sandstorm-io / sandstorm

Sandstorm for Work features will now be available to all users. The "for Work" product is no more.

These call UiView.newRequestSession() instead of newSession().

… host objects that match.

This only makes them show in the list. Selecting such a grain will still (incorrectly) return the grain's UiView capability; fixing that will happen in later commits.

This commit only shows grains owned by the user. A subsequent commit will support shared grains.

…including demo users.

We want to see if this makes users more likely to "get hooked" and become paying users or refer their friends.

Add SAML logout

This doesn't handle incoming logout requests from the IDP (yet).

Fixes #2720

This eliminates the only case where we had to look up the standalone domain for a token.

Allow for ldap self signed certs

Fixes #2592

Users find this confusing.

A better solution would be to automatically delete trashed grains as needed when the user is running up against quota limits, but that would be trickier to implement, and as a result we haven't done it. In the meantime, this stopgap is much better than nothing.

Technically a user could abuse this by swapping grains in and out of their trash, but whatever.

The previous fix was incorrect.

Fix that the preinstalled app package IDs could become outdated.

When an app update is discovered through an app index refresh, if the newer version of the app was already installed (for example, because someone had gone to the app market and installed it manually before the index update landed), then the preinstall package ID was never updated. This means the old version continued to be preinstalled and also broke appdemos of the particular app.

…bdas.

I refactored admin notifications a bit. We were not using the text stored in the database, so I stopped setting it -- it's best not to store such messages to the database since it will make localization harder.

…the feature key page.

The renewal code introduced in a later commit will store a renewal problem when renewal fails.

An exception is made for Meteor.users because I haven't convinced myself that's
worth untangling.