000)]
CSPACE-2534: Made four fields repeatable in Person records (records of items within a PersonAuthority), in the services layer: group, nationality, occupation, and schoolOrStyle. Changes the relevant Nuxeo document type schema, and as such requires an 'ant deploy' and a 2-server restart.
Aron Roberts [Thu, 22 Jul 2010 22:06:47 +0000 (22:06 +0000)]
CSPACE-2528: Made acquisitionDate field a repeatable field in Acquisition records, in the services layer. Changes the relevant Nuxeo document type schema, and as such requires an 'ant deploy' and a 2-server restart.
Aron Roberts [Wed, 21 Jul 2010 02:31:55 +0000 (02:31 +0000)]
CSPACE-2511,CSPACE-2512: Standardized error messages returned from resource classes for Acquisitions, Movements, as prototype for other resource classes.
Patrick Schmitz [Tue, 20 Jul 2010 23:48:53 +0000 (23:48 +0000)]
CSPACE-864 Added support to handle deeply nested repeatable structures on the way out. Still need to rewrite the code to handle same on the way in. This code may need to be refactored into a Nuxeo-specific class, for consistency.
Aron Roberts [Tue, 20 Jul 2010 22:48:36 +0000 (22:48 +0000)]
CSPACE-2508: Explicitly tests sorting of results from keyword searches. Lays groundwork for restricting the scope of sorting tests to temporary records created during client testing.
Aron Roberts [Tue, 20 Jul 2010 20:53:30 +0000 (20:53 +0000)]
CSPACE-2508: Added client test to verify that records are returned in ascending or descending sort order, based on the value of a specified field, when a 'read list' or keyword search request asks that records be returned in that sort order.
Patrick Schmitz [Mon, 19 Jul 2010 06:46:28 +0000 (06:46 +0000)]
CSPACE-2394 Build a prototype reporting service for invoking reports. Still needs more build support to get reports installed from a resource path, but basic CRUDL support is in, as is invocation of jasper reports engine from services, provided a report has been installed on the server.
Patrick Schmitz [Fri, 16 Jul 2010 21:25:36 +0000 (21:25 +0000)]
NOJIRA - Fixed a bug in the processing of authority items when fetching by name - was not correctly qualifying by authority. Should allow shortIdentifier clash across (but not within) authorities, but was coughing on cross-authority clash. Typo in PersonAuthorityClient caused problems in test.
Aron Roberts [Thu, 15 Jul 2010 22:19:23 +0000 (22:19 +0000)]
CSPACE-1637,CSPACE-2066: Authority references can now be returned from value instances of repeatable fields, as well as - as was previously implemented - from non-repeatable fields. As prototyped in Acquisition records, specifying 'acquisitionSources' as an authRef field in tenant bindings will now return the authority references in each of its 'acquisitionSource' children. This has been tested to date only with simple repeatability: a parent and a set of 0-n immediate children. The current solution will need additional testing to verify that it works with arbitrary repeatability; and a slightly different approach using DocModel.getProperties(), as suggested by Richard and mentioned as well in code comments, may potentially be needed in that case.
Aron Roberts [Thu, 15 Jul 2010 03:28:16 +0000 (03:28 +0000)]
CSPACE-2408,CSPACE-2482: DateTime fields in Movement record are now editable, in the relevant layout for Nuxeo's web administration console, via a datetime picker widget.
Aron Roberts [Wed, 14 Jul 2010 03:49:37 +0000 (03:49 +0000)]
CSPACE-2408,CSPACE-2418: Changed datatypes for three calendar date fields in Movement records to xs:dateTime, to prototype storage of dates as date types, rather than strings. Provides a uniform date and time representation - a widely used ISO 8601 format - to be provided by clients as values in calendar date fields, as early work on CSPACE-2418. Dates round-trip correctly, but are stored in MySQL in a local time zone, rather than in UTC. This is potentially problematic, and may require further investigation. Two utility classes included in this commit likely belong in 'common' package, or in a future DateAndTime service, rather than in Movement, and they - or similar classes - will likely be migrated there in a future check-in.
Aron Roberts [Fri, 9 Jul 2010 00:35:50 +0000 (00:35 +0000)]
CSPACE-2408: Client tests of the Movement service now generate UTC timestamps, in preparation for the possibility of storing timestamps in the Location Date field (or an equivalent Movement Date field).
