web-security.xml

Clone Tools
  • last updated a few seconds ago
Constraints
Constraints: committers
 
Constraints: files
Constraints: dates
LDEV-3315: Clean up roles and paths to secured resources in all modules. Remove AUTHOR ADMIN role.

  1. … 72 more files in changeset.
LDEV-3315: Remove AUTHOR ADMIN role. Allow AUTHOR role to preview lessons. Allow MONITOR role to edit activities and run Live Edit.

  1. … 72 more files in changeset.
LDEV-3315: Clean up roles and paths to secured resources in all modules.

  1. … 38 more files in changeset.
LDEV-2905 Integrated lams_signup to LAMS core

  1. … 29 more files in changeset.
CNG-4: Move Struts and security control from Central to now standalone Mindapp project.

  1. … 2 more files in changeset.
CNG-1: Change Action extension from ