Merge branch 'master' of github.com:Evolveum/midpoint

Evolveum · Dec 18, 2015 · 09d5c8b · 09d5c8b
2 parents d8ebd9c + 803287b
commit 09d5c8b
Show file tree

Hide file tree

Showing 530 changed files with 27,435 additions and 7,529 deletions.
diff --git a/NEWS b/NEWS
@@ -1,27 +1,35 @@
-midPoint 3.2 "Tycho"
+midPoint 3.3 "Lincoln"
 -------------------------------
 
-Release 3.2 is a tenth midPoint release code-named Tycho. The Tycho release
-brings new advanced LDAP connector, internal improvements and governance
-technology preview.
+Release 3.3 is a fifteenth midPoint release code-named Lincoln. The 3.3
+release brings major GUI look&feel improvements and miscellaneous new
+features that improve practical usability of midPoint.
 
-Release date: 5th August 2015
+Release date: 1st December 2015
 
-* Password recovery (security questions)
-* Access certification (technology preview)
-* referenceSearch expression to create a generic reference in expressions and mappings
-* Reworked LDAP Connector
-* LifeRay Portal connector
-* Support for native attribute names
-* Support for entitlement shortcut attributes (e.g. memberOf LDAP attribute)
-* Support for auxiliary object classes
-* Matching rule for LDAP distringuished name
-* Support for synchronization of all object classes
-* Asynchronous bulk delete task
-* Improved logging of authorization processing
-* Old values in audit deltas
-* Improved audit log report
-* Support "minimal" fetch strategy to avoid fetching of expensive attributes
-* Support for recomputation of other than user objects
-* GUI enhancements
-* Minor improvements for international environments
+Changes with respect to version 3.2:
+* Significant GUI look&feel improvements
+* New self-service GUI pages
+    End-user home page (end-user dashboard)
+    End-user profile page
+    End-user credentials change page
+* Sequences
+* Improvement of associationTargetSearch expression
+* Aligned default value for user activation
+* Aligned default value for allowEmptyValues in expressions
+* LDAP-based connector for Active Directory (experimental)
+* Run-time support for Java 8 environment
+* Options for interpretation of expression empty values in queries
+* Option to force legacy object class names in connectors
+* Displaying role members on role details page
+* Expanded audit record table for easier search in deltas
+* Support for storing old values and object names in audit records
+* Improved audit report
+* Localization files switched to UTF-8 and single-file format
+* Using transifex.com to support community localization
+* Support for provisioning of user photo (jpeg binary data)
+* Indirect role membership index (roleMembershipRef)
+* Consistency mechanism improvements (self-healing)
+* Improved reliability of strong mappings
+
+XPath2 scripting is deprecated and it is not supported in Java8 environment.
diff --git a/README b/README
@@ -1,4 +1,4 @@
-midPoint 3.2 "Tycho"
+midPoint 3.3 "Lincoln"
 -------------------------------
 
 General informations:

diff --git a/RELEASE-NOTES b/RELEASE-NOTES
@@ -1,4 +1,4 @@
 To see actual releases notes please go to:
 
-https://wiki.evolveum.com/display/midPoint/Release+3.2
+https://wiki.evolveum.com/display/midPoint/Release+3.3
 
diff --git a/build-system/pom.xml b/build-system/pom.xml
@@ -25,7 +25,7 @@
     <parent>
         <groupId>com.evolveum.midpoint</groupId>
         <artifactId>midpoint</artifactId>
-        <version>3.3-SNAPSHOT</version>
+        <version>3.4-SNAPSHOT</version>
     </parent>
     <pluginRepositories>
         <pluginRepository>
@@ -875,7 +875,7 @@
 			<dependency>
 				<groupId>org.apache.directory.api</groupId>
 				<artifactId>api-all</artifactId>
-				<version>1.0.0-M32-SNAPSHOT</version>
+				<version>1.0.0-M32-e1</version>
 				<exclusions>
 	                <exclusion>
 	                    <artifactId>slf4j-api</artifactId>

diff --git a/cli/common/pom.xml b/cli/common/pom.xml
@@ -23,12 +23,12 @@
     <name>midPoint CLI Interface - common</name>
     <groupId>com.evolveum.midpoint.cli</groupId>
     <artifactId>common</artifactId>
-    <version>3.3-SNAPSHOT</version>
+    <version>3.4-SNAPSHOT</version>
 