Aron Roberts [Thu, 8 Jul 2010 03:48:42 +0000 (03:48 +0000)]
CSPACE-1692,CSPACE-2330: CollectionObject service now returns authority references for all current authref fields (6 PersonAuthority fields and 3 OrgAuthority fields).
Patrick Schmitz [Tue, 6 Jul 2010 15:56:46 +0000 (15:56 +0000)]
CSPACE-749, CSPACE-1643, etc. Added keyword search support to vocab and authorities. Added test for same to Person service. Modified the query builder to put the keyword search where clause into parens so this can be safely combined with other searches (like matching the inAuthority).
Patrick Schmitz [Sat, 3 Jul 2010 19:24:50 +0000 (19:24 +0000)]
NOJIRA - Ported Authority cleanup to Location. This also addresses a number of missing elements in Location, around authRefs, named access, etc. Also cleaned up some inconsistent naming on the field that tracks term status, across all the authorities. Finally, added in more checks in test code across the authorities to ensure that ClientResponse instances are cleanly released.
Patrick Schmitz [Sat, 3 Jul 2010 04:35:22 +0000 (04:35 +0000)]
NOJIRA - Refactored autorities support. Fixed several inconsistencies, and simplified the code. Still some more to do to port this to Location, and to make authRefs and refObjs support more consistent.
Patrick Schmitz [Tue, 29 Jun 2010 16:33:18 +0000 (16:33 +0000)]
CSPACE-600, preparation for CSPACE-849, and fixed CSPACE-2291. This refactors the bulk of the vocabulary doc handlers into a superclass. Will port these changes to Person, Org, and Location, to simplify the maintenance of these services. Also aligns vocabulary to the other Authority services, to provide a more consistent API.
Aron Roberts [Fri, 25 Jun 2010 18:20:35 +0000 (18:20 +0000)]
CSPACE-2242: Created client tests to demonstrate bug, identified by Chris, in which value instances of a repeatable single String scalar field are not persisted if the first value instance is blank. (Note that the failing Assert is currently commented out in this check-in to avoid triggering service test failures.)
Patrick Schmitz [Wed, 23 Jun 2010 06:26:51 +0000 (06:26 +0000)]
CSPACE-590, CSPACE-2126, modifying authorities to support shortIdentifier. This is now used to create refNames, and used to get by name. Updated associated utilities for creating authorities and items. Updated all the various tests that create authorities and instances.
Aron Roberts [Fri, 18 Jun 2010 23:36:53 +0000 (23:36 +0000)]
CSPACE-2180: Test case for a pseudorandom number generator in the ID service that returns probabilistic results now only generates warnings, not assertion exceptions, when the expected result is not obtained.
Aron Roberts [Fri, 18 Jun 2010 00:03:15 +0000 (00:03 +0000)]
CSPACE-2138: Added 'web' field, removed 'notes' field, in Contact schema, in the services, per latest changes to Limited for 0.8 Name Authority schemas on the wiki.
Aron Roberts [Thu, 17 Jun 2010 23:32:14 +0000 (23:32 +0000)]
CSPACE-2138: Changed 'status' field to 'termStatus' in Person schema, in the services, per latest changes to Limited for 0.8 Name Authority schemas on the wiki.
Aron Roberts [Thu, 17 Jun 2010 23:06:28 +0000 (23:06 +0000)]
CSPACE-2138: Changed 'status' field to 'termStatus' in Organization services schema, per latest changes to Limited for 0.8 Name Authority schemas on the wiki. Services schema and wiki schema are now aligned on use of foundingDate and foundingPlace, as well as on subBody, per updates to the wiki schema.
Aron Roberts [Thu, 17 Jun 2010 04:08:37 +0000 (04:08 +0000)]
CSPACE-2138: Removed 'honorifics' field from the Person schema in the services layer. This field is equivalent to and redundant - at least according to the wiki schema and its multiple-source crosswalks - with the 'nameAdditions' field.
Aron Roberts [Wed, 16 Jun 2010 04:39:47 +0000 (04:39 +0000)]
CSPACE-2136: Updated Loans In (aka Loan In) schema at the services layer to the Limited for 0.8 schema. Made the lenders field non-repeatable, which may have a salutary impact on as many as four currently open JIRAs.
