[GitHub] syncope pull request #47: Fixes [SYNCOPE-1110], [SYNCOPE-1123]

2017-06-27 Thread mat-ale
GitHub user mat-ale opened a pull request:

https://github.com/apache/syncope/pull/47

Fixes [SYNCOPE-1110], [SYNCOPE-1123]

Hi,

this fixes 
[[SYNCOPE-1110]](https://issues.apache.org/jira/browse/SYNCOPE-1110) and 
[[SYNCOPE-1123]](https://issues.apache.org/jira/browse/SYNCOPE-1123).

Regards,
Matteo

You can merge this pull request into a Git repository by running:

$ git pull https://github.com/mat-ale/syncope SYNCOPE-1110

Alternatively you can review and apply these changes as the patch at:

https://github.com/apache/syncope/pull/47.patch

To close this pull request, make a commit to your master/trunk branch
with (at least) the following in the commit message:

This closes #47


commit abbed772c8f2723ffc002a480f3f20600650128d
Author: Matteo Alessandroni 
Date:   2017-06-23T12:27:17Z

Fixes [SYNCOPE-1110], [SYNCOPE-1123]




---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[jira] [Commented] (SYNCOPE-1110) Error replacing group/auxclass/resource during self-management operation

2017-06-27 Thread ASF GitHub Bot (JIRA)

[ 
https://issues.apache.org/jira/browse/SYNCOPE-1110?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16064408#comment-16064408
 ] 

ASF GitHub Bot commented on SYNCOPE-1110:
-

GitHub user mat-ale opened a pull request:

https://github.com/apache/syncope/pull/47

Fixes [SYNCOPE-1110], [SYNCOPE-1123]

Hi,

this fixes 
[[SYNCOPE-1110]](https://issues.apache.org/jira/browse/SYNCOPE-1110) and 
[[SYNCOPE-1123]](https://issues.apache.org/jira/browse/SYNCOPE-1123).

Regards,
Matteo

You can merge this pull request into a Git repository by running:

$ git pull https://github.com/mat-ale/syncope SYNCOPE-1110

Alternatively you can review and apply these changes as the patch at:

https://github.com/apache/syncope/pull/47.patch

To close this pull request, make a commit to your master/trunk branch
with (at least) the following in the commit message:

This closes #47


commit abbed772c8f2723ffc002a480f3f20600650128d
Author: Matteo Alessandroni 
Date:   2017-06-23T12:27:17Z

Fixes [SYNCOPE-1110], [SYNCOPE-1123]




> Error replacing group/auxclass/resource during self-management operation
> 
>
> Key: SYNCOPE-1110
> URL: https://issues.apache.org/jira/browse/SYNCOPE-1110
> Project: Syncope
>  Issue Type: Bug
>  Components: enduser
>Affects Versions: 2.0.3
>Reporter: fabio martelli
> Fix For: 2.0.4, 2.1.0
>
>
> Steps to reproduce:
> # perform a self registration by specifying 2 groups, 2 aux classes and 2 
> resources
> # submit and perform an approval with admin user
> # perform a self management by replacing one group/auxclass/resource with 
> another one
> # submbit and perform an approval with admin user
> # check the expected result into the administration console 
> Groups, auxclasses and resources assigned to the approved user will be three 
> instead of two.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)


[GitHub] syncope pull request #47: Fixes [SYNCOPE-1110], [SYNCOPE-1123]

2017-06-27 Thread ilgrosso
Github user ilgrosso commented on a diff in the pull request:

https://github.com/apache/syncope/pull/47#discussion_r124199671
  
--- Diff: 
client/enduser/src/main/java/org/apache/syncope/client/enduser/model/CustomAttribute.java
 ---
@@ -26,18 +26,18 @@
 
 private static final long serialVersionUID = 4910266842123376686L;
 
-private Boolean readonly;
+private boolean readonly;
 
 private List defaultValues = new ArrayList<>();
 
 public CustomAttribute() {
 }
 
-public Boolean getReadonly() {
+public boolean getReadonly() {
--- End diff --

This should be `isReadonly()`


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[jira] [Commented] (SYNCOPE-1110) Error replacing group/auxclass/resource during self-management operation

2017-06-27 Thread ASF GitHub Bot (JIRA)

[ 
https://issues.apache.org/jira/browse/SYNCOPE-1110?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16064411#comment-16064411
 ] 

ASF GitHub Bot commented on SYNCOPE-1110:
-

Github user ilgrosso commented on a diff in the pull request:

https://github.com/apache/syncope/pull/47#discussion_r124199671
  
--- Diff: 
client/enduser/src/main/java/org/apache/syncope/client/enduser/model/CustomAttribute.java
 ---
@@ -26,18 +26,18 @@
 
 private static final long serialVersionUID = 4910266842123376686L;
 
-private Boolean readonly;
+private boolean readonly;
 
 private List defaultValues = new ArrayList<>();
 
 public CustomAttribute() {
 }
 
-public Boolean getReadonly() {
+public boolean getReadonly() {
--- End diff --

This should be `isReadonly()`


> Error replacing group/auxclass/resource during self-management operation
> 
>
> Key: SYNCOPE-1110
> URL: https://issues.apache.org/jira/browse/SYNCOPE-1110
> Project: Syncope
>  Issue Type: Bug
>  Components: enduser
>Affects Versions: 2.0.3
>Reporter: fabio martelli
> Fix For: 2.0.4, 2.1.0
>
>
> Steps to reproduce:
> # perform a self registration by specifying 2 groups, 2 aux classes and 2 
> resources
> # submit and perform an approval with admin user
> # perform a self management by replacing one group/auxclass/resource with 
> another one
> # submbit and perform an approval with admin user
> # check the expected result into the administration console 
> Groups, auxclasses and resources assigned to the approved user will be three 
> instead of two.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)


[GitHub] syncope pull request #47: Fixes [SYNCOPE-1110], [SYNCOPE-1123]

2017-06-27 Thread ilgrosso
Github user ilgrosso commented on a diff in the pull request:

https://github.com/apache/syncope/pull/47#discussion_r124199801
  
--- Diff: 
client/enduser/src/main/java/org/apache/syncope/client/enduser/resources/UserSelfReadResource.java
 ---
@@ -137,12 +137,13 @@ public void writeData(final Attributes attributes) 
throws IOException {
 private void customizeAttrs(final Set attrs,
 final Map customForm) {
 
-CollectionUtils.filter(attrs, new Predicate() {
-
-@Override
-public boolean evaluate(final AttrTO attr) {
-return customForm.containsKey(attr.getSchema());
+Set attrsToAdd = new HashSet<>();
--- End diff --

You could use `CollectionUtils.collect()` here.


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[jira] [Commented] (SYNCOPE-1110) Error replacing group/auxclass/resource during self-management operation

2017-06-27 Thread ASF GitHub Bot (JIRA)

[ 
https://issues.apache.org/jira/browse/SYNCOPE-1110?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16064412#comment-16064412
 ] 

ASF GitHub Bot commented on SYNCOPE-1110:
-

Github user ilgrosso commented on a diff in the pull request:

https://github.com/apache/syncope/pull/47#discussion_r124199801
  
--- Diff: 
client/enduser/src/main/java/org/apache/syncope/client/enduser/resources/UserSelfReadResource.java
 ---
@@ -137,12 +137,13 @@ public void writeData(final Attributes attributes) 
throws IOException {
 private void customizeAttrs(final Set attrs,
 final Map customForm) {
 
-CollectionUtils.filter(attrs, new Predicate() {
-
-@Override
-public boolean evaluate(final AttrTO attr) {
-return customForm.containsKey(attr.getSchema());
+Set attrsToAdd = new HashSet<>();
--- End diff --

You could use `CollectionUtils.collect()` here.


> Error replacing group/auxclass/resource during self-management operation
> 
>
> Key: SYNCOPE-1110
> URL: https://issues.apache.org/jira/browse/SYNCOPE-1110
> Project: Syncope
>  Issue Type: Bug
>  Components: enduser
>Affects Versions: 2.0.3
>Reporter: fabio martelli
> Fix For: 2.0.4, 2.1.0
>
>
> Steps to reproduce:
> # perform a self registration by specifying 2 groups, 2 aux classes and 2 
> resources
> # submit and perform an approval with admin user
> # perform a self management by replacing one group/auxclass/resource with 
> another one
> # submbit and perform an approval with admin user
> # check the expected result into the administration console 
> Groups, auxclasses and resources assigned to the approved user will be three 
> instead of two.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)


[GitHub] syncope pull request #47: Fixes [SYNCOPE-1110], [SYNCOPE-1123]

2017-06-27 Thread ilgrosso
Github user ilgrosso commented on a diff in the pull request:

https://github.com/apache/syncope/pull/47#discussion_r124200072
  
--- Diff: fit/enduser-reference/src/test/resources/protractor-conf.js ---
@@ -19,17 +19,17 @@
 exports.config = {
   directConnect: false,
   capabilities: {
-'browserName': 'phantomjs',
+'browserName': 'chrome',
--- End diff --

Bad: restore `phantomjs` here!


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[jira] [Commented] (SYNCOPE-1110) Error replacing group/auxclass/resource during self-management operation

2017-06-27 Thread ASF GitHub Bot (JIRA)

[ 
https://issues.apache.org/jira/browse/SYNCOPE-1110?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16064414#comment-16064414
 ] 

ASF GitHub Bot commented on SYNCOPE-1110:
-

Github user ilgrosso commented on a diff in the pull request:

https://github.com/apache/syncope/pull/47#discussion_r124200072
  
--- Diff: fit/enduser-reference/src/test/resources/protractor-conf.js ---
@@ -19,17 +19,17 @@
 exports.config = {
   directConnect: false,
   capabilities: {
-'browserName': 'phantomjs',
+'browserName': 'chrome',
--- End diff --

Bad: restore `phantomjs` here!


> Error replacing group/auxclass/resource during self-management operation
> 
>
> Key: SYNCOPE-1110
> URL: https://issues.apache.org/jira/browse/SYNCOPE-1110
> Project: Syncope
>  Issue Type: Bug
>  Components: enduser
>Affects Versions: 2.0.3
>Reporter: fabio martelli
> Fix For: 2.0.4, 2.1.0
>
>
> Steps to reproduce:
> # perform a self registration by specifying 2 groups, 2 aux classes and 2 
> resources
> # submit and perform an approval with admin user
> # perform a self management by replacing one group/auxclass/resource with 
> another one
> # submbit and perform an approval with admin user
> # check the expected result into the administration console 
> Groups, auxclasses and resources assigned to the approved user will be three 
> instead of two.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)


[jira] [Updated] (SYNCOPE-1122) Enduser must show all attributes when customForm.json has empty section with show=true

2017-06-27 Thread Andrea Patricelli (JIRA)

 [ 
https://issues.apache.org/jira/browse/SYNCOPE-1122?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Andrea Patricelli updated SYNCOPE-1122:
---
Description: 
If customForm.json is like this:
{code}
{
 
  "PLAIN":
  {
"show": true
  }
}
{code}
I see all plain attributes, but they haven't values.

  was:
If customForm.json is like this:
{code}
{
 
  "PLAIN":
  {
"show": true
  }
}
{code}
I should see all plain attributes, I see instead none.