     <parent>
         <groupId>com.evolveum.midpoint</groupId>
         <artifactId>cli</artifactId>
-        <version>3.3-SNAPSHOT</version>
+        <version>3.4-SNAPSHOT</version>
     </parent>
 
     <dependencies>

diff --git a/cli/ninja/pom.xml b/cli/ninja/pom.xml
@@ -23,12 +23,12 @@
     <name>midPoint CLI Interface - ninja</name>
     <groupId>com.evolveum.midpoint.cli</groupId>
     <artifactId>ninja</artifactId>
-    <version>3.3-SNAPSHOT</version>
+    <version>3.4-SNAPSHOT</version>
 
     <parent>
         <groupId>com.evolveum.midpoint</groupId>
         <artifactId>cli</artifactId>
-        <version>3.3-SNAPSHOT</version>
+        <version>3.4-SNAPSHOT</version>
     </parent>
 
     <dependencies>

diff --git a/cli/pom.xml b/cli/pom.xml
@@ -22,13 +22,13 @@
 
     <name>midPoint CLI Interface</name>
     <artifactId>cli</artifactId>
-    <version>3.3-SNAPSHOT</version>
+    <version>3.4-SNAPSHOT</version>
     <packaging>pom</packaging>
 
     <parent>
         <artifactId>parent</artifactId>
         <groupId>com.evolveum.midpoint</groupId>
-        <version>3.3-SNAPSHOT</version>
+        <version>3.4-SNAPSHOT</version>
         <relativePath>../build-system/pom.xml</relativePath>
     </parent>
 

diff --git a/cli/seppuku/pom.xml b/cli/seppuku/pom.xml
@@ -23,12 +23,12 @@
     <name>midPoint CLI Interface - seppuku</name>
     <groupId>com.evolveum.midpoint.cli</groupId>
     <artifactId>seppuku</artifactId>
-    <version>3.3-SNAPSHOT</version>
+    <version>3.4-SNAPSHOT</version>
 
     <parent>
         <groupId>com.evolveum.midpoint</groupId>
         <artifactId>cli</artifactId>
-        <version>3.3-SNAPSHOT</version>
+        <version>3.4-SNAPSHOT</version>
     </parent>
 