Aron Roberts [Tue, 15 Jun 2010 22:34:33 +0000 (22:34 +0000)]
CSPACE-2135,CSPACE-1220: Updated Intake schema at the services layer to the Limited for 0.8 schema. Removed three fields and changed the names of two fields.
Aron Roberts [Tue, 15 Jun 2010 19:48:14 +0000 (19:48 +0000)]
CSPACE-2133,CSPACE-1796,CSPACE-1219: Updated Acqusition schema at the services layer to Limited for 0.8 schema. Added one field, removed three fields, and changed the names of seven fields.
Aron Roberts [Tue, 15 Jun 2010 01:19:50 +0000 (01:19 +0000)]
CSPACE-2134: Updated Cataloging schema for release 0.8, adding one field and changing the names of 12 others - two required by wiki schema changes, and ten for consistency with other layers / clarity.
Sanjay Dalal [Mon, 14 Jun 2010 23:50:35 +0000 (23:50 +0000)]
CSPACE-1929
The delete on accountrole sub resource of the account service now requires a POST with parameter _method=delete (/accounts/{accountcsid}/accountroles?_method=delete) and entity body (like POST for create). The delete only deletes the relationships found in the entity body.
test: all service tests
NOTE: all the tests pass with the first run. in the second run dimension service tests fail. this might be because some problem (debugging) introduced by eith the security/client/AuthorizationServiceTest or security/client/MultiTenancyTest which use "dimensions" service for security testing
Sanjay Dalal [Mon, 14 Jun 2010 18:21:21 +0000 (18:21 +0000)]
CSPACE-1300
CSPACE-1930
The delete on permrole sub resource of authorization/permissions and authorization/roles services now requires a POST with parameter _method=delete (/authorization/roles/{rolecsid}/permroles?_method=delete) and entity body (like POST for create). The delete only deletes the relationships found in the entity body.
test: all service tests, permissionrole, rolepermission, authorization and multi tenancy tests
M services/authorization-mgt/service/src/main/java/org/collectionspace/services/authorization/PermissionResource.java
M services/authorization-mgt/service/src/main/java/org/collectionspace/services/authorization/storage/PermissionRoleDocumentHandler.java
M services/authorization-mgt/service/src/main/java/org/collectionspace/services/authorization/storage/AuthorizationDelegate.java
M services/authorization-mgt/service/src/main/java/org/collectionspace/services/authorization/RoleResource.java
M services/authorization-mgt/service/src/main/java/org/collectionspace/services/authorization/PermissionRoleSubResource.java
M services/authorization-mgt/import/src/main/resources/import-data/import-permissions.xml
M services/authorization-mgt/import/src/main/resources/import-data/import-permissions-roles.xml
M services/authorization-mgt/import/src/main/resources/import-data/import-roles.xml
M services/authorization-mgt/client/src/test/java/org/collectionspace/services/authorization/client/test/PermissionRoleServiceTest.java
M services/authorization-mgt/client/src/test/java/org/collectionspace/services/authorization/client/test/RolePermissionServiceTest.java
M services/authorization-mgt/client/src/main/java/org/collectionspace/services/client/PermissionRoleClient.java
M services/authorization-mgt/client/src/main/java/org/collectionspace/services/client/RolePermissionClient.java
M services/authorization-mgt/client/src/main/java/org/collectionspace/services/client/PermissionRoleProxy.java
M services/authorization-mgt/client/src/main/java/org/collectionspace/services/client/RolePermissionProxy.java
M services/common/src/main/java/org/collectionspace/services/common/storage/jpa/JpaRelationshipStorageClient.java
M services/common/src/main/java/org/collectionspace/services/common/security/SecurityInterceptor.java
M services/security/client/src/test/java/org/collectionspace/services/security/client/test/AuthorizationServiceTest.java
M services/security/client/src/test/java/org/collectionspace/services/security/client/test/MultiTenancyTest.java
Patrick Schmitz [Mon, 14 Jun 2010 05:30:06 +0000 (05:30 +0000)]
CSPACE-1152 and CSPACE-2126. Changed Vocabulary schema to include a shortIdentifier. This is now used as the basis of the refName. Added support to vocabulary for readByName. Added validatorHandler to require that shortIdentifier only contain word chars.