> Enduser must show all attributes when customForm.json has empty section with 
> show=true
> --
>
> Key: SYNCOPE-1122
> URL: https://issues.apache.org/jira/browse/SYNCOPE-1122
> Project: Syncope
>  Issue Type: Bug
>  Components: enduser
>Affects Versions: 2.0.3
>Reporter: Andrea Patricelli
>Assignee: Andrea Patricelli
> Fix For: 2.0.4, 2.1.0
>
>
> If customForm.json is like this:
> {code}
> {
>  
>   "PLAIN":
>   {
> "show": true
>   }
> }
> {code}
> I see all plain attributes, but they haven't values.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)


Re: [DISCUSS] - Third party JWT SSO integration?

2017-06-27 Thread Francesco Chicchiriccò

On 26/06/2017 18:07, Colm O hEigeartaigh wrote:

Hi all,

It occurred to me that we can easily support SSO using third party JWT
tokens. Instead of (or as well as) having a single "jwsSignatureVerifier"
in securityContext.xml, we could have a map of issuer ->
jwsSignatureVerifier Objects.

We could get the verifier to use to verify the signature by querying the
map using the issuer of the token. If this succeeds, and if the subject is
a known user, we could allow the call to proceed.

Alternatively, we could have a separate service which translates third
party JWT tokens into local SSO tokens.


Hi Colm,
your idea seems interesting.

Instead of providing a map in securityContext.xml, I would rather enable 
[1] to dynamically discover JwsSignatureVerifier implementations (or 
maybe a new interface of ours extending that, adding a getIssuer() method).
Moreover, the new interface extending JwsSignatureVerifier could also 
provide a method to resolve the JWT subject into Syncope username (known 
user).

If you like, I can take care of this.

Please also note that such SSO would work only at REST level; in order 
to enable Admin Console or Enduser UI to that, something like the SAML 
2.0 SP Agent [2] will need to be provided.


As people started asking for 2.0.4 [3][4] and CXF 3.1.12 is under vote, 
I think we should start finalizing, e.g. postponing new features and 
improvements to 2.0.5. But maybe this one can still fit.


Regards.

[1] 
https://github.com/apache/syncope/blob/2_0_X/core/logic/src/main/java/org/apache/syncope/core/logic/init/ClassPathScanImplementationLookup.java
[2] 
https://github.com/apache/syncope/blob/2_0_X/ext/saml2sp/agent/src/main/java/org/apache/syncope/ext/saml2lsp/agent/AssertionConsumer.java#L47
[3] 
https://lists.apache.org/thread.html/d8a6f8fe3629d1d00165e2461458511d8ace983af6006a5d304fa6a9@%3Cuser.syncope.apache.org%3E
[4] 
https://lists.apache.org/thread.html/7d9072146f01994c8fb7f02c8af1f88e031345e391c06970a8fcf1ff@%3Cuser.syncope.apache.org%3E


--
Francesco Chicchiriccò

Tirasa - Open Source Excellence
http://www.tirasa.net/

Member at The Apache Software Foundation
Syncope, Cocoon, Olingo, CXF, OpenJPA, PonyMail
http://home.apache.org/~ilgrosso/



[jira] [Assigned] (SYNCOPE-1113) Report files are downloaded with same extension

2017-06-27 Thread fabio martelli (JIRA)

 [ 
https://issues.apache.org/jira/browse/SYNCOPE-1113?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

fabio martelli reassigned SYNCOPE-1113:
---

Assignee: fabio martelli

> Report files are downloaded with same extension
> ---
>
> Key: SYNCOPE-1113
> URL: https://issues.apache.org/jira/browse/SYNCOPE-1113
> Project: Syncope
>  Issue Type: Bug
>  Components: console
>Affects Versions: 2.0.3, 2.0.4
> Environment: Firefox browser
>Reporter: Matteo Alessandroni
>Assignee: fabio martelli
>Priority: Minor
> Fix For: 2.0.4, 2.1.0
>
>
> Steps to reproduce:
> #  go to Reports;
> #  execute a report and go to "view" section;
> #  click on the just executed report and export it in one of the available 
> formats;
> #  try to export the same report in the other formats
> *problem*: the exported files will always have the same format as in the 
> first export (step 3).



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)


[jira] [Commented] (SYNCOPE-1120) Use the standard Bearer Authorization header for JWT tokens

2017-06-27 Thread ASF subversion and git services (JIRA)

[ 
https://issues.apache.org/jira/browse/SYNCOPE-1120?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16064485#comment-16064485
 ] 

ASF subversion and git services commented on SYNCOPE-1120:
--

Commit ee802ac1503a51b734a91448770fe05da193e138 in syncope's branch 
refs/heads/master from [~ilgrosso]
[ https://git-wip-us.apache.org/repos/asf?p=syncope.git;h=ee802ac ]

[SYNCOPE-1120] Updating docs


> Use the standard Bearer Authorization header for JWT tokens
> ---
>
> Key: SYNCOPE-1120
> URL: https://issues.apache.org/jira/browse/SYNCOPE-1120
> Project: Syncope
>  Issue Type: Improvement
>Reporter: Colm O hEigeartaigh
>Assignee: Colm O hEigeartaigh
> Fix For: 2.0.4, 2.1.0
>
>
> As discussed on the mailing list, this task is to switch to use the standard 
> Bearer Authorization header instead of X-Syncope-Token when invoking on REST 
> services:
> https://t.co/QwLRejSgJL



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)


[jira] [Commented] (SYNCOPE-1120) Use the standard Bearer Authorization header for JWT tokens

2017-06-27 Thread ASF subversion and git services (JIRA)

[ 
https://issues.apache.org/jira/browse/SYNCOPE-1120?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16064484#comment-16064484
 ] 

ASF subversion and git services commented on SYNCOPE-1120:
--

Commit 047ef966f3ef9af40f4c258efedaf8d42a8e843c in syncope's branch 
refs/heads/2_0_X from [~ilgrosso]
[ https://git-wip-us.apache.org/repos/asf?p=syncope.git;h=047ef96 ]

[SYNCOPE-1120] Updating docs


> Use the standard Bearer Authorization header for JWT tokens
> ---
>
> Key: SYNCOPE-1120
> URL: https://issues.apache.org/jira/browse/SYNCOPE-1120
> Project: Syncope
>  Issue Type: Improvement
>Reporter: Colm O hEigeartaigh
>Assignee: Colm O hEigeartaigh
> Fix For: 2.0.4, 2.1.0
>
>
> As discussed on the mailing list, this task is to switch to use the standard 
> Bearer Authorization header instead of X-Syncope-Token when invoking on REST 
> services:
> https://t.co/QwLRejSgJL



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)


[jira] [Updated] (SYNCOPE-861) Allow differential group members (de)provisioning

2017-06-27 Thread JIRA

 [ 
https://issues.apache.org/jira/browse/SYNCOPE-861?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Francesco Chicchiriccò updated SYNCOPE-861:
---
Fix Version/s: (was: 2.0.4)
   2.0.5

> Allow differential group members (de)provisioning
> -
>
> Key: SYNCOPE-861
> URL: https://issues.apache.org/jira/browse/SYNCOPE-861
> Project: Syncope
>  Issue Type: Improvement
>  Components: console, core
>Reporter: Francesco Chicchiriccò
> Fix For: 2.0.5, 2.1.0
>
>
> As improvement for SYNCOPE-856, provide a confirmation box after group create 
> / update / delete which asks if members should be (de)provisioned according 
> to last group modification, e.g.
>  # provision all members to all resources in case of group create
>  # deprovision all former members from all resources + provision all new 
> members to all resources in case of group update
>  # deprovision all members from all resources in case of group delete



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)


[jira] [Updated] (SYNCOPE-1097) Downloaded file for binary attribute better naming

2017-06-27 Thread JIRA

 [ 
https://issues.apache.org/jira/browse/SYNCOPE-1097?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Francesco Chicchiriccò updated SYNCOPE-1097:

Fix Version/s: (was: 2.0.4)
   2.0.5

> Downloaded file for binary attribute better naming
> --
>
> Key: SYNCOPE-1097
> URL: https://issues.apache.org/jira/browse/SYNCOPE-1097
> Project: Syncope
>  Issue Type: Improvement
>  Components: console
>Reporter: Andrea Patricelli
>Priority: Minor
> Fix For: 2.0.5, 2.1.0
>
>
> Name of the downloaded file should be like: _. extension for that mimetype>



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)


[jira] [Updated] (SYNCOPE-917) Add use cases to reference guide

2017-06-27 Thread JIRA

 [ 
https://issues.apache.org/jira/browse/SYNCOPE-917?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Francesco Chicchiriccò updated SYNCOPE-917:
---
Fix Version/s: (was: 2.0.4)
   2.0.5

> Add use cases to reference guide
> 
>
> Key: SYNCOPE-917
> URL: https://issues.apache.org/jira/browse/SYNCOPE-917
> Project: Syncope
>  Issue Type: Task
>  Components: documentation
>Reporter: Francesco Chicchiriccò
> Fix For: 2.0.5, 2.1.0
>
>
> Introduce, in a dedicated chapter at the end of the reference guide, some 
> reference use cases; for example:
> * LDAP sync
> * GoogleApps sync
> * Active Directory sync
> and more, migrating from wiki pages:
> * 
> https://cwiki.apache.org/confluence/display/SYNCOPE/Configure+a+PasswordExpirationJob
> * 
> https://cwiki.apache.org/confluence/display/SYNCOPE/Synchronize+Active+Directory+with+SQL+database



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)


[jira] [Updated] (SYNCOPE-1096) Download button should be disabled while populating for the first time a binary attribute

2017-06-27 Thread JIRA

 [ 
https://issues.apache.org/jira/browse/SYNCOPE-1096?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Francesco Chicchiriccò updated SYNCOPE-1096:

Fix Version/s: (was: 2.0.4)
   2.0.5

> Download button should be disabled while populating for the first time a 
> binary attribute
> -
>
> Key: SYNCOPE-1096
> URL: https://issues.apache.org/jira/browse/SYNCOPE-1096
> Project: Syncope
>  Issue Type: Improvement
>  Components: console
>Affects Versions: 2.0.3
>Reporter: Andrea Patricelli
>Priority: Minor
> Fix For: 2.0.5, 2.1.0
>
>
> Download button does not work on first binary attribute set. It should be 
> disabled otherwise it is misleading viewing the preview (if available) and 
> not beaing able to download the content.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)


[jira] [Updated] (SYNCOPE-843) Bulk action for moving users / groups / any objects to another realm

2017-06-27 Thread JIRA

 [ 
https://issues.apache.org/jira/browse/SYNCOPE-843?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Francesco Chicchiriccò updated SYNCOPE-843:
---
Fix Version/s: (was: 2.0.4)
   2.0.5

> Bulk action for moving users / groups / any objects to another realm
> 
>
> Key: SYNCOPE-843
> URL: https://issues.apache.org/jira/browse/SYNCOPE-843
> Project: Syncope
>  Issue Type: Improvement
>  Components: console, core
>Reporter: Francesco Chicchiriccò
> Fix For: 2.0.5, 2.1.0
>
>
> Provide further bulk action for moving users / groups / any objects from the 
> realm where they currently are to another realm.
> This operation would likely require further REST method on {{AnyService}} 
> since it requires input (e.g. the destination realm).



