Notes

Release Name: 8.18

Notes:
Tuleap 8.18 (Thursday, August 18th 2016)
========================================

Enhancement
-----------------------

    * story #9281: define FRS global permissions

Bug fix
-----------------------

    * request #9344: Persistent XSS through code snippet download
    * request #9329: New install doesn't prompt for domain name
    * request #9355: 'Import List Of Users' does not work with emails
    * request #9335: Do not inherit default trackers when importing from XML
    * request #9361: CVS search by commiter does not work
    * request #8839: Call to sparklines.php should be made in POST to avoid errors
    * request #9371: Wrong artifact warning message when a user supposed to be notified is suspended
    * request #9381: Release notes and changelog can not be accessed
    * request #9389: Cross reference field broken while using artifact link field
    * request #9382: A user which has not been connected at least one time can not be suspended for inactivity
    * request #9401: Impossible to update release
    * request #9400: Error raised when creating or updating a release
    * request #9398: No longer possible to addFile with Tuleap CLI
    * request #9404: Fatal error when setting a package to hidden

Development
-----------------------

    * request #9339: Remove unused code in the utilities
    * request #9202: Refactoring for PHP5.6 - Snippets
    * story #9090: Improve REST tests of the computed fields
    * request #9299:
		- Get rid of combined
		- Plugins no longer append javascript to core Combined
		- combine JavaScript with hash
    * Fix CI issues caused by side effects of $GLOBALS usage
    * story #9281: define FRS global permissions

Enhancement
-----------------------

    * External lib no longer referenced in sources

Plugins
-----------------------


### admindelegation 2.13

    * request #9375 Gulpify sass

### agiledashboard 1.412

    * request #9387: Computed card fields manual values should be filtered
    * request #9350: The Kanban does not display manual computed field V2
    * story #9281 define FRS global permissions (UI FRS to select who is Admin)
    * request #9375 Gulpify sass
    * request #9385: Using dark themes; kanban's drop-empty images raise 404 error
    * request #9348: The planning view does not display computed field V2
    * request #8962: Default style for comments editor in modale
    * story #9305 have agile dashboard compatible with ALv2 (Every projects can now use the artifact links v2)
    * request #8962: Default style for comments editor in modale
    * Replace angular-ui-tree with dragular in kanban view
    * story #9305 have agile dashboard compatible with ALv2 (Agile Dashboard can be used with artifact links v2)
    * request #9299: combine JavaScript with hash
    * request #9335 Do not inherit default trackers when importing from XML
    * request #9299: Plugins no longer append javascript to core Combined
    * request #9252 Artifact links v2 Nature is confusing
    * request #9284: Use eslint in planning-v2 source
    * request #9010 Export project tool must export all importable services
    * request #9338: Remove unused angular tuleap-artifact-modal

### archivedeleteditems 0.9

    * request #9367: Archived files can be accessed by all users with a shell access

### boomerang 0.5

    * request #9342: CSRF token synchronizer implementation uses token with weak entropy

### cardwall 1.65

    * request #9375 Gulpify sass
    * request #9299: combine JavaScript with hash
    * request #9299: Get rid of combined
    * request #9299: Plugins no longer append javascript to core Combined
    * request #9010 Export project tool must export all importable services

### docman 2.26.118

    * request #9375 Gulpify sass
    * request #9299: combine JavaScript with hash
    * request #9335 Do not inherit default trackers when importing from XML
    * request #9299: Plugins no longer append javascript to core Combined
    * request #9349: Wiki page can not be accessed via the document manager
    * Refactoring for PHP5.6 - Document Manager

### forumml 2.6.27

    * request #9375 Gulpify sass
    * request #9300: Configuration files are not properly loaded in Perl environnement

### frs 0.19

    * story #9281 define FRS global permissions (Read perm + forgeupgrade (site and project perm) + Update site and project at FRS level)
    * request #9375 Gulpify sass

### fulltextsearch 0.135

    * request #9375 Gulpify sass
    * request #9299: Plugins no longer append javascript to core Combined

### git 4.251

    * request #9405 System event fails for restore git repository
    * request #9383: Persistent XSS through the plain display of a file in a Git repo
    * request #9375 Gulpify sass
    * request #9362: Git over HTTP does not work if the repository is not connected to a Gerrit server
    * request #9368: HTTP replication password can not be added or updated if a password was not already set
    * request #9363: Link to the documentation to configure a polling jobs is wrong
    * request #9335 Do not inherit default trackers when importing from XML
    * request #9356: Backup of a deleted Git repository can be accessed
    * request #9312: Replication from gerrit server does not work over http
    * request #9342: CSRF token synchronizer implementation uses token with weak entropy
    * request #9345: No preview in 'fork repositories'