Patrick Schmitz [Mon, 14 Jun 2010 05:29:19 +0000 (05:29 +0000)]
CSPACE-1152 and CSPACE-2126. Changed Vocabulary schema to include a shortIdentifier. This is now used as the basis of the refName. Added support to vocabulary for readByName. Added validatorHandler to require that shortIdentifier only contain word chars.
Patrick Schmitz [Fri, 11 Jun 2010 20:02:41 +0000 (20:02 +0000)]
CSPACE-1895 Work towards adding repeating sections. For now, just put in notes in the key places where we need to make changes to support this, as we explore alternatives.
Sanjay Dalal [Fri, 11 Jun 2010 19:09:27 +0000 (19:09 +0000)]
CSPACE-595 added a test for multi-tenancy. it uses two pre-configured users in ROLE_TEANAT_ADMINISTRATOR to create an account, a role and a permission for a service for each tenant. It then creates (potentially concurrently) dimension object as the newly created user for a tenant, tries to update the other tenant's object and fails successfully, tries to delete the other tenant's object and fails successfully.
test: MultiTenancyTest, all service tests
M services/authorization-mgt/service/src/main/java/org/collectionspace/services/authorization/storage/RoleJpaFilter.java
M services/authorization-mgt/service/src/main/java/org/collectionspace/services/authorization/storage/PermissionDocumentHandler.java
M services/authorization-mgt/service/src/main/java/org/collectionspace/services/authorization/storage/PermissionRoleUtil.java
M services/authorization-mgt/service/src/main/java/org/collectionspace/services/authorization/storage/PermissionJpaFilter.java
M services/authorization-mgt/service/src/main/java/org/collectionspace/services/authorization/storage/AuthorizationDelegate.java
M services/authorization-mgt/service/src/main/java/org/collectionspace/services/authorization/storage/RoleDocumentHandler.java
M services/common/src/main/java/org/collectionspace/services/common/storage/jpa/JpaStorageUtils.java
M services/common/src/main/java/org/collectionspace/services/common/security/SecurityUtils.java
M services/account/service/src/main/java/org/collectionspace/services/account/storage/AccountDocumentHandler.java
M services/account/service/src/main/java/org/collectionspace/services/account/storage/AccountJpaFilter.java
A services/security/client/src/test/java/org/collectionspace/services/security/client/test/MultiTenancyTest.java
Aron Roberts [Fri, 11 Jun 2010 00:39:53 +0000 (00:39 +0000)]
CSPACE-2123: Added missing resource URL paths for the Relation service to the tenant bindings file. After this change, permissions are now successfully created for these paths.
Aron Roberts [Wed, 9 Jun 2010 21:10:16 +0000 (21:10 +0000)]
CSPACE-2121: Reverting inadvertent change to username in exec:java in pom.xml, used during testing of this issue and not relevant to the fix. This username value and its corresponding password value in exec:java do not appear to be used currently.
Aron Roberts [Wed, 9 Jun 2010 21:04:40 +0000 (21:04 +0000)]
CSPACE-2121: Added 'install' as a dependency of setup_hibernate.cfg in Ant buildfile in authorization-mgt/import. If the local target directory, created by 'install', was missing, a copy task failed in the 'import' target.
Sanjay Dalal [Wed, 9 Jun 2010 17:32:38 +0000 (17:32 +0000)]
CSPACE-1782 where clauses in JPA services now use current tenant id
test: all service tests
M services/authorization-mgt/service/src/main/java/org/collectionspace/services/authorization/storage/RoleJpaFilter.java
M services/authorization-mgt/service/src/main/java/org/collectionspace/services/authorization/storage/PermissionJpaFilter.java
M services/authorization-mgt/import/src/main/resources/import-data/import-permissions.xml
M services/authorization-mgt/import/src/main/resources/import-data/import-permissions-roles.xml
M services/authorization-mgt/import/src/main/resources/import-data/import-roles.xml
M services/authorization-mgt/client/src/test/java/org/collectionspace/services/authorization/client/test/PermissionServiceTest.java
M services/common/src/main/java/org/collectionspace/services/common/storage/jpa/JpaDocumentFilter.java
M services/common/src/main/java/org/collectionspace/services/common/storage/jpa/JpaStorageClientImpl.java
M services/common/src/main/java/org/collectionspace/services/common/storage/jpa/JpaStorageUtils.java
M services/common/src/main/java/org/collectionspace/services/common/security/SecurityInterceptor.java
M services/common/src/main/java/org/collectionspace/services/common/document/DocumentFilter.java
M services/account/service/src/main/java/org/collectionspace/services/account/storage/AccountStorageClient.java
M services/account/service/src/main/java/org/collectionspace/services/account/storage/AccountJpaFilter.java
M services/account/client/src/test/java/org/collectionspace/services/account/client/test/AccountServiceTest.java
Sanjay Dalal [Tue, 8 Jun 2010 00:23:27 +0000 (00:23 +0000)]
CSPACE-595 first pass at the side-by-side tenant test, although not used concurrently yet
CSPACE-1035 nuxeo domain (for each tenant) is created at the startup time if it does not already exist
- added pahma-domain (hearstmuseum.berkeley.edu) to the tenant bindings in addition to the default-domain (movingimages.us) that is currently used. both bindings are similar in this first pass, i.e. both tenants use the same set of services with same service object bindings as well.