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)


[jira] [Updated] (SYNCOPE-1113) Report files are downloaded with same extension

2017-06-27 Thread fabio martelli (JIRA)

 [ 
https://issues.apache.org/jira/browse/SYNCOPE-1113?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

fabio martelli updated SYNCOPE-1113:

Fix Version/s: (was: 2.0.4)
   (was: 2.1.0)

> Report files are downloaded with same extension
> ---
>
> Key: SYNCOPE-1113
> URL: https://issues.apache.org/jira/browse/SYNCOPE-1113
> Project: Syncope
>  Issue Type: Bug
>  Components: console
>Affects Versions: 2.0.3, 2.0.4
> Environment: Firefox browser
>Reporter: Matteo Alessandroni
>Assignee: fabio martelli
>Priority: Minor
>
> Steps to reproduce:
> #  go to Reports;
> #  execute a report and go to "view" section;
> #  click on the just executed report and export it in one of the available 
> formats;
> #  try to export the same report in the other formats
> *problem*: the exported files will always have the same format as in the 
> first export (step 3).



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)


[jira] [Closed] (SYNCOPE-1113) Report files are downloaded with same extension

2017-06-27 Thread fabio martelli (JIRA)

 [ 
https://issues.apache.org/jira/browse/SYNCOPE-1113?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

fabio martelli closed SYNCOPE-1113.
---
Resolution: Cannot Reproduce

> Report files are downloaded with same extension
> ---
>
> Key: SYNCOPE-1113
> URL: https://issues.apache.org/jira/browse/SYNCOPE-1113
> Project: Syncope
>  Issue Type: Bug
>  Components: console
>Affects Versions: 2.0.3, 2.0.4
> Environment: Firefox browser
>Reporter: Matteo Alessandroni
>Assignee: fabio martelli
>Priority: Minor
>
> Steps to reproduce:
> #  go to Reports;
> #  execute a report and go to "view" section;
> #  click on the just executed report and export it in one of the available 
> formats;
> #  try to export the same report in the other formats
> *problem*: the exported files will always have the same format as in the 
> first export (step 3).



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)


[jira] [Updated] (SYNCOPE-1021) Activiti: statically compile Groovy script tasks

2017-06-27 Thread JIRA

 [ 
https://issues.apache.org/jira/browse/SYNCOPE-1021?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Francesco Chicchiriccò updated SYNCOPE-1021:

Fix Version/s: (was: 2.0.4)
   2.0.5

> Activiti: statically compile Groovy script tasks
> 
>
> Key: SYNCOPE-1021
> URL: https://issues.apache.org/jira/browse/SYNCOPE-1021
> Project: Syncope
>  Issue Type: Improvement
>  Components: core
>Reporter: Francesco Chicchiriccò
> Fix For: 2.0.5, 2.1.0
>
>
> The possibility to statically compile Groovy scripts (which can be part of 
> workflow process definition via the {{}} element) is currently 
> [being 
> discussed|http://forum.flowable.org/t/is-it-possible-to-compile-groovy-script-task-statically/300/4]
>  in Flowable, an Activiti fork.
> Even in case Activiti won't officially provide such enhancement, we could 
> anyway import it from there.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)


[jira] [Updated] (SYNCOPE-964) New artifact: standalone enduser

2017-06-27 Thread JIRA

 [ 
https://issues.apache.org/jira/browse/SYNCOPE-964?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Francesco Chicchiriccò updated SYNCOPE-964:
---
Fix Version/s: (was: 2.0.4)
   2.0.5

> New artifact: standalone enduser
> 
>
> Key: SYNCOPE-964
> URL: https://issues.apache.org/jira/browse/SYNCOPE-964
> Project: Syncope
>  Issue Type: New Feature
>Reporter: Francesco Chicchiriccò
> Fix For: 2.0.5, 2.1.0
>
>
> As proposed in [mailing 
> list|https://lists.apache.org/thread.html/37a6e7733fd9ddda54690252d832879da4733dec19d1f8705579476a@%3Cdev.syncope.apache.org%3E],
>  a good addition to the current 
> [artifacts|http://syncope.apache.org/downloads.html] is a standalone Enduser 
> distribution, which will only contain a light Java EE container and the 
> Enduser application ready for configuration / customization (in its HTML and 
> Javascript components, of course).
> After some preliminary explorations, it seems that [Payara 
> Micro|http://www.payara.fish/payara_micro] is fit for the job: essentially, 
> we should add a further Maven module with assembly plugin packing Payara 
> Micro and the Enduser content we already pack for archetype.
> Documentation, including the release process, is to be updated accordingly, 
> to include this new artifact.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)


[jira] [Updated] (SYNCOPE-1105) Provide unique key for ProvisioningManager operations

2017-06-27 Thread JIRA

 [ 
https://issues.apache.org/jira/browse/SYNCOPE-1105?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Francesco Chicchiriccò updated SYNCOPE-1105:

Fix Version/s: (was: 2.0.4)
   2.0.5

> Provide unique key for ProvisioningManager operations
> -
>
> Key: SYNCOPE-1105
> URL: https://issues.apache.org/jira/browse/SYNCOPE-1105
> Project: Syncope
>  Issue Type: New Feature
>  Components: console, core
>Reporter: Francesco Chicchiriccò
> Fix For: 2.0.5, 2.1.0
>
>
> The operations driven by the ProvisioningManager (e.g. CREATE / UPDATE / 
> DELETE about User / Group / Any Object entities) do not currently provide any 
> mean to bind together the various activity involved, which generally are:
> # CREATE / UPDATE / DELETE onto the internal storage via WorkflowAdapter
> # propagation towards the assigned (direct and via group membership, when 
> applicable) External Resources
> If a unique key is generated for the ongoing operation, such key can be also 
> associated to the audit entries and notification messages (when enabled).
> This would allow, for example, to expose a new REST endpoint for querying the 
> Audit table.
> Sample use case: trace what happens when creating user via REST with 
> asynchronous propagations.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)


[jira] [Updated] (SYNCOPE-1115) Display attributes for propagation tasks

2017-06-27 Thread JIRA

 [ 
https://issues.apache.org/jira/browse/SYNCOPE-1115?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Francesco Chicchiriccò updated SYNCOPE-1115:

Fix Version/s: (was: 2.0.4)
   2.0.5

> Display attributes for propagation tasks
> 
>
> Key: SYNCOPE-1115
> URL: https://issues.apache.org/jira/browse/SYNCOPE-1115
> Project: Syncope
>  Issue Type: Improvement
>  Components: console
>Reporter: Francesco Chicchiriccò
> Fix For: 2.0.5, 2.1.0
>
>
> The set of attributes sent with a propagation task are available in the 
> {{PropagationTaskTO}} as JSON string in the {{attributes}} field.
> It can be shown through the recent {{BinaryTextPreviewer}} from SYNCOPE-1095.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)


[jira] [Updated] (SYNCOPE-1111) New any type not shown unders Realms

2017-06-27 Thread JIRA

 [ 
https://issues.apache.org/jira/browse/SYNCOPE-?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Francesco Chicchiriccò updated SYNCOPE-:

Summary: New any type not shown unders Realms  (was: New any type )

> New any type not shown unders Realms
> 
>
> Key: SYNCOPE-
> URL: https://issues.apache.org/jira/browse/SYNCOPE-
> Project: Syncope
>  Issue Type: Bug
>  Components: console
>Affects Versions: 2.0.3
>Reporter: Francesco Chicchiriccò
> Fix For: 2.0.4, 2.1.0
>
>
> From Admin Console:
> # create new any type (say {{DEVICE}})
> # go back to Realms: the new any type is not shown
> After logging out and back in, the new any type is shown as expected.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)


Re: [DISCUSS] - Third party JWT SSO integration?

2017-06-27 Thread Sergey Beryozkin

Hi Francesco

I'm not sure it can help but a utility class JoseJwtConsumer will return 
a verified (and/or decrypted) JwtToken which has the typed methods like 
getIssuer, etc...
JoseJwtConsumer will itself create JwsSignatureVerifier (and/or 
JweDecryptionProvider) (using the endpoint contextual properties) and 
use them to prepare JwtToken for the application code.


Cheers, Sergey


On 27/06/17 09:24, Francesco Chicchiriccò wrote:

On 26/06/2017 18:07, Colm O hEigeartaigh wrote:

Hi all,

It occurred to me that we can easily support SSO using third party JWT
tokens. Instead of (or as well as) having a single "jwsSignatureVerifier"
in securityContext.xml, we could have a map of issuer ->
jwsSignatureVerifier Objects.

We could get the verifier to use to verify the signature by querying the
map using the issuer of the token. If this succeeds, and if the 
subject is

a known user, we could allow the call to proceed.

Alternatively, we could have a separate service which translates third
party JWT tokens into local SSO tokens.


Hi Colm,
your idea seems interesting.

Instead of providing a map in securityContext.xml, I would rather enable 
[1] to dynamically discover JwsSignatureVerifier implementations (or 
maybe a new interface of ours extending that, adding a getIssuer() method).
Moreover, the new interface extending JwsSignatureVerifier could also 
provide a method to resolve the JWT subject into Syncope username (known 
user).

If you like, I can take care of this.

Please also note that such SSO would work only at REST level; in order 
to enable Admin Console or Enduser UI to that, something like the SAML 
2.0 SP Agent [2] will need to be provided.


As people started asking for 2.0.4 [3][4] and CXF 3.1.12 is under vote, 
I think we should start finalizing, e.g. postponing new features and 
improvements to 2.0.5. But maybe this one can still fit.


Regards.

