SecurityService.updateUserProperties(...) was changed in this branch. So
arguments could be passed null and they would not be set to null
anymore, but would only be ignored in the update transaction. This was
added to the documentation to the method plus the respective
UpdateUserPropertiesOperation class
A client facing message was formed using string concatenation. This was
replaced with a string pulled wholly from StringMessages for
localization correctness.
The same message used the keyword "subscription" with regard to email
subscriptions. This could be confused with subscriptions under the
payment model for advanced features. This was replaced with a "will
receive" / "will not receive" semantic binary in the context.
The following commit was not checked properly. It was assumed to be a
merge with the main branch, but was actually a merge with a very stale
main branch with many conflicts that were then resolved manually.
1373405280
Progress indicator position fixed: checkbox tile was using GSS of
SuggestedMultiSelection before. This enforced rigid CSS with the
!important flag necessary for its more complex functionality that was
making logic for overlay stack unnecessarily complex. The necessary
styling was thus extracted out into CheckboxTile.gss
Toast notifications not showing above footer fixed: this was due to z
index of footer being 1000 and that of Notification being 100. I brought
up notification.css z-index to 1001.
1. updateUserProperties: if null dont update that specific property.
this behavior now applies to each updatabale property in the security
service method.
2. checkbox tile onToggle async loading view is now triggered with
callbacks instead of expecting onToggle to use blocking asynchrony
If null is passed to email subscription flag, nothing will be changed.
Previously, it was the case that null could not be passed, behaviorally
the same value as before would have to be reapplied in expected use
cases which could cause data consistency issues
added to Admin Console > User Management > User row > Edit action >
Dialog box > checkbox
and also to PUT /user API
and also (partially) to User details (this is currently erroring)
Flag is set to false by default. Cross checked setting of flag at user
creation from Admin Console > User Management > Create User, then the
corresponding record in mongo db, which does indeed have the flag.
Locally, the lock duration was not long enough to last until the admin
logged in to unlock them. This bypassed the need to interact with a
dialog locally, and so the test was still succeeding even after an
interaction command for this dialog was removed. This duration was long
enough for the server however, and so the dialog demanding interaction
would appear and crash the test. The expected lock duration has been
extended by trigger +1 failed login attempts as well as the dialog
interact.
Popup dialog replaced with toast notification for success. Although the
reason behind this bug is yet not understood because the dialog should
have been accepted by the corresponding method in the PO, as it has done
before, replacing it with a toast notification should nevertheless
remove the possibility of it happening again.
locked IPs are fetched after being compared with the permission for each
IP. Those that fail the permission permission check are removed from the
result of the fetch operation. This removal was previously happening in
an iterable.forEach method, removing elements from inside this method
caused a ConcurrentModificationException, so forEach usage was replaced
with an iterator that safely allows removals based on cursor position.
Locked IPs were previously not treated as SecuredSecurityType, but
rather their actions were treated as separate ServerAction instances
with the object in question remaining the server. To maintain permission
granularity at the IP address level, Locked IP addresses have been made
HasPermissions object in SecuredSecurityType with DefaultActions READ
and DELETE serving as get and unlock method permissions respectively
that can now be treated as the object wildcard of permission triples.
A method was exposed from UserManagementWriteService for bulk unlocking
a selection of users by their username. An 'extra' property was added to
successInfo class to return usernames without disturbing GWT
serialization. corresponding test is also written.
In SecurityServiceImpl, the
UserManagementException.PASSWORD_AUTHENTICATION_CURRENTLY_LOCKED_FOR_USER
property is used to return an error message with a constant referrable
string that is checked against a condition elsewhere in the code. I had
caused issues in the code by replacing this referenced string with a
custom error message without accounting for its usage elsewhere, causing
faults. This has been reversed.
in the IP Blocklist panel, the unlock button was added at an index
position. this was not necessary, but cascaded the issue that when the
refresh button was not added at 0, inserting at index 1 caused errors
cascading upto LocalServer.
the refresh button did not need to be added before the commit separately
because it was composed by a buttonPanel.addAction method that did both
object creation and addition to the panel together before commit
c10f6027a3, and after that commit was
created by a Button constructor.
use DefaultActions.READ and .DELETE instead of creating altogether new
ones in SecuredDomainType
allow unlocking for those with the roles admin or server admin, or those
with the DELETE permission on the respective ip blocklist domain type.
fail2ban didn't extend the lock when a lock already existed on said IP. this was remedied. the test failed because selenium was looking for a component using the driver, so from the head of the tree, instead of from the webelement, which was at a specific lower point in the element tree and thus is unaffected by selenium IDs being similar. the findElement is now done from a method on the webelement.
System properties were being read from the config file previously, but not set using system.setproperty as they are expected by the selenium package later. This fixes that by setting them before control is handed over to selenium
Sohaib Baig