- each tenant binding now specifies repository domain(s) used
- each repository domain embodies information about the repository client needed
- tenantrepository uses repository javaclient instead of using nuxeo connector directly
- each service binding now specifies the repository domain used
- account factory on the client side now takes tenant id from new property cspace.tenant that is added to collection-space-client.properties
- removed deadwood from test-xxx.sql scripts
- role and permissions doc handlers now utilize tenant id if provided by the consumer at the time of creation, if not, they continue to use logged in user's tenant id
-
!!ATTENTION!!
-ant create_db from the trunk (to verify nuxeo domain is created)
-ant import from the trunk (no need to checkin import-*.xml files)
-ant undeploy deploy from the trunk
M trunk/services/authorization-mgt/service/src/main/java/org/collectionspace/services/authorization/storage/PermissionDocumentHandler.java
M trunk/services/authorization-mgt/service/src/main/java/org/collectionspace/services/authorization/storage/RoleDocumentHandler.java
M trunk/services/authorization-mgt/import/src/main/java/org/collectionspace/services/authorization/importer/AuthorizationSeed.java
M trunk/services/authorization-mgt/import/src/main/resources/import-data/import-permissions.xml
M trunk/services/authorization-mgt/import/src/main/resources/import-data/import-permissions-roles.xml
M trunk/services/authorization-mgt/import/src/main/resources/import-data/import-roles.xml
M trunk/services/authorization-mgt/import/src/main/resources/log4j.properties
M trunk/services/authorization-mgt/client/src/test/java/org/collectionspace/services/authorization/client/test/RoleServiceTest.java
M trunk/services/authorization-mgt/client/src/test/java/org/collectionspace/services/authorization/client/test/PermissionServiceTest.java
M trunk/services/authorization/pstore/src/main/resources/db/mysql/test_authorization.sql
M trunk/services/authentication/pstore/src/main/resources/db/mysql/test_authentication.sql
M trunk/services/common/src/main/java/org/collectionspace/services/common/repository/RepositoryClient.java
M trunk/services/common/src/main/java/org/collectionspace/services/common/context/AbstractServiceContextImpl.java
M trunk/services/common/src/main/java/org/collectionspace/services/common/ServiceMain.java
M trunk/services/common/src/main/java/org/collectionspace/services/common/config/TenantBindingConfigReaderImpl.java
M trunk/services/common/src/main/java/org/collectionspace/services/common/document/JaxbUtils.java
M trunk/services/common/src/main/java/org/collectionspace/services/nuxeo/client/java/RepositoryJavaClientImpl.java
M trunk/services/common/src/main/java/org/collectionspace/services/nuxeo/client/java/TenantRepository.java
M trunk/services/common/src/main/config/services/service-config.xml
M trunk/services/common/src/main/config/services/tenant-bindings.xml
M trunk/services/common/src/main/resources/tenant.xsd
M trunk/services/common/src/main/resources/service.xsd
M trunk/services/account/pstore/src/main/resources/db/mysql/test_account.sql
M trunk/services/account/client/src/test/java/org/collectionspace/services/account/client/test/AccountRoleServiceTest.java
M trunk/services/account/client/src/test/java/org/collectionspace/services/account/client/test/AccountServiceTest.java
M trunk/services/account/client/src/main/java/org/collectionspace/services/client/AccountFactory.java
M trunk/services/account/client/src/main/java/org/collectionspace/services/client/AccountClient.java
M trunk/services/security/client/src/test/java/org/collectionspace/services/security/client/test/AuthenticationServiceTest.java
M trunk/services/security/client/src/test/java/org/collectionspace/services/security/client/test/AuthorizationServiceTest.java
M trunk/services/client/src/main/java/org/collectionspace/services/client/AbstractServiceClientImpl.java
M trunk/services/client/src/main/java/org/collectionspace/services/client/CollectionSpaceClient.java
M trunk/services/client/src/main/resources/collectionspace-client.properties
D trunk/src/main/resources/db/mysql/service-dump.sql
Sanjay Dalal [Fri, 4 Jun 2010 21:32:32 +0000 (21:32 +0000)]
CSPACE-2003, CSPACE-1969 ImportAuthZ now inserts default roles, permissions and permission-roles into the database in addtion to inserting ACLs in Spring. These could be retrieved using the respective authz services.
