1. 14 Apr, 2020 11 commits
  2. 13 Apr, 2020 6 commits
    • Jérome Perrin's avatar
      testAuthenticationPolicy: install erp5_crm · 468da0e3
      Jérome Perrin authored
      This is a dependency of erp5_credential, it should be installed in the
      test.
      
      This fixes a test failure,
      portal_notification.sendNotification(store_as_event=True) is now an
      error when erp5_crm is not installed.
      468da0e3
    • Jérome Perrin's avatar
      Restricted: bug fixes, support generator and collections module · 12032013
      Jérome Perrin authored
      Add some features to restricted python and fix problems revealed by running Zope's test suites.
      
      # Bug fixes
      
       - Disallow access to old style classes without security declarations. This is not allowed in vanilla zope, but we allowed this accidentally about two years ago. This branch includes some fixes for cases where we accessed not protected classes in a way that should not have been allowed - ERP5 test suite pass, but there might be more cases in code not covered by ERP5 test suite.
       - Fix iterating on `reversed(iterable)` which was unauthorized, maybe since python 2.7
       - Disallow new style classes in container access (iteration, `{}.get` etc). Only classes had this problem, not instances, so this probably has no impact for us, but it allows running AccessControl test suite.
       - Disallow attribute names ending in `__roles__` in class name. This probably does not impact us either, but also for AccessControl tests suite.
      
      
      # New features
      
       - Allow iterating on a generator. It's still not possible to use `yield` statement in restricted python, but iterating is now possible
       - Allow `cStringIO.StringIO("initial value")`, only `cStringIO.StringIO()` was allowed
       - Enable `collections.namedtuple` and add a few tests for other members of `collections` ( not `collections.deque` because we never used it so far )
      
      See merge request !1090
      12032013
    • Jérome Perrin's avatar
      Use gadget editor on portal components in ERP5JS · 24d45f1c
      Jérome Perrin authored
      This uses the new "only ERP5JS" actions to enable components editor in ERP5JS, so that we can edit components on ERP5JS .
      
      This does not change anything in the old UI (erp5_xhml_style), where the editor field will still be used.
      
      See merge request !982
      24d45f1c
    • Jérome Perrin's avatar
      testUpgradeInstanceWithOldDataFs: change connection string in Data.fs · 19b9a486
      Jérome Perrin authored
      This test loads a reference Data.fs, but we don't want to connect to
      the mysql referenced in the mariadb, because it might be used by another
      test node.
      
      Before the beginning of the test, rewrite the connection string to the
      one this test node is using.
      
      This relies on an updated dump produced in nexedi/erp5-bin@8310e4e4
      
      See merge request !1098
      19b9a486
    • Jérome Perrin's avatar
      More Trade Model Path Features · 6c6018f4
      Jérome Perrin authored
      Allow to set more categories (funding and function)
      
      Allow to configure a script to "unset" categories, to address this issue that sometimes we do not want to keep categories from input movements.
      
      ![image](/uploads/d2676cc15d5a85c33dc66df2138d57eb/image.png)
      
      
      See merge request !1082
      6c6018f4
    • Jérome Perrin's avatar
      authentication policy: Fix Credential Recovery creation · 0d078bd1
      Jérome Perrin authored
      `erp5_authentication_policy` can be configured to automatically create `Credential Recovery` for user once login expire.
      
      This was no longer working since we switched to `ERP5 Login`, `Credential Recovery` ticket was created with a relation to `ERP5 Login`, but it should be related to the `Person`.
      
      See merge request !1096
      0d078bd1
  3. 10 Apr, 2020 6 commits
  4. 08 Apr, 2020 12 commits
  5. 07 Apr, 2020 5 commits