     <dependencies>

diff --git a/config/initial-objects/020-system-configuration.xml b/config/initial-objects/020-system-configuration.xml
@@ -94,4 +94,46 @@
             <maxAge>P1M</maxAge>
         </closedTasks>
     </cleanupPolicy>
+    <adminGuiConfiguration>
+        <userDashboardLink>
+            <targetUrl>/self/profile</targetUrl>
+            <label>Profile</label>
+            <description>View/edit your profile</description>
+            <icon>
+                <cssClass>fa fa-user</cssClass>
+            </icon>
+            <color>blue</color>
+            <authorization>http://midpoint.evolveum.com/xml/ns/public/security/authorization-ui-3#selfProfile</authorization>
+            <authorization>http://midpoint.evolveum.com/xml/ns/public/security/authorization-ui-3#selfAll</authorization>
+        </userDashboardLink>
+        <userDashboardLink>
+            <targetUrl>/self/credentials</targetUrl>
+            <label>Credentials</label>
+            <description>View/edit your credentials</description>
+            <icon>
+                <cssClass>fa fa-shield</cssClass>
+            </icon>
+            <color>red</color>
+            <authorization>http://midpoint.evolveum.com/xml/ns/public/security/authorization-ui-3#selfCredentials</authorization>
+            <authorization>http://midpoint.evolveum.com/xml/ns/public/security/authorization-ui-3#selfAll</authorization>
+        </userDashboardLink>
+        <userDashboardLink>
+            <targetUrl>/admin/users</targetUrl>
+            <label>List users</label>
+            <icon>
+                <cssClass>fa fa-users</cssClass>
+            </icon>
+            <color>green</color>
+            <authorization>http://midpoint.evolveum.com/xml/ns/public/security/authorization-ui-3#users</authorization>
+        </userDashboardLink>
+        <userDashboardLink>
+            <targetUrl>/admin/resources</targetUrl>
+            <label>List resources</label>
+            <icon>
+                <cssClass>fa fa-building</cssClass>
+            </icon>
+            <color>yellow</color>
+            <authorization>http://midpoint.evolveum.com/xml/ns/public/security/authorization-ui-3#resources</authorization>
+        </userDashboardLink>
+    </adminGuiConfiguration>
 </systemConfiguration>
diff --git a/config/initial-objects/040-role-enduser.xml b/config/initial-objects/040-role-enduser.xml
@@ -19,8 +19,7 @@
     <name>End user</name>
     <description>Role authorizing end users to log in, change their passwords and review assigned accounts.</description>
     <authorization>
-        <action>http://midpoint.evolveum.com/xml/ns/public/security/authorization-ui-3#dashboard</action>
-        <action>http://midpoint.evolveum.com/xml/ns/public/security/authorization-ui-3#myPasswords</action>
+        <action>http://midpoint.evolveum.com/xml/ns/public/security/authorization-ui-3#selfAll</action>
     </authorization>
     <authorization>
         <action>http://midpoint.evolveum.com/xml/ns/public/security/authorization-model-3#read</action>
@@ -38,19 +37,42 @@
         </object>
     </authorization>
     <authorization>
-        <action>http://midpoint.evolveum.com/xml/ns/public/security/authorization-model-3#modify</action>
-        <item>credentials</item>
+    	<action>http://midpoint.evolveum.com/xml/ns/public/security/authorization-model-3#changeCredentials</action>
+    	<phase>request</phase>
+    	<object>
+    		<special>self</special>
+    	</object>
+    	<item>credentials</item>
     </authorization>
     <authorization>
-        <action>http://midpoint.evolveum.com/xml/ns/public/security/authorization-model-3#modify</action>
-        <object>
-            <type>ShadowType</type>
-            <owner>
-                <special>self</special>
-            </owner>
-        </object>
-
-        <item>credentials</item>
+    	<action>http://midpoint.evolveum.com/xml/ns/public/security/authorization-model-3#changeCredentials</action>
+    	<phase>request</phase>
+    	<object>
+    		<type>ShadowType</type>
+    		<owner>
+    			<special>self</special>
+    		</owner>
+    	</object>
+    	<item>credentials</item>
+    </authorization>
+    <authorization>
+    	<action>http://midpoint.evolveum.com/xml/ns/public/security/authorization-model-3#modify</action>
+    	<phase>execution</phase>
+    	<object>
+    		<special>self</special>
+    	</object>
+    	<item>credentials</item>
+    </authorization>
+    <authorization>
+    	<action>http://midpoint.evolveum.com/xml/ns/public/security/authorization-model-3#modify</action>
+    	<phase>execution</phase>
+    	<object>
+    		<type>ShadowType</type>
+    		<owner>
+    			<special>self</special>
+    		</owner>
+    	</object>
+    	<item>credentials</item>
     </authorization>
     <authorization>
         <action>http://midpoint.evolveum.com/xml/ns/public/security/authorization-model-3#read</action>

diff --git a/config/initial-objects/090-report-audit.xml b/config/initial-objects/090-report-audit.xml
diff --git a/config/initial-objects/110-report-user-list.xml b/config/initial-objects/110-report-user-list.xml
diff --git a/config/initial-objects/111-report-reconciliation-shadow-owner.xml b/config/initial-objects/111-report-reconciliation-shadow-owner.xml