CSPACE-2004, CSPACE-1926 ImportAuthZ now creates a ROLE_TENANT_ADMINISTRATOR for each tenant that has all privileges to all services used by that tenant. It also creates a ROLE_TENANT_READER. This role has only READ, SEARCH privileges for all services used by the tenant
test: ant import, mvn test (service level)
Aron Roberts [Fri, 4 Jun 2010 18:46:30 +0000 (18:46 +0000)]
CSPACE-2077: Moved assertion that checks for number of authority references returned out of a conditional block; added debug message for authrefs returned, in all AuthRefsTests of services.
Aron Roberts [Fri, 4 Jun 2010 00:12:45 +0000 (00:12 +0000)]
CSPACE-2028: Added missing 'collection' field to CollectionObject schema in the Services layer, merging changes made to the 0.7 release branch to services trunk.
Sanjay Dalal [Thu, 3 Jun 2010 19:44:26 +0000 (19:44 +0000)]
CSPACE-1937 if a role/permission/account does not have any relationship (to permission, role, role, resp.), return empty result instead of 404
test: added tests for this case in accountrole, permissionrole and rolepermission
M authorization-mgt/client/src/test/java/org/collectionspace/services/authorization/client/test/PermissionRoleServiceTest.java
M authorization-mgt/client/src/test/java/org/collectionspace/services/authorization/client/test/RolePermissionServiceTest.java
M account/client/src/test/java/org/collectionspace/services/account/client/test/AccountRoleServiceTest.java
M account/service/src/main/java/org/collectionspace/services/account/storage/AccountRoleDocumentHandler.java
M authorization-mgt/service/src/main/java/org/collectionspace/services/authorization/storage/PermissionRoleDocumentHandler.java
M common/src/main/java/org/collectionspace/services/common/storage/jpa/JpaRelationshipStorageClient.java
Aron Roberts [Wed, 2 Jun 2010 23:03:51 +0000 (23:03 +0000)]
CSPACE-1875: In Loan Out records in the Services Layer, merged into trunk from the 0.7 Release Branch, three scalar fields were added: loanedObjectStatus, loanedObjectStatusNote, and loanedObjectStatusDate. This is an interim step until sub-loans are implemented in a later release.
Aron Roberts [Tue, 1 Jun 2010 19:38:01 +0000 (19:38 +0000)]
CSPACE-1227,CSPACE-1916: Filled out CollectionObject schema, in the Services Layer, with the remaining fields required by Cataloging Schema Limited for 0.7 on the wiki. Note that briefDescription is still a single, non-repatable scalar in this check-in, and that the three fields - relatedObjectNumber, relatedObjectAssociation, and relatedObjectNote - are not included, per Megan in IRC on 2010-06-01. Changes a Nuxeo document type, and thus requires stopping the 2 JBoss servers and performing an 'ant deploy'.
Aron Roberts [Mon, 31 May 2010 17:48:36 +0000 (17:48 +0000)]
CSPACE-1946: TEMPORARILY commenting out the block, in SecurityInterceptor, that checks whether a services client is authorized to access resources at a particular URL. This effectively DISABLES authorization checks on access requests to the services layer. This is a temporary workaround, suggested in one of Sanjay's comments on this issue, to facilitate testing on nightly.collectionspace.org on 2010-05-31, and should be reversed as soon as practical.