### graphontrackers 1.17

    * request #9375 Gulpify sass

### graphontrackersv5 5.26

    * request #9375 Gulpify sass
    * request #9299: combine JavaScript with hash
    * request #9299: Plugins no longer append javascript to core Combined

### hudson 1.33

    * request #9375 Gulpify sass
    * request #9379: Multiple persistent XSS in the job configuration
    * request #9377: Misleading error message when a job URL can not accessed

### hudson_svn 0.16

    * request #9375 Gulpify sass
    * request #9378: hudsonSvnPlugin broken
    * Delete all repositories at the project deletion
    * Restore a deleted SVN repository
    * Use archivedeleteditem plugin to do the real deletion
    * Delete the repository after deletion delay
    * Display modal and suppression

### IM 1.5.38

    * request #9375 Gulpify sass

### ldap 3.106

    * request #9335 Do not inherit default trackers when importing from XML
    * request #9352: Migrated Tuleap user to LDAP one can't log in
    * request #9300: Configuration files are not properly loaded in Perl environnement

### mediawiki 0.123

    * request #9316: Default installation of the mediawiki plugin not working
    * request #9375 Gulpify sass
    * request #9335 Do not inherit default trackers when importing from XML
    * request #9300: Configuration files are not properly loaded in Perl environnement

### openidconnectclient 0.24

    * request #9399: OpenID Connect style is broken
    * request #9375 Gulpify sass
    * request #9364: When OpenIDConnect client plugin is activated, git over http no longer works
    * request #9359: OpenID Connect Client plugin does not follow standard

### pluginsadministration 1.19

    * request #9375 Gulpify sass

### proftpd 0.28

    * request #9375 Gulpify sass
    * request #9335 Do not inherit default trackers when importing from XML

### projectlinks 2.11

    * request #9375 Gulpify sass
    * request #9335 Do not inherit default trackers when importing from XML

### referencealias_svn 0.11

    * Delete all repositories at the project deletion
    * Restore a deleted SVN repository
    * Use archivedeleteditem plugin to do the real deletion
    * Delete the repository after deletion delay
    * Display modal and suppression

### statistics 0.63

    * request #9375 Gulpify sass
    * request #9299: Get rid of combined
    * request #9299: Plugins no longer append javascript to core Combined
    * request #9342: CSRF token synchronizer implementation uses token with weak entropy

### svn 0.78

    * request #9388: An error is thrown when a user tries to install the SVN plugin
    * request #9375 Gulpify sass
    * purge /var/tmp/svn on restore
    * Delete all repositories at the project deletion
    * Restore a deleted SVN repository
    * request #9245 Imported SVN repositories are owned by root
    * story #9253: Add quiet option on dump command
    * Use archivedeleteditem plugin to do the real deletion
    * Delete the repository after deletion delay
    * Change permissions on svn backup dir
    * Svn dumpfile shouldn't be readable by anybody
    * request #9357 Commit error on SVN plugin
    * Display modal and suppression
    * story #9253: Show again delete tab in administration

### tracker 5.989

    * request #9390 Follow up received using the reply by mail feature and a mail non encoded in UTF-8 is truncated
    * request #9375 Gulpify sass
    * story #9251: mass remove links when editing artifacts (Mass remove links in link type tabs)
    * story #9251: mass remove links when editing artifacts (Add ability to remove links in link type tabs)
    * story #9251: mass remove links when editing artifacts
    * Do not raise perms error when the transition is not valid
    * story #9305 have agile dashboard compatible with ALv2 (Every projects can now use the artifact links v2)
    * story #9096: A transition cannot occurs if a follow-up comment is not provided
    * request #7263: Display, clean and restore TV5 pending for deletion
    * story #9305 have agile dashboard compatible with ALv2 (Burndown fields can be used with artifact links v2)
    * request #9299: combine JavaScript with hash
    * story #9305: Triggers can be defined with artifact links v2
    * story #9305: Define a hierarchy with the artifact links v2
    * request #9335 Do not inherit default trackers when importing from XML
    * request #9299: Plugins no longer append javascript to core Combined
    * request #9354: No feedback is given when an error occurs during a transition
    * request #9252 Artifact links v2 Nature is confusing
    * request #9346: Computed field V2 - Description of computed field is not accurate
    * request #9353: Drag and drop on Tracker cardwall renderer must handle better account empty values
    * request #9342: CSRF token synchronizer implementation uses token with weak entropy
    * request #9010 Export project tool must export all importable services

### userlog 1.9

    * request #9375 Gulpify sass

### webdav 1.9.18

    * Remove old call to old FRS permission and replace it with new permissions
    * request #9300: Configuration files are not properly loaded in Perl environnement

Themes
-----------------------

    * FlamingParrot: 1.147
Changes:

References

List of items referenced by or referencing this item.