CESNET/perun: Release 3.6.0

Published June 11, 2019 | Version v3.6.0

Software Open

Changelog (since 3.5.0) CORE

Added new configuration options for HikariCP in jdbc.properties.
SMTP configuration was moved and joined from notifications module and registrar module into core (perun.properties).
Added AuditEvent about user becoming perun admin.
Check also large attributes previous value before performing update to prevent unnecessary checks and hooks when value doesn't really changed.
Allow specifying mail notification templates for preferred mail change and password reset in entityless attribtues (per namespace/language).
Extended Group object definition in CLI.
Fixed regex applied to elixirScopedAffiliations.
Autocreate required namespaced attributes, supported namespaces can be specified in perun.properties.
Added module for user:virt:eduPersonEntitlement which will gather eduPersonEntitlements from all users identities.
Resolve user:virt:loa attribute changes when UserExtSource is updated so that LDAP is updated correctly.
Removed duplicates in result of getGroupsMembersExcept*().

LDAPc

Both old and new LDAP connectors now remove members from the group, if their group status in perun is not active. Behavior for vo status didn't change.
Fixed handling DN of group names in new LDAPc.
New LDAPc will now push only valid member on re-initialization.
Added "loa" and "isCesnetEligible" attributes to the LDAP. LDAP schema must be updated before deploying this version!

GUI

Do not load jQuery anonymously in GUI to prevent bug in Safari browser blocking it.
Fix displaying wether group is authoritative for member synchronization.
Inner tabs cross button (top-right corner), will perform same default action as do Close and Done buttons do. Eg. refresh underlaying tab after members were added to group.
Fixed adding group member in GUI when user was already indirect member.

API

Added method to getSponsoredRichMembers() with attributes.
Extended getData() like methods which will automatically exclude expired members from the returned groups.
Added API methods get(Rich)GroupsWhereUserIsActive(), which returns users groups filtered by facility or resource they are assigned to and also where member is in VALID state for both VO and Group.
Added new method getRichGroupsAssignedToResourceWithAttributesByNames() with possibility to specify member and attrNames for member-group attributes.
Added possibility to specify entity ID for methods like is[Entity]Admin().

OTHER

Error reports from GUI can be directly send to mail address instead of RequestTracking system.
Perun gathers also entitlement and assurance attributes from IDPs.
Module for attribute user:virt:userOrganizations with mapping of VO names to user organizations (specified by member attribute).
Fixed RPC docs for sendPasswordResetLink.
Prevent possible duplicates in getAllowedUsers() when user was assigned through multiple resources.
Changed login namespace for lifescience-hostel registrations to BBMRI namespace.
Added CABINETADMIN role for publication management.

Files

Name	Size	Download all
CESNET/perun-v3.6.0.zip md5:9edeefbd1e3dfa2c8d200ce5a394817c	13.2 MB	Preview Download