Aron Roberts [Fri, 28 May 2010 23:52:22 +0000 (23:52 +0000)]
CSPACE-1911: 'Banners' output between Services client tests now properly show calling class and line number in their log statements. Banner generation is now separated from test setup (e.g. specifying expected status code, valid status codes), in the client test framework, and each can be used independently. Formerly banners were output as an undocumented side effect of test setup; while that was convenient, it was not good practice.
Sanjay Dalal [Thu, 27 May 2010 22:28:53 +0000 (22:28 +0000)]
CSPACE-1937 blocker, dup of 1299
CSPACE-1299 added permrole as a subresource of role. it is now possible to associate one or more permissions from a role service using roles/id/permroles
test: authorization-mgt, all service tests
Sanjay Dalal [Thu, 27 May 2010 19:20:39 +0000 (19:20 +0000)]
CSPACE-1828 service name fixes role name with ROLE_{uppercase role name} if ROLE_ is not present in the role name
CSPACE-1944 role name in role once set cannot be changed
CSPACE-1945 resource name in permission once set cannot be changed
test: authorization-mgt/client
Aron Roberts [Thu, 27 May 2010 18:52:30 +0000 (18:52 +0000)]
CSPACE-1407: In tenant bindings for Movement service, added (uncommented) 'currentLocation' and 'normalLocation' as authority reference fields for this service, now that the StorageLocation / Location service is available.
Richard Millet [Thu, 27 May 2010 06:04:04 +0000 (06:04 +0000)]
CSPACE-864: Added a native Nuxeo "repeatable" information group to the CollectionObject schema for the "otherNumber" information group "otherNumber" = {otherNumberValue, otherNumberType}.
Sanjay Dalal [Wed, 26 May 2010 23:18:24 +0000 (23:18 +0000)]
CSPACE-1935 moved import driver out of test framework into a standalone utility
use ant import at any level to invoke the driver. requires build.
!!NOTE!!
this change overrides req. of mvn test (at authorization-mgt/import) as described in r2225 to import default permissions
cd trunk
mvn test -DskipTests
ant import
ant undeploy deploy
mvn test
D trunk/services/authorization-mgt/import/src/test/java/org/collectionspace/services/authorization/importer/AuthorizationSeedTest.java
D trunk/services/authorization-mgt/import/src/test/java/org/collectionspace/services/authorization/importer/AbstractAuthorizationTestImpl.java
D trunk/services/authorization-mgt/import/src/test/resources/applicationContext-authorization-test.xml
D trunk/services/authorization-mgt/import/src/test/resources/log4j.properties
A trunk/services/authorization-mgt/import/src/main/java/org/collectionspace/services/authorization/driver
A + trunk/services/authorization-mgt/import/src/main/java/org/collectionspace/services/authorization/driver/AuthorizationSeedDriver.java
A trunk/services/authorization-mgt/import/src/main/java/org/collectionspace/ImportAuthz.java
M trunk/services/authorization-mgt/import/src/main/resources/import-data/import-permissions.xml
M trunk/services/authorization-mgt/import/src/main/resources/import-data/import-permissions-roles.xml
A + trunk/services/authorization-mgt/import/src/main/resources/applicationContext-authorization-test.xml
A + trunk/services/authorization-mgt/import/src/main/resources/log4j.properties
M trunk/services/authorization-mgt/import/pom.xml
M trunk/services/authorization-mgt/import/build.xml
M trunk/services/authorization-mgt/build.xml
M trunk/services/pom.xml
M trunk/services/build.xml
M trunk/build.xml
Sanjay Dalal [Wed, 26 May 2010 17:05:34 +0000 (17:05 +0000)]
CSPACE-1364, CSPACE-1365
Enabled access control for all the services at the record/procedure type level. Permissions are seeded (authorization-mgt/import) for ROLE_ADMINISTRATOR using the tenant bindings. Seeding still happens through a test driver in the import module...would be moved to a Java main class later.
Test do/should not delete the seeded permissions...fixed those tests that were doing the same. These tests now either do not delete permissions
or create permissions for non-functional services.
Wired delete for account role and permission role sub resources.