[1] 
https://github.com/apache/syncope/blob/2_0_X/core/logic/src/main/java/org/apache/syncope/core/logic/init/ClassPathScanImplementationLookup.java 

[2] 
https://github.com/apache/syncope/blob/2_0_X/ext/saml2sp/agent/src/main/java/org/apache/syncope/ext/saml2lsp/agent/AssertionConsumer.java#L47 

[3] 
https://lists.apache.org/thread.html/d8a6f8fe3629d1d00165e2461458511d8ace983af6006a5d304fa6a9@%3Cuser.syncope.apache.org%3E 

[4] 
https://lists.apache.org/thread.html/7d9072146f01994c8fb7f02c8af1f88e031345e391c06970a8fcf1ff@%3Cuser.syncope.apache.org%3E 





[jira] [Updated] (SYNCOPE-1092) System Information appears scrolling on the right

2017-06-27 Thread JIRA

 [ 
https://issues.apache.org/jira/browse/SYNCOPE-1092?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Francesco Chicchiriccò updated SYNCOPE-1092:

Fix Version/s: (was: 2.0.4)
   2.0.5

> System Information appears scrolling on the right
> -
>
> Key: SYNCOPE-1092
> URL: https://issues.apache.org/jira/browse/SYNCOPE-1092
> Project: Syncope
>  Issue Type: Bug
>  Components: console
>Affects Versions: 2.0.3
>Reporter: Massimiliano Perrone
>Priority: Minor
> Fix For: 2.0.5, 2.1.0
>
>
> Going on Syncope Console (I found it using the Apache demo) I found a strange 
> behavior scrolling to the right (using the two fingers on a mousepad)...
> The System Information table appears! When it should be invisible until 
> someone use the up-right-corner botton.
> To solve it we need to change the css file [1] at row 717 from 
> {code}
> .control-sidebar {
>   position: absolute;
>   padding-top: 50px;
>   z-index: 1010;
> }
> {code}
> to 
> {code}
> .control-sidebar {
>   position: fixed;
>   padding-top: 50px;
>   z-index: 1010;
> }
> {code}
> (please have a check :))
> [1] 
> http://syncope-vm.apache.org:9080/syncope-console/wicket/resource/org.apache.syncope.client.console.themes.AdminLTECssResourceReference/css/AdminLTE-ver-369B017375C8C4A0878CC3637CD022A5.css



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)


[jira] [Created] (SYNCOPE-1126) Include realms into the Explore Resource feature

2017-06-27 Thread JIRA
Francesco Chicchiriccò created SYNCOPE-1126:
---

 Summary: Include realms into the Explore Resource feature
 Key: SYNCOPE-1126
 URL: https://issues.apache.org/jira/browse/SYNCOPE-1126
 Project: Syncope
  Issue Type: Improvement
  Components: console
Reporter: Francesco Chicchiriccò
 Fix For: 2.0.4, 2.1.0


Currently, the "Explore Resource" feature only considers Any Types for which 
provision rules exist, not Realms.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)


Re: [DISCUSS] - Third party JWT SSO integration?

2017-06-27 Thread Sergey Beryozkin
Sorry, missed the point, the idea was to use an issuer to get the right 
verifier in case of JWS, which would use the issuer-specific key material ?
Just FYI, JwsJwtConsumer (this one differs from JoseJwtConsumer is that 
it only supports the signature validation) will return 
JwtToken/JwtClaims (still unvalidated - JWS format allows to introspect 
a JWS payload by any 3rd party JWS library as opposed to JWE), with 
getIssuer() then used to load the right JwsSignatureVerifier.
If the token contains 'kid' of the key (in its JwsHeaders) then it can 
be used to load JwsSignatureVerifier too though the producer will need 
to know the 'kids' so Colm is right using the issuers will be more 
flexible...


Sorry for the noise in case the above is not relevant :-)

Sergey
On 27/06/17 10:05, Sergey Beryozkin wrote:

Hi Francesco

I'm not sure it can help but a utility class JoseJwtConsumer will return 
a verified (and/or decrypted) JwtToken which has the typed methods like 
getIssuer, etc...
JoseJwtConsumer will itself create JwsSignatureVerifier (and/or 
JweDecryptionProvider) (using the endpoint contextual properties) and 
use them to prepare JwtToken for the application code.


Cheers, Sergey


On 27/06/17 09:24, Francesco Chicchiriccò wrote:

On 26/06/2017 18:07, Colm O hEigeartaigh wrote:

Hi all,

It occurred to me that we can easily support SSO using third party JWT
tokens. Instead of (or as well as) having a single 
"jwsSignatureVerifier"

in securityContext.xml, we could have a map of issuer ->
jwsSignatureVerifier Objects.

We could get the verifier to use to verify the signature by querying the
map using the issuer of the token. If this succeeds, and if the 
subject is

a known user, we could allow the call to proceed.

Alternatively, we could have a separate service which translates third
party JWT tokens into local SSO tokens.


Hi Colm,
your idea seems interesting.

Instead of providing a map in securityContext.xml, I would rather 
enable [1] to dynamically discover JwsSignatureVerifier 
implementations (or maybe a new interface of ours extending that, 
adding a getIssuer() method).
Moreover, the new interface extending JwsSignatureVerifier could also 
provide a method to resolve the JWT subject into Syncope username 
(known user).

If you like, I can take care of this.

Please also note that such SSO would work only at REST level; in order 
to enable Admin Console or Enduser UI to that, something like the SAML 
2.0 SP Agent [2] will need to be provided.


As people started asking for 2.0.4 [3][4] and CXF 3.1.12 is under 
vote, I think we should start finalizing, e.g. postponing new features 
and improvements to 2.0.5. But maybe this one can still fit.


Regards.

[1] 
https://github.com/apache/syncope/blob/2_0_X/core/logic/src/main/java/org/apache/syncope/core/logic/init/ClassPathScanImplementationLookup.java 

[2] 
https://github.com/apache/syncope/blob/2_0_X/ext/saml2sp/agent/src/main/java/org/apache/syncope/ext/saml2lsp/agent/AssertionConsumer.java#L47 

[3] 
https://lists.apache.org/thread.html/d8a6f8fe3629d1d00165e2461458511d8ace983af6006a5d304fa6a9@%3Cuser.syncope.apache.org%3E 

[4] 
https://lists.apache.org/thread.html/7d9072146f01994c8fb7f02c8af1f88e031345e391c06970a8fcf1ff@%3Cuser.syncope.apache.org%3E 






--
Sergey Beryozkin

Talend Community Coders
http://coders.talend.com/


[jira] [Assigned] (SYNCOPE-1126) Include realms into the Explore Resource feature

2017-06-27 Thread JIRA

 [ 
https://issues.apache.org/jira/browse/SYNCOPE-1126?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Francesco Chicchiriccò reassigned SYNCOPE-1126:
---

Assignee: Francesco Chicchiriccò

> Include realms into the Explore Resource feature
> 
>
> Key: SYNCOPE-1126
> URL: https://issues.apache.org/jira/browse/SYNCOPE-1126
> Project: Syncope
>  Issue Type: Improvement
>  Components: console
>Reporter: Francesco Chicchiriccò
>Assignee: Francesco Chicchiriccò
> Fix For: 2.0.4, 2.1.0
>
>
> Currently, the "Explore Resource" feature only considers Any Types for which 
> provision rules exist, not Realms.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)


[GitHub] syncope pull request #:

2017-06-27 Thread ilgrosso
Github user ilgrosso commented on the pull request:


https://github.com/apache/syncope/commit/7363546b352be55fb47cc9c1019a9863b9487a5f#commitcomment-22785043
  
In 
client/enduser/src/main/java/org/apache/syncope/client/enduser/resources/BaseUserSelfResource.java:
In 
client/enduser/src/main/java/org/apache/syncope/client/enduser/resources/BaseUserSelfResource.java
 on line 21:
Please remove this useless import.


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[jira] [Commented] (SYNCOPE-1126) Include realms into the Explore Resource feature

2017-06-27 Thread ASF subversion and git services (JIRA)

[ 
https://issues.apache.org/jira/browse/SYNCOPE-1126?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16064740#comment-16064740
 ] 

ASF subversion and git services commented on SYNCOPE-1126:
--

Commit 6d9df32c070dd26b7d6af0c90632bfb064abb856 in syncope's branch 
refs/heads/2_0_X from [~ilgrosso]
[ https://git-wip-us.apache.org/repos/asf?p=syncope.git;h=6d9df32 ]

[SYNCOPE-1126] Explore resource for realms too


> Include realms into the Explore Resource feature
> 
>
> Key: SYNCOPE-1126
> URL: https://issues.apache.org/jira/browse/SYNCOPE-1126
> Project: Syncope
>  Issue Type: Improvement
>  Components: console
>Reporter: Francesco Chicchiriccò
>Assignee: Francesco Chicchiriccò
> Fix For: 2.0.4, 2.1.0
>
>
> Currently, the "Explore Resource" feature only considers Any Types for which 
> provision rules exist, not Realms.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)


[jira] [Commented] (SYNCOPE-1126) Include realms into the Explore Resource feature

2017-06-27 Thread ASF subversion and git services (JIRA)

[ 
https://issues.apache.org/jira/browse/SYNCOPE-1126?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16064741#comment-16064741
 ] 

ASF subversion and git services commented on SYNCOPE-1126:
--

Commit 636985db65a8c1b6dd7af781966a7f84d3a83c2a in syncope's branch 
refs/heads/master from [~ilgrosso]
[ https://git-wip-us.apache.org/repos/asf?p=syncope.git;h=636985d ]

[SYNCOPE-1126] Explore resource for realms too


> Include realms into the Explore Resource feature
> 
>
> Key: SYNCOPE-1126
> URL: https://issues.apache.org/jira/browse/SYNCOPE-1126
> Project: Syncope
>  Issue Type: Improvement
>  Components: console
>Reporter: Francesco Chicchiriccò
>Assignee: Francesco Chicchiriccò
> Fix For: 2.0.4, 2.1.0
>
>
> Currently, the "Explore Resource" feature only considers Any Types for which 
> provision rules exist, not Realms.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)


[jira] [Resolved] (SYNCOPE-1126) Include realms into the Explore Resource feature

2017-06-27 Thread JIRA

 [ 
https://issues.apache.org/jira/browse/SYNCOPE-1126?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Francesco Chicchiriccò resolved SYNCOPE-1126.
-
Resolution: Fixed

> Include realms into the Explore Resource feature
> 
>
> Key: SYNCOPE-1126
> URL: https://issues.apache.org/jira/browse/SYNCOPE-1126
> Project: Syncope
>  Issue Type: Improvement
>  Components: console
>Reporter: Francesco Chicchiriccò
>Assignee: Francesco Chicchiriccò
> Fix For: 2.0.4, 2.1.0
>
>
> Currently, the "Explore Resource" feature only considers Any Types for which 
> provision rules exist, not Realms.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)


[jira] [Created] (SYNCOPE-1127) Membership attribute values are not shown

2017-06-27 Thread Andrea Patricelli (JIRA)
Andrea Patricelli created SYNCOPE-1127:
--

 Summary: Membership attribute values are not shown
 Key: SYNCOPE-1127
 URL: https://issues.apache.org/jira/browse/SYNCOPE-1127
 Project: Syncope
  Issue Type: Bug
  Components: console
Affects Versions: 2.0.3
Reporter: Andrea Patricelli
 Fix For: 2.0.4, 2.1.0


Login on Syncope console and create (or edit) an user and assign to him a group 
that has type extensions. You should see a new accordion in plain attributes 
tab named with the name of the group. Then edit values of the attributes in 
that accordion and save. Re-edit the user and you'll see that values are not 
shown in the form.
But reading user through http://localhost:9080/syncope/rest/users/[username] 
memberships plain attrs have values. The problem is related only to view.
 



