Release Name: 9.0
Notes:
Tuleap 9.0 (Wednesday, October 12th 2016)
========================================
Plugins
-----------------------
### agiledashboard 1.429
* story #9463 see cumulative flow diagram (Fancy cumulative)
* story #9463 see cumulative flow diagram (Timeframe selector)
* Update corresponding version of tuleap-realtime
* story #9463: Cumulative flow diagram with params (Performance improvement for the kanban cumulative flow REST route)
* request #9524: Do not try to take into account permissions to compute the total size of a Kanban column
* story #9463: see cumulative flow diagram (Cumulative flow diagram)
* story #9463 see cumulative flow diagram (Performance improvement for the kanban cumulative flow REST route)
* story #9463 see cumulative flow diagram (REST route for kanban cumulative flow)
* request #9524: Kanban column counts does not take into account permissions when the column is closed
* story #9463: see cumulative flow diagram (Add reports modal)
* request #9462: Fatal error in Tracker report when user cannot see Milestone trackers
* request #9518: html entities displayed in kanban cards
* request #9509: Fix angular/di errors
### artifactfolders 0.5
### artifactsfolders 0.32
* story #9514: Go directly to the Folder tab
* story #9514: Display hierarchy of folder in read only
* story #9514: change an artifact from one folder to another
* Link to folder is not copied
* Display current folder of an artifact
* Refactoring: do not talk about is_folder in tracker
* story #9468: Rename NatureIsFolder
* story #9468: Take _in_folder into account during import
* story #9468: Fix DOM based XSS in rollup.js
* story #9468: Display folder the children belongs to
* story #9468: Refactoring: folder hierarchy should be per artifact
* story #9468: A fatal error is thrown when tracker has no semantic title
* story #9468: Refactoring: use tailored route to retrieve children
* story #9468: Change property _is_folder by _in_folder
* Assignee is clickable
* story #9468: Don't display artifact link when nature is '_is_folder'
* Submitter of the artifact is clickable
* XML import - handle new attribute 'is_folder' for tracker
* Display hierarchy of folders in column
* Introduce rollup view in Folder tab
* story #9468: Do not display the tab if there is no Artifact in the folder
* story #9468: Display artifacts that are in the folder
* story #9468: Display empty table in Folder tab
* story #9468: Fix name of the tab in artifact view
* story #9468: Do not display the tab if project is not allowed to
* story #9468 import folders (Display empty content in the tab)
* story #9468: Folder is translated as 'Dossier' in French
### cardwall 1.70
* request #9568 Access to a tracker page will throw a fatal error if the cardwall is enabled but not the agiledashboard
* request #9437 Fatal error when updating manual value of of a computed field in AD card
* request #9494: Remove boomerang plugin
### docman 2.26.121
* request #9504: Prevent spoofing of permission request message
### frs 0.21
* request #9509: Fix angular/di errors
### git 4.269
* story #9436: Add log when parsing logs
* story #9436: Store access in DB
* story #9436: Fix HTTP clone fatal error
* request #9557: Gerrit remote server can not be saved anymore
* Display data in project access log
* story #9436: Parse gitolite3 log file
* story #9436: Export data in SCM usage
* story #9436: Display git read access in frequency graph
* Create new object to detect gitolite detector
* Log when user see the repository content through GitPhp
* story #9463 see cumulative flow diagram (REST route for kanban cumulative flow)
* request #9526: Git mail notification should not be computed if nobody wants a notification
### hudson 1.35
* request #9567: Update Hudson/Jenkins plugins to mention Jenkins instead of Hudson
### ldap 3.114
* story #9396 have project members automatically synchronized with LDAP (Deal with deleted LDAP group)
* story #9396: Warn that project admins are not removed during daily synchronization
* story #9396: have project members automatically synchronized with LDAP (Add new projet members during daily synchonization)
* story #9396 have project members automatically synchronized with LDAP (Add synchronize checkbox)
* request #9523: Ldap user confirmation login date can be reset
### statistics 0.66
* Export data in Service usage
* story #9436: Display git read access in frequency graph
### svn 0.98
* request #9562: Allow to checkout file when using EPEL's ViewVC
* request #9561 SVN import can use --bypass-prop-validation
* request #9553 SVN multirepository access error when projects are restriced
* request #8925: SVN plugin doesn't handle properly LDAP login vs Tuleap login
* request #9508: Site admin can't access SVN tree with viewvc integration
### tracker 5.1026
* Link to folder is not copied
* Display current folder of an artifact
* Refactoring: do not talk about is_folder in tracker
* story #9468: Take _in_folder into account during import
* request #9539: XSS in the children view tab of an artifact
* story #9463 see cumulative flow diagram (Performance improvement for the kanban cumulative flow REST route)
* story #9468 import folders (Notices displayed with <natures>)
* story #9468: Don't display artifact link when nature is '_is_folder'
* XML import - handle new attribute 'is_folder' for tracker
* request #9528: In artifact linkproject public name encoding is not well displayed
* story #9468: Do not display the tab if there is no Artifact in the folder
* request #9010: Import/Export of artifactlinks
* story #9468: Display empty table in Folder tab
* request #9520: Prevent creation of rogue artifacts
* request #9520: Rogue artifacts created when global rules are violated
* request #9462: Fatal error in Tracker report when user cannot see Milestone trackers
* request #9518: html entities displayed in kanban cards
* request #9520: Refactoring: remove dead code
* Display folder tab
* story #9468 import folders (Hide _in_folder type in ArtifactLinkField)
* story #9468 import folders (Provide _in_folder link type (immutable))
* request #9511: Unable to add an artifact link via REST
* request #9510: No tooltip for artifacts in my personal page TV5 widget
* request #9465: Persistent XSS through the name of a field used to sort a renderer
### tracker_encryption 1.2
* request #9519: Add the possibility to empty an encrypted field already set
Security
-----------------------
* request #9501: Reflected XSS in the project list page in the site administration
* request #9502: SQL injection through widgets management
* request #9500: Reflected XSS in the Subversion revisions browsing
* request #9512: No access control of administration pages for french wiki
* request #9497: Remove legacy password storage
* request #9550: FRS release form can be submitted if user is not granted
Bug fix
-----------------------
* request #9489: Wiki administration is not accessible to project administrator if they do not have explicit wiki admin rights
* request #9490: Wiki does not detect properly HTTPS when behind a reverse proxy
* request #8925: SVN plugin doesn't handle properly LDAP login vs Tuleap login
* request #9538: Reflected XSS in the page allowing to change the password of a user
* request #9552: XML import --automap doesn't properly managed suspended users
* request #9466: Enforce that plugins are updated in the same time than Tuleap core
* request #9574: SVN core cross ref does not work if the platform is accessible only in HTTPS
Clean Up
-----------------------
* request #9492: Disable surveys service by default
* request #9517: Plugin FRS package is unnecessary big
* request #9495, request #9496 and request #9493: remove doaprdf, admssw and foafprofiles plugins
Enhancement
-----------------------
* story #9439: search for project name with REST
* request #9010: Import/Export of artifactlinks
* request #9466: Enforce that plugins can only be used with the Tuleap core they have been designed for
Api
-----------------------
* REST API: 1.18
Themes
-----------------------
* FlamingParrot: 1.152References List of items referenced by or referencing this item. Artifact Tracker v5
|