All alternate URIs with which a service could be accessed shoudl be in service bindings element named uriPath
test: all tests multiple times
!!NOTE!!
cd trunk/services
ant create_db
mvn clean install -DskipTests
ant undeploy deploy
mvn test
If you are not running all the tests, at least seed default permissions using the following
cd trunk/services/authorization-mgt/import
mvn test
M trunk/services/authorization-mgt/service/src/main/java/org/collectionspace/services/authorization/PermissionResource.java
M trunk/services/authorization-mgt/service/src/main/java/org/collectionspace/services/authorization/storage/AuthorizationDelegate.java
M trunk/services/authorization-mgt/service/src/main/java/org/collectionspace/services/authorization/PermissionRoleSubResource.java
M trunk/services/authorization-mgt/import/src/test/java/org/collectionspace/services/authorization/importer/AuthorizationSeedTest.java
M trunk/services/authorization-mgt/import/src/test/resources/applicationContext-authorization-test.xml
M trunk/services/authorization-mgt/import/src/test/resources/log4j.properties
M trunk/services/authorization-mgt/import/src/main/java/org/collectionspace/services/authorization/importer/AuthorizationSeed.java
M trunk/services/authorization-mgt/import/src/main/java/org/collectionspace/services/authorization/importer/AuthorizationGen.java
M trunk/services/authorization-mgt/import/src/main/resources/import-data/import-permissions.xml
M trunk/services/authorization-mgt/import/src/main/resources/import-data/import-permissions-roles.xml
M trunk/services/authorization-mgt/import/pom.xml
M trunk/services/authorization-mgt/client/src/test/java/org/collectionspace/services/authorization/client/test/PermissionServiceTest.java
M trunk/services/authorization-mgt/client/src/test/java/org/collectionspace/services/authorization/client/test/PermissionRoleServiceTest.java
M trunk/services/pom.xml
M trunk/services/authorization/service/src/main/java/org/collectionspace/services/authorization/spring/SpringPermissionManager.java
M trunk/services/authorization/service/src/main/java/org/collectionspace/services/authorization/spring/SpringAuthorizationProvider.java
M trunk/services/authorization/service/src/main/java/org/collectionspace/services/authorization/spring/SpringPermissionEvaluator.java
M trunk/services/authorization/service/src/main/java/org/collectionspace/services/authorization/CSpaceResourceImpl.java
M trunk/services/authorization/service/src/main/java/org/collectionspace/services/authorization/URIResourceImpl.java
M trunk/services/authorization/service/src/main/java/org/collectionspace/services/authorization/AuthZ.java
M trunk/services/authorization/service/src/main/java/org/collectionspace/services/authorization/spi/CSpacePermissionManager.java
M trunk/services/authorization/service/src/main/resources/applicationContext-authorization.xml
_M trunk/services/location/jaxb
M trunk/services/common/src/main/java/org/collectionspace/services/common/storage/jpa/JpaStorageClientImpl.java
M trunk/services/common/src/main/java/org/collectionspace/services/common/storage/jpa/JpaRelationshipStorageClient.java
M trunk/services/common/src/main/java/org/collectionspace/services/common/security/SecurityInterceptor.java
M trunk/services/common/src/main/config/services/tenant-bindings.xml
M trunk/services/common/src/main/resources/service.xsd
M trunk/services/account/service/src/main/java/org/collectionspace/services/account/AccountRoleSubResource.java
M trunk/services/account/service/src/main/java/org/collectionspace/services/account/AccountResource.java
_M trunk/services/note/service
_M trunk/services/note/jaxb
_M trunk/services/note/client
M trunk/services/security/client/src/test/java/org/collectionspace/services/security/client/test/AuthenticationServiceTest.java
M trunk/services/security/client/src/test/java/org/collectionspace/services/security/client/test/AuthorizationServiceTest.java
Aron Roberts [Wed, 26 May 2010 04:09:38 +0000 (04:09 +0000)]
CSPACE-1911: In client test framework, 'banner' signifying the start of a test can now be output using a passed-in Logger. This reflects the caller's class name and line number in the log statement, and can also print the class name in the banner. Examples of such calls are implemented, for now, only in PersonAuthoritySearchTest, but can be trivially bulk-implemented in all other test classes.
Aron Roberts [Wed, 26 May 2010 03:12:40 +0000 (03:12 +0000)]
CSPACE-1895: Moved 'note' module slightly down, below account (and generally below authZ- and authN-related modules) in main services POM, per discussion with Sanjay. JIRA issue pertains to Location, but includes Patrick's work on a new, generalizable Note (aka Comment) service, which is the relevant module to this minor change.