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)


Re: [DISCUSS] - Third party JWT SSO integration?

2017-06-27 Thread Colm O hEigeartaigh
Hi Francesco,

On Tue, Jun 27, 2017 at 9:24 AM, Francesco Chicchiriccò  wrote:


> Instead of providing a map in securityContext.xml, I would rather enable
> [1] to dynamically discover JwsSignatureVerifier implementations (or maybe
> a new interface of ours extending that, adding a getIssuer() method).
> Moreover, the new interface extending JwsSignatureVerifier could also
> provide a method to resolve the JWT subject into Syncope username (known
> user).
> If you like, I can take care of this.
>

+1 - please do!


>
> Please also note that such SSO would work only at REST level; in order to
> enable Admin Console or Enduser UI to that, something like the SAML 2.0 SP
> Agent [2] will need to be provided.
>

Yep that's fine.


>
> As people started asking for 2.0.4 [3][4] and CXF 3.1.12 is under vote, I
> think we should start finalizing, e.g. postponing new features and
> improvements to 2.0.5. But maybe this one can still fit.
>

No rush from my POV. Let's get it into JIRA anyway so that we can track it.

Colm.


>
> Regards.
>
> [1] https://github.com/apache/syncope/blob/2_0_X/core/logic/src/
> main/java/org/apache/syncope/core/logic/init/ClassPathScanI
> mplementationLookup.java
> [2] https://github.com/apache/syncope/blob/2_0_X/ext/saml2sp/
> agent/src/main/java/org/apache/syncope/ext/saml2lsp/
> agent/AssertionConsumer.java#L47
> [3] https://lists.apache.org/thread.html/d8a6f8fe3629d1d00165e24
> 61458511d8ace983af6006a5d304fa6a9@%3Cuser.syncope.apache.org%3E
> [4] https://lists.apache.org/thread.html/7d9072146f01994c8fb7f02
> c8af1f88e031345e391c06970a8fcf1ff@%3Cuser.syncope.apache.org%3E
>
> --
> Francesco Chicchiriccò
>
> Tirasa - Open Source Excellence
> http://www.tirasa.net/
>
> Member at The Apache Software Foundation
> Syncope, Cocoon, Olingo, CXF, OpenJPA, PonyMail
> http://home.apache.org/~ilgrosso/
>
>


-- 
Colm O hEigeartaigh

Talend Community Coder
http://coders.talend.com


Re: [DISCUSS] - Third party JWT SSO integration?

2017-06-27 Thread Francesco Chicchiriccò

On 27/06/2017 16:05, Colm O hEigeartaigh wrote:

Hi Francesco,

On Tue, Jun 27, 2017 at 9:24 AM, Francesco Chicchiriccò  
wrote:


Instead of providing a map in securityContext.xml, I would rather enable
[1] to dynamically discover JwsSignatureVerifier implementations (or maybe
a new interface of ours extending that, adding a getIssuer() method).
Moreover, the new interface extending JwsSignatureVerifier could also
provide a method to resolve the JWT subject into Syncope username (known
user).
If you like, I can take care of this.

+1 - please do!


Please also note that such SSO would work only at REST level; in order to
enable Admin Console or Enduser UI to that, something like the SAML 2.0 SP
Agent [2] will need to be provided.

Yep that's fine.


As people started asking for 2.0.4 [3][4] and CXF 3.1.12 is under vote, I
think we should start finalizing, e.g. postponing new features and
improvements to 2.0.5. But maybe this one can still fit.

No rush from my POV. Let's get it into JIRA anyway so that we can track it.


Agree: would you mind to do that? Thanks!

Regards.



[1] https://github.com/apache/syncope/blob/2_0_X/core/logic/src/
main/java/org/apache/syncope/core/logic/init/ClassPathScanI
mplementationLookup.java
[2] https://github.com/apache/syncope/blob/2_0_X/ext/saml2sp/
agent/src/main/java/org/apache/syncope/ext/saml2lsp/
agent/AssertionConsumer.java#L47
[3] https://lists.apache.org/thread.html/d8a6f8fe3629d1d00165e24
61458511d8ace983af6006a5d304fa6a9@%3Cuser.syncope.apache.org%3E
[4] https://lists.apache.org/thread.html/7d9072146f01994c8fb7f02
c8af1f88e031345e391c06970a8fcf1ff@%3Cuser.syncope.apache.org%3E


--
Francesco Chicchiriccò

Tirasa - Open Source Excellence
http://www.tirasa.net/

Member at The Apache Software Foundation
Syncope, Cocoon, Olingo, CXF, OpenJPA, PonyMail
http://home.apache.org/~ilgrosso/



[jira] [Commented] (SYNCOPE-1110) Error replacing group/auxclass/resource during self-management operation

2017-06-27 Thread ASF subversion and git services (JIRA)

[ 
https://issues.apache.org/jira/browse/SYNCOPE-1110?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16064884#comment-16064884
 ] 

ASF subversion and git services commented on SYNCOPE-1110:
--

Commit 11ab8cb9a824efa48d5c98613b174ec2633dfa29 in syncope's branch 
refs/heads/master from [~skylark17]
[ https://git-wip-us.apache.org/repos/asf?p=syncope.git;h=11ab8cb ]

Fixes [SYNCOPE-1110], [SYNCOPE-1123]


> Error replacing group/auxclass/resource during self-management operation
> 
>
> Key: SYNCOPE-1110
> URL: https://issues.apache.org/jira/browse/SYNCOPE-1110
> Project: Syncope
>  Issue Type: Bug
>  Components: enduser
>Affects Versions: 2.0.3
>Reporter: fabio martelli
> Fix For: 2.0.4, 2.1.0
>
>
> Steps to reproduce:
> # perform a self registration by specifying 2 groups, 2 aux classes and 2 
> resources
> # submit and perform an approval with admin user
> # perform a self management by replacing one group/auxclass/resource with 
> another one
> # submbit and perform an approval with admin user
> # check the expected result into the administration console 
> Groups, auxclasses and resources assigned to the approved user will be three 
> instead of two.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)


[jira] [Commented] (SYNCOPE-1123) Enduser UserRequestValidator NPE on custom form empty sections

2017-06-27 Thread ASF subversion and git services (JIRA)

[ 
https://issues.apache.org/jira/browse/SYNCOPE-1123?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16064885#comment-16064885
 ] 

ASF subversion and git services commented on SYNCOPE-1123:
--

Commit 11ab8cb9a824efa48d5c98613b174ec2633dfa29 in syncope's branch 
refs/heads/master from [~skylark17]
[ https://git-wip-us.apache.org/repos/asf?p=syncope.git;h=11ab8cb ]

Fixes [SYNCOPE-1110], [SYNCOPE-1123]


> Enduser UserRequestValidator NPE on custom form empty sections
> --
>
> Key: SYNCOPE-1123
> URL: https://issues.apache.org/jira/browse/SYNCOPE-1123
> Project: Syncope
>  Issue Type: Bug
>  Components: enduser
>Affects Versions: 2.0.3
>Reporter: Andrea Patricelli
>Assignee: Andrea Patricelli
> Fix For: 2.0.4, 2.1.0
>
>
> With this customForm.json like this:
> {code}
> {
>   "PLAIN":
>   {
> "show": true,
> "attributes": 
> {
>   "username":  
>   {
> "defaultValues": [
>   "bellini"
> ]
>   },
>   "firstname":  
>   {
> "readonly": false
>   },
>   "surname":  
>   {
> "defaultValues": [
>   "nuovo_surname"
> ]
>   },
>   "fullname":  
>   {
> "defaultValues": [
>   "fullname"
> ]
>   },
>   "email":  
>   {
> "defaultValues": [
>   "t...@apache.org"
> ]
>   },
>   "userId": 
>   {
> "readonly": false
>   },
>   "ctype": 
>   {
> "readonly": false
>   }
> }
>   },
>   "DERIVED": 
>   {
> "show": false
>   },
>   "VIRTUAL": 
>   {
> "show": true,
> "attributes": {}
>   }
> }
> {code}
> self registration fails due to NPE



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)


[jira] [Resolved] (SYNCOPE-1123) Enduser UserRequestValidator NPE on custom form empty sections

2017-06-27 Thread Andrea Patricelli (JIRA)

 [ 
https://issues.apache.org/jira/browse/SYNCOPE-1123?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Andrea Patricelli resolved SYNCOPE-1123.

Resolution: Fixed

> Enduser UserRequestValidator NPE on custom form empty sections
> --
>
> Key: SYNCOPE-1123
> URL: https://issues.apache.org/jira/browse/SYNCOPE-1123
> Project: Syncope
>  Issue Type: Bug
>  Components: enduser
>Affects Versions: 2.0.3
>Reporter: Andrea Patricelli
>Assignee: Andrea Patricelli
> Fix For: 2.0.4, 2.1.0
>
>
> With this customForm.json like this:
> {code}
> {
>   "PLAIN":
>   {
> "show": true,
> "attributes": 
> {
>   "username":  
>   {
> "defaultValues": [
>   "bellini"
> ]
>   },
>   "firstname":  
>   {
> "readonly": false
>   },
>   "surname":  
>   {
> "defaultValues": [
>   "nuovo_surname"
> ]
>   },
>   "fullname":  
>   {
> "defaultValues": [
>   "fullname"
> ]
>   },
>   "email":  
>   {
> "defaultValues": [
>   "t...@apache.org"
> ]
>   },
>   "userId": 
>   {
> "readonly": false
>   },
>   "ctype": 
>   {
> "readonly": false
>   }
> }
>   },
>   "DERIVED": 
>   {
> "show": false
>   },
>   "VIRTUAL": 
>   {
> "show": true,
> "attributes": {}
>   }
> }
> {code}
> self registration fails due to NPE



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)


[jira] [Commented] (SYNCOPE-1123) Enduser UserRequestValidator NPE on custom form empty sections

2017-06-27 Thread ASF subversion and git services (JIRA)

[ 
https://issues.apache.org/jira/browse/SYNCOPE-1123?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16064890#comment-16064890
 ] 

ASF subversion and git services commented on SYNCOPE-1123:
--

Commit f29a44d18d0cffbf1f81f6a4980cc8965f3c56a0 in syncope's branch 
refs/heads/2_0_X from [~skylark17]
[ https://git-wip-us.apache.org/repos/asf?p=syncope.git;h=f29a44d ]

Fixes [SYNCOPE-1110], [SYNCOPE-1123]


> Enduser UserRequestValidator NPE on custom form empty sections
> --
>
> Key: SYNCOPE-1123
> URL: https://issues.apache.org/jira/browse/SYNCOPE-1123
> Project: Syncope
>  Issue Type: Bug
>  Components: enduser
>Affects Versions: 2.0.3
>Reporter: Andrea Patricelli
>Assignee: Andrea Patricelli
> Fix For: 2.0.4, 2.1.0
>
>
> With this customForm.json like this:
> {code}
> {
>   "PLAIN":
>   {
> "show": true,
> "attributes": 
> {
>   "username":  
>   {
> "defaultValues": [
>   "bellini"
> ]
>   },
>   "firstname":  
>   {
> "readonly": false
>   },
>   "surname":  
>   {
> "defaultValues": [
>   "nuovo_surname"
> ]
>   },
>   "fullname":  
>   {
> "defaultValues": [
>   "fullname"
> ]
>   },
>   "email":  
>   {
> "defaultValues": [
>   "t...@apache.org"
> ]
>   },
>   "userId": 
>   {
> "readonly": false
>   },
>   "ctype": 
>   {
> "readonly": false
>   }
> }
>   },
>   "DERIVED": 
>   {
> "show": false
>   },
>   "VIRTUAL": 
>   {
> "show": true,
> "attributes": {}
>   }
> }
> {code}
> self registration fails due to NPE



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)


[jira] [Commented] (SYNCOPE-1110) Error replacing group/auxclass/resource during self-management operation

2017-06-27 Thread ASF subversion and git services (JIRA)

[ 
https://issues.apache.org/jira/browse/SYNCOPE-1110?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16064889#comment-16064889
 ] 

ASF subversion and git services commented on SYNCOPE-1110:
--

Commit f29a44d18d0cffbf1f81f6a4980cc8965f3c56a0 in syncope's branch 
refs/heads/2_0_X from [~skylark17]
[ https://git-wip-us.apache.org/repos/asf?p=syncope.git;h=f29a44d ]

Fixes [SYNCOPE-1110], [SYNCOPE-1123]


> Error replacing group/auxclass/resource during self-management operation
> 
>
> Key: SYNCOPE-1110
> URL: https://issues.apache.org/jira/browse/SYNCOPE-1110
> Project: Syncope
>  Issue Type: Bug
>  Components: enduser
>Affects Versions: 2.0.3
>Reporter: fabio martelli
> Fix For: 2.0.4, 2.1.0
>
>
> Steps to reproduce:
> # perform a self registration by specifying 2 groups, 2 aux classes and 2 
> resources
> # submit and perform an approval with admin user
> # perform a self management by replacing one group/auxclass/resource with 
> another one
> # submbit and perform an approval with admin user
> # check the expected result into the administration console 
> Groups, auxclasses and resources assigned to the approved user will be three 
> instead of two.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)


[jira] [Created] (SYNCOPE-1128) Content exporter does not sort for internal foreign keys

2017-06-27 Thread JIRA
Francesco Chicchiriccò created SYNCOPE-1128:
---

 Summary: Content exporter does not sort for internal foreign keys
 Key: SYNCOPE-1128
 URL: https://issues.apache.org/jira/browse/SYNCOPE-1128
 Project: Syncope
  Issue Type: Bug
  Components: core
Affects Versions: 2.0.3, 1.2.10, 1.1.8
Reporter: Francesco Chicchiriccò
 Fix For: 1.2.11, 2.0.4, 2.1.0


Some database tables created for JPA entities (say {{Realm}}) contain foreign 
key constraints related to other column(s) in the same table.
This means that, when exporting the content as XML, the order in which their 
rows is report must take this conditions into account.

This is currently not happening, as child Realms might be exported before 
parent Realms, thus generating errors during subsequent import.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)


[jira] [Commented] (SYNCOPE-1123) Enduser UserRequestValidator NPE on custom form empty sections

2017-06-27 Thread Andrea Patricelli (JIRA)

[ 
https://issues.apache.org/jira/browse/SYNCOPE-1123?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16064898#comment-16064898
 ] 

Andrea Patricelli commented on SYNCOPE-1123:


Many Thanks to [~skylark17] for the resolution of this issue!

> Enduser UserRequestValidator NPE on custom form empty sections
> --
>
> Key: SYNCOPE-1123
> URL: https://issues.apache.org/jira/browse/SYNCOPE-1123
> Project: Syncope
>  Issue Type: Bug
>  Components: enduser
>Affects Versions: 2.0.3
>Reporter: Andrea Patricelli
>Assignee: Andrea Patricelli
> Fix For: 2.0.4, 2.1.0
>
>
> With this customForm.json like this:
> {code}
> {
>   "PLAIN":
>   {
> "show": true,
> "attributes": 
> {
>   "username":  
>   {
> "defaultValues": [
>   "bellini"
> ]
>   },
>   "firstname":  
>   {
> "readonly": false
>   },
>   "surname":  
>   {
> "defaultValues": [
>   "nuovo_surname"
> ]
>   },
>   "fullname":  
>   {
> "defaultValues": [
>   "fullname"
> ]
>   },
>   "email":  
>   {
> "defaultValues": [
>   "t...@apache.org"
> ]
>   },
>   "userId": 
>   {
> "readonly": false
>   },
>   "ctype": 
>   {
> "readonly": false
>   }
> }
>   },
>   "DERIVED": 
>   {
> "show": false
>   },
>   "VIRTUAL": 
>   {
> "show": true,
> "attributes": {}
>   }
> }
> {code}
> self registration fails due to NPE



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)


[jira] [Resolved] (SYNCOPE-1110) Error replacing group/auxclass/resource during self-management operation

2017-06-27 Thread Andrea Patricelli (JIRA)

 [ 
https://issues.apache.org/jira/browse/SYNCOPE-1110?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Andrea Patricelli resolved SYNCOPE-1110.

Resolution: Fixed
  Assignee: Andrea Patricelli

Many Thanks to [~skylark17]!

> Error replacing group/auxclass/resource during self-management operation
> 
>
> Key: SYNCOPE-1110
> URL: https://issues.apache.org/jira/browse/SYNCOPE-1110
> Project: Syncope
>  Issue Type: Bug
>  Components: enduser
>Affects Versions: 2.0.3
>Reporter: fabio martelli
>Assignee: Andrea Patricelli
> Fix For: 2.0.4, 2.1.0
>
>
> Steps to reproduce:
> # perform a self registration by specifying 2 groups, 2 aux classes and 2 
> resources
> # submit and perform an approval with admin user
> # perform a self management by replacing one group/auxclass/resource with 
> another one
> # submbit and perform an approval with admin user
> # check the expected result into the administration console 
> Groups, auxclasses and resources assigned to the approved user will be three 
> instead of two.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)


[jira] [Created] (SYNCOPE-1129) Third Party JWT SSO integration

2017-06-27 Thread Colm O hEigeartaigh (JIRA)
Colm O hEigeartaigh created SYNCOPE-1129:


 Summary: Third Party JWT SSO integration
 Key: SYNCOPE-1129
 URL: https://issues.apache.org/jira/browse/SYNCOPE-1129
 Project: Syncope
  Issue Type: New Feature
Reporter: Colm O hEigeartaigh
Assignee: Francesco Chicchiriccò
 Fix For: 2.0.4


This task is to support SSO using third party JWT tokens.

It involves two tasks:

a) Create a new interface extending JwsSignatureVerifier to provide a method to 
resolve a JWT subject into Syncope username (known user).

b) When processing a received token, if the issuer is different from the known 
issuer ("jwtIssuer" in security.properties), then instead of retrieving the 
default jwsSignatureVerifier implementation, the authentication component will 
enable the ClassPathScanImplementationLookup to dynamically discover an 
implementation of the interface above.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)


[jira] [Created] (SYNCOPE-1130) NPE refreshing realm page after realm creation

2017-06-27 Thread fabio martelli (JIRA)
fabio martelli created SYNCOPE-1130:
---

 Summary: NPE refreshing realm page after realm creation
 Key: SYNCOPE-1130
 URL: https://issues.apache.org/jira/browse/SYNCOPE-1130
 Project: Syncope
  Issue Type: Bug
  Components: console
Affects Versions: 2.0.3
Reporter: fabio martelli
Assignee: fabio martelli
 Fix For: 2.0.4, 2.1.0


NPE refreshing realm page after realm creation.

Root cause:

java.lang.NullPointerException
 at 
org.apache.syncope.client.console.panels.Realm$1.getPanel(Realm.java:116)
 at 
org.apache.syncope.client.console.panels.Realm$1.getPanel(Realm.java:108)
 at 
org.apache.wicket.extensions.markup.html.tabs.TabbedPanel.setCurrentTab(TabbedPanel.java:422)
 at 
org.apache.wicket.extensions.markup.html.tabs.TabbedPanel.setSelectedTab(TabbedPanel.java:397)
..



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)


[jira] [Assigned] (SYNCOPE-1128) Content exporter does not sort for internal foreign keys

2017-06-27 Thread JIRA

 [ 
https://issues.apache.org/jira/browse/SYNCOPE-1128?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Francesco Chicchiriccò reassigned SYNCOPE-1128:
---

Assignee: Francesco Chicchiriccò

> Content exporter does not sort for internal foreign keys
> 
>
> Key: SYNCOPE-1128
> URL: https://issues.apache.org/jira/browse/SYNCOPE-1128
> Project: Syncope
>  Issue Type: Bug
>  Components: core
>Affects Versions: 1.1.8, 1.2.10, 2.0.3
>Reporter: Francesco Chicchiriccò
>Assignee: Francesco Chicchiriccò
> Fix For: 1.2.11, 2.0.4, 2.1.0
>
>
> Some database tables created for JPA entities (say {{Realm}}) contain foreign 
> key constraints related to other column(s) in the same table.
> This means that, when exporting the content as XML, the order in which their 
> rows is report must take this conditions into account.
> This is currently not happening, as child Realms might be exported before 
> parent Realms, thus generating errors during subsequent import.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)


[jira] [Commented] (SYNCOPE-1128) Content exporter does not sort for internal foreign keys

2017-06-27 Thread ASF subversion and git services (JIRA)

[ 
https://issues.apache.org/jira/browse/SYNCOPE-1128?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16064920#comment-16064920
 ] 

ASF subversion and git services commented on SYNCOPE-1128:
--

Commit a6147996d2d14f1ce8f1b3f98e4e57788e464d90 in syncope's branch 
refs/heads/2_0_X from [~ilgrosso]
[ https://git-wip-us.apache.org/repos/asf?p=syncope.git;h=a614799 ]

[SYNCOPE-1128] Now ordering table rows before export, also for 'internal' 
foreign keys


> Content exporter does not sort for internal foreign keys
> 
>
> Key: SYNCOPE-1128
> URL: https://issues.apache.org/jira/browse/SYNCOPE-1128
> Project: Syncope
>  Issue Type: Bug
>  Components: core
>Affects Versions: 1.1.8, 1.2.10, 2.0.3
>Reporter: Francesco Chicchiriccò
>Assignee: Francesco Chicchiriccò
> Fix For: 1.2.11, 2.0.4, 2.1.0
>
>
> Some database tables created for JPA entities (say {{Realm}}) contain foreign 
> key constraints related to other column(s) in the same table.
> This means that, when exporting the content as XML, the order in which their 
> rows is report must take this conditions into account.
> This is currently not happening, as child Realms might be exported before 
> parent Realms, thus generating errors during subsequent import.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)


[jira] [Commented] (SYNCOPE-1128) Content exporter does not sort for internal foreign keys

2017-06-27 Thread ASF subversion and git services (JIRA)

[ 
https://issues.apache.org/jira/browse/SYNCOPE-1128?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16064921#comment-16064921
 ] 

ASF subversion and git services commented on SYNCOPE-1128:
--

Commit c12106de4480d03c9b331ef72f5fa4a0bb65c246 in syncope's branch 
refs/heads/master from [~ilgrosso]
[ https://git-wip-us.apache.org/repos/asf?p=syncope.git;h=c12106d ]

[SYNCOPE-1128] Now ordering table rows before export, also for 'internal' 
foreign keys


> Content exporter does not sort for internal foreign keys
> 
>
> Key: SYNCOPE-1128
> URL: https://issues.apache.org/jira/browse/SYNCOPE-1128
> Project: Syncope
>  Issue Type: Bug
>  Components: core
>Affects Versions: 1.1.8, 1.2.10, 2.0.3
>Reporter: Francesco Chicchiriccò
>Assignee: Francesco Chicchiriccò
> Fix For: 1.2.11, 2.0.4, 2.1.0
>
>
> Some database tables created for JPA entities (say {{Realm}}) contain foreign 
> key constraints related to other column(s) in the same table.
> This means that, when exporting the content as XML, the order in which their 
> rows is report must take this conditions into account.
> This is currently not happening, as child Realms might be exported before 
> parent Realms, thus generating errors during subsequent import.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)


[jira] [Resolved] (SYNCOPE-1128) Content exporter does not sort for internal foreign keys

2017-06-27 Thread JIRA

 [ 
https://issues.apache.org/jira/browse/SYNCOPE-1128?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Francesco Chicchiriccò resolved SYNCOPE-1128.
-
Resolution: Fixed

> Content exporter does not sort for internal foreign keys
> 
>
> Key: SYNCOPE-1128
> URL: https://issues.apache.org/jira/browse/SYNCOPE-1128
> Project: Syncope
>  Issue Type: Bug
>  Components: core
>Affects Versions: 1.1.8, 1.2.10, 2.0.3
>Reporter: Francesco Chicchiriccò
>Assignee: Francesco Chicchiriccò
> Fix For: 1.2.11, 2.0.4, 2.1.0
>
>
> Some database tables created for JPA entities (say {{Realm}}) contain foreign 
> key constraints related to other column(s) in the same table.
> This means that, when exporting the content as XML, the order in which their 
> rows is report must take this conditions into account.
> This is currently not happening, as child Realms might be exported before 
> parent Realms, thus generating errors during subsequent import.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)


[jira] [Commented] (SYNCOPE-1128) Content exporter does not sort for internal foreign keys

2017-06-27 Thread ASF subversion and git services (JIRA)

[ 
https://issues.apache.org/jira/browse/SYNCOPE-1128?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16064931#comment-16064931
 ] 

ASF subversion and git services commented on SYNCOPE-1128:
--

Commit 9805be634ee307c343073a09860e3c931359fd35 in syncope's branch 
refs/heads/1_2_X from [~ilgrosso]
[ https://git-wip-us.apache.org/repos/asf?p=syncope.git;h=9805be6 ]

[SYNCOPE-1128] Now ordering table rows before export, also for 'internal' 
foreign keys


> Content exporter does not sort for internal foreign keys
> 
>
> Key: SYNCOPE-1128
> URL: https://issues.apache.org/jira/browse/SYNCOPE-1128
> Project: Syncope
>  Issue Type: Bug
>  Components: core
>Affects Versions: 1.1.8, 1.2.10, 2.0.3
>Reporter: Francesco Chicchiriccò
>Assignee: Francesco Chicchiriccò
> Fix For: 1.2.11, 2.0.4, 2.1.0
>
>
> Some database tables created for JPA entities (say {{Realm}}) contain foreign 
> key constraints related to other column(s) in the same table.
> This means that, when exporting the content as XML, the order in which their 
> rows is report must take this conditions into account.
> This is currently not happening, as child Realms might be exported before 
> parent Realms, thus generating errors during subsequent import.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)


[jira] [Created] (SYNCOPE-1131) Cannot delete resources owned by realms

2017-06-27 Thread JIRA
Francesco Chicchiriccò created SYNCOPE-1131:
---

 Summary: Cannot delete resources owned by realms
 Key: SYNCOPE-1131
 URL: https://issues.apache.org/jira/browse/SYNCOPE-1131
 Project: Syncope
  Issue Type: Bug
  Components: core
Affects Versions: 2.0.3
Reporter: Francesco Chicchiriccò
Assignee: Francesco Chicchiriccò
 Fix For: 2.0.4, 2.1.0


When attempting to delete a resource assigned to one or more realms, an error 
is reported: 

{code}
Caused by: org.apache.openjpa.lib.jdbc.ReportingSQLException: ERROR: update or 
delete on table "externalresource" violates foreign key constraint 
"realm_externalresource_resource_id_fkey" on table "realm_externalresource" 
  Detail: Key (id)=() is still referenced from table 
"realm_externalresource". {prepstmnt 1989356175 DELETE FROM ExternalResource 
WHERE id = ?} [code=0, state=23503]
{code}



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)


[jira] [Resolved] (SYNCOPE-1131) Cannot delete resources owned by realms

2017-06-27 Thread JIRA

 [ 
https://issues.apache.org/jira/browse/SYNCOPE-1131?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Francesco Chicchiriccò resolved SYNCOPE-1131.
-
Resolution: Fixed

> Cannot delete resources owned by realms
> ---
>
> Key: SYNCOPE-1131
> URL: https://issues.apache.org/jira/browse/SYNCOPE-1131
> Project: Syncope
>  Issue Type: Bug
>  Components: core
>Affects Versions: 2.0.3
>Reporter: Francesco Chicchiriccò
>Assignee: Francesco Chicchiriccò
> Fix For: 2.0.4, 2.1.0
>
>
> When attempting to delete a resource assigned to one or more realms, an error 
> is reported: 
> {code}
> Caused by: org.apache.openjpa.lib.jdbc.ReportingSQLException: ERROR: update 
> or delete on table "externalresource" violates foreign key constraint 
> "realm_externalresource_resource_id_fkey" on table "realm_externalresource" 
>   Detail: Key (id)=() is still referenced from table 
> "realm_externalresource". {prepstmnt 1989356175 DELETE FROM ExternalResource 
> WHERE id = ?} [code=0, state=23503]
> {code}



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)


[jira] [Commented] (SYNCOPE-1131) Cannot delete resources owned by realms

2017-06-27 Thread ASF subversion and git services (JIRA)

[ 
https://issues.apache.org/jira/browse/SYNCOPE-1131?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16064981#comment-16064981
 ] 

ASF subversion and git services commented on SYNCOPE-1131:
--

Commit 16cf99b5354efdc36a7f519a66fc12005dd8b892 in syncope's branch 
refs/heads/2_0_X from [~ilgrosso]
[ https://git-wip-us.apache.org/repos/asf?p=syncope.git;h=16cf99b ]

[SYNCOPE-1131] Missing resource removal before delete (for realms)


> Cannot delete resources owned by realms
> ---
>
> Key: SYNCOPE-1131
> URL: https://issues.apache.org/jira/browse/SYNCOPE-1131
> Project: Syncope
>  Issue Type: Bug
>  Components: core
>Affects Versions: 2.0.3
>Reporter: Francesco Chicchiriccò
>Assignee: Francesco Chicchiriccò
> Fix For: 2.0.4, 2.1.0
>
>
> When attempting to delete a resource assigned to one or more realms, an error 
> is reported: 
> {code}
> Caused by: org.apache.openjpa.lib.jdbc.ReportingSQLException: ERROR: update 
> or delete on table "externalresource" violates foreign key constraint 
> "realm_externalresource_resource_id_fkey" on table "realm_externalresource" 
>   Detail: Key (id)=() is still referenced from table 
> "realm_externalresource". {prepstmnt 1989356175 DELETE FROM ExternalResource 
> WHERE id = ?} [code=0, state=23503]
> {code}



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)


[jira] [Commented] (SYNCOPE-1131) Cannot delete resources owned by realms

2017-06-27 Thread ASF subversion and git services (JIRA)

[ 
https://issues.apache.org/jira/browse/SYNCOPE-1131?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16064982#comment-16064982
 ] 

ASF subversion and git services commented on SYNCOPE-1131:
--

Commit cfb6c638d570536233743cca16a5498dcceea6ce in syncope's branch 
refs/heads/master from [~ilgrosso]
[ https://git-wip-us.apache.org/repos/asf?p=syncope.git;h=cfb6c63 ]

[SYNCOPE-1131] Missing resource removal before delete (for realms)


> Cannot delete resources owned by realms
> ---
>
> Key: SYNCOPE-1131
> URL: https://issues.apache.org/jira/browse/SYNCOPE-1131
> Project: Syncope
>  Issue Type: Bug
>  Components: core
>Affects Versions: 2.0.3
>Reporter: Francesco Chicchiriccò
>Assignee: Francesco Chicchiriccò
> Fix For: 2.0.4, 2.1.0
>
>
> When attempting to delete a resource assigned to one or more realms, an error 
> is reported: 
> {code}
> Caused by: org.apache.openjpa.lib.jdbc.ReportingSQLException: ERROR: update 
> or delete on table "externalresource" violates foreign key constraint 
> "realm_externalresource_resource_id_fkey" on table "realm_externalresource" 
>   Detail: Key (id)=() is still referenced from table 
> "realm_externalresource". {prepstmnt 1989356175 DELETE FROM ExternalResource 
> WHERE id = ?} [code=0, state=23503]
> {code}



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)


AnyObjects query

2017-06-27 Thread Colm O hEigeartaigh
Hi all,

How can I retrieve a list of AnyObjects? The following returns a 400:

curl -I -X GET -u admin:password
http://localhost:9080/syncope/rest/anyObjects

Colm.


-- 
Colm O hEigeartaigh

Talend Community Coder
http://coders.talend.com


Re: AnyObjects query

2017-06-27 Thread Francesco Chicchiriccò

On 27/06/2017 17:24, Colm O hEigeartaigh wrote:

Hi all,

How can I retrieve a list of AnyObjects? The following returns a 400:

curl -I -X GET -u admin:password
http://localhost:9080/syncope/rest/anyObjects


You must at least provide the AnyType, e.g.

http://localhost:9080/syncope/rest/anyObjects;fiql=%24type%3D%3DPRINTER

Regards.

--
Francesco Chicchiriccò

Tirasa - Open Source Excellence
http://www.tirasa.net/

Member at The Apache Software Foundation
Syncope, Cocoon, Olingo, CXF, OpenJPA, PonyMail
http://home.apache.org/~ilgrosso/



[jira] [Commented] (SYNCOPE-1130) NPE refreshing realm page after realm creation

2017-06-27 Thread ASF subversion and git services (JIRA)

[ 
https://issues.apache.org/jira/browse/SYNCOPE-1130?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16065007#comment-16065007
 ] 

ASF subversion and git services commented on SYNCOPE-1130:
--

Commit 53c54d7f13f2a60a5f44519bcc251bad097b0c28 in syncope's branch 
refs/heads/master from [~fmartelli]
[ https://git-wip-us.apache.org/repos/asf?p=syncope.git;h=53c54d7 ]

[SYNCOPE-1130] fix the issue by handling NPE + fix a further NPE issue 
aoccurring in case of missing information during user approval (case of test 
user)


> NPE refreshing realm page after realm creation
> --
>
> Key: SYNCOPE-1130
> URL: https://issues.apache.org/jira/browse/SYNCOPE-1130
> Project: Syncope
>  Issue Type: Bug
>  Components: console
>Affects Versions: 2.0.3
>Reporter: fabio martelli
>Assignee: fabio martelli
> Fix For: 2.0.4, 2.1.0
>
>
> NPE refreshing realm page after realm creation.
> Root cause:
> java.lang.NullPointerException
>  at 
> org.apache.syncope.client.console.panels.Realm$1.getPanel(Realm.java:116)
>  at 
> org.apache.syncope.client.console.panels.Realm$1.getPanel(Realm.java:108)
>  at 
> org.apache.wicket.extensions.markup.html.tabs.TabbedPanel.setCurrentTab(TabbedPanel.java:422)
>  at 
> org.apache.wicket.extensions.markup.html.tabs.TabbedPanel.setSelectedTab(TabbedPanel.java:397)
> ..



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)


[jira] [Commented] (SYNCOPE-1130) NPE refreshing realm page after realm creation

2017-06-27 Thread ASF subversion and git services (JIRA)

[ 
https://issues.apache.org/jira/browse/SYNCOPE-1130?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16065006#comment-16065006
 ] 

ASF subversion and git services commented on SYNCOPE-1130:
--

Commit 32c50bd44f65d7fd51e3fa8ef8011272c7f685d3 in syncope's branch 
refs/heads/2_0_X from [~fmartelli]
[ https://git-wip-us.apache.org/repos/asf?p=syncope.git;h=32c50bd ]

[SYNCOPE-1130] fix the issue by handling NPE + fix a further NPE issue 
aoccurring in case of missing information during user approval (case of test 
user)


> NPE refreshing realm page after realm creation
> --
>
> Key: SYNCOPE-1130
> URL: https://issues.apache.org/jira/browse/SYNCOPE-1130
> Project: Syncope
>  Issue Type: Bug
>  Components: console
>Affects Versions: 2.0.3
>Reporter: fabio martelli
>Assignee: fabio martelli
> Fix For: 2.0.4, 2.1.0
>
>
> NPE refreshing realm page after realm creation.
> Root cause:
> java.lang.NullPointerException
>  at 
> org.apache.syncope.client.console.panels.Realm$1.getPanel(Realm.java:116)
>  at 
> org.apache.syncope.client.console.panels.Realm$1.getPanel(Realm.java:108)
>  at 
> org.apache.wicket.extensions.markup.html.tabs.TabbedPanel.setCurrentTab(TabbedPanel.java:422)
>  at 
> org.apache.wicket.extensions.markup.html.tabs.TabbedPanel.setSelectedTab(TabbedPanel.java:397)
> ..



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)


[jira] [Resolved] (SYNCOPE-1130) NPE refreshing realm page after realm creation

2017-06-27 Thread fabio martelli (JIRA)

 [ 
https://issues.apache.org/jira/browse/SYNCOPE-1130?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

fabio martelli resolved SYNCOPE-1130.
-
Resolution: Fixed

> NPE refreshing realm page after realm creation
> --
>
> Key: SYNCOPE-1130
> URL: https://issues.apache.org/jira/browse/SYNCOPE-1130
> Project: Syncope
>  Issue Type: Bug
>  Components: console
>Affects Versions: 2.0.3
>Reporter: fabio martelli
>Assignee: fabio martelli
> Fix For: 2.0.4, 2.1.0
>
>
> NPE refreshing realm page after realm creation.
> Root cause:
> java.lang.NullPointerException
>  at 
> org.apache.syncope.client.console.panels.Realm$1.getPanel(Realm.java:116)
>  at 
> org.apache.syncope.client.console.panels.Realm$1.getPanel(Realm.java:108)
>  at 
> org.apache.wicket.extensions.markup.html.tabs.TabbedPanel.setCurrentTab(TabbedPanel.java:422)
>  at 
> org.apache.wicket.extensions.markup.html.tabs.TabbedPanel.setSelectedTab(TabbedPanel.java:397)
> ..



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)


[jira] [Resolved] (SYNCOPE-1122) Enduser must show all attributes when customForm.json has empty section with show=true

2017-06-27 Thread Andrea Patricelli (JIRA)

 [ 
https://issues.apache.org/jira/browse/SYNCOPE-1122?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Andrea Patricelli resolved SYNCOPE-1122.

Resolution: Fixed

> Enduser must show all attributes when customForm.json has empty section with 
> show=true
> --
>
> Key: SYNCOPE-1122
> URL: https://issues.apache.org/jira/browse/SYNCOPE-1122
> Project: Syncope
>  Issue Type: Bug
>  Components: enduser
>Affects Versions: 2.0.3
>Reporter: Andrea Patricelli
>Assignee: Andrea Patricelli
> Fix For: 2.0.4, 2.1.0
>
>
> If customForm.json is like this:
> {code}
> {
>  
>   "PLAIN":
>   {
> "show": true
>   }
> }
> {code}
> I see all plain attributes, but they haven't values.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)


Re: AnyObjects query

2017-06-27 Thread Colm O hEigeartaigh
Thanks Francesco! On a related note, let's say I have some AnyObjects
(Printer) with a relationship to other AnyObjects (Cartridge). Now I want
to search for a Printer which has a relationship with a Cartridge with a
"colour" attribute of "blue". Is there a way to do this via a FIQL
expression?

Colm.

On Tue, Jun 27, 2017 at 4:29 PM, Francesco Chicchiriccò  wrote:

> On 27/06/2017 17:24, Colm O hEigeartaigh wrote:
>
>> Hi all,
>>
>> How can I retrieve a list of AnyObjects? The following returns a 400:
>>
>> curl -I -X GET -u admin:password
>> http://localhost:9080/syncope/rest/anyObjects
>>
>
> You must at least provide the AnyType, e.g.
>
> http://localhost:9080/syncope/rest/anyObjects;fiql=%24type%3D%3DPRINTER
>
> Regards.
>
> --
> Francesco Chicchiriccò
>
> Tirasa - Open Source Excellence
> http://www.tirasa.net/
>
> Member at The Apache Software Foundation
> Syncope, Cocoon, Olingo, CXF, OpenJPA, PonyMail
> http://home.apache.org/~ilgrosso/
>
>


-- 
Colm O hEigeartaigh

Talend Community Coder
http://coders.talend.com


[jira] [Updated] (SYNCOPE-1132) Extraneous "dots" appearing in the Console when assigning relationships

2017-06-27 Thread Colm O hEigeartaigh (JIRA)

 [ 
https://issues.apache.org/jira/browse/SYNCOPE-1132?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Colm O hEigeartaigh updated SYNCOPE-1132:
-
Attachment: syncope-dots.png

Two black dots are present that should not be there.

> Extraneous "dots" appearing in the Console when assigning relationships
> ---
>
> Key: SYNCOPE-1132
> URL: https://issues.apache.org/jira/browse/SYNCOPE-1132
> Project: Syncope
>  Issue Type: Bug
>Reporter: Colm O hEigeartaigh
>Priority: Trivial
> Fix For: 2.0.4, 2.1.0
>
> Attachments: syncope-dots.png
>
>
> There appears to be a regression with the latest 2.0.4 + 2.1.0 code (I 
> confirmed it is not present in 2.0.3) where extra "dots" are appearing in the 
> screen. I can reproduce by assigning a relationship to an AnyObject for 
> example in the console. See attached screenshot.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)


[jira] [Created] (SYNCOPE-1132) Extraneous "dots" appearing in the Console when assigning relationships

2017-06-27 Thread Colm O hEigeartaigh (JIRA)
Colm O hEigeartaigh created SYNCOPE-1132:


 Summary: Extraneous "dots" appearing in the Console when assigning 
relationships
 Key: SYNCOPE-1132
 URL: https://issues.apache.org/jira/browse/SYNCOPE-1132
 Project: Syncope
  Issue Type: Bug
Reporter: Colm O hEigeartaigh
Priority: Trivial
 Fix For: 2.0.4, 2.1.0
 Attachments: syncope-dots.png

There appears to be a regression with the latest 2.0.4 + 2.1.0 code (I 
confirmed it is not present in 2.0.3) where extra "dots" are appearing in the 
screen. I can reproduce by assigning a relationship to an AnyObject for example 
in the console. See attached screenshot.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)


AnyObjects appearing in the console realms after creation?

2017-06-27 Thread Colm O hEigeartaigh
Hi all,

Is it a known limitation of the console that after an AnyObject is defined,
it is not available to be seen in the realms? No matter where I click it
does not appear. I have to log out and log back in and then it appears.

Colm.


-- 
Colm O hEigeartaigh

Talend Community Coder
http://coders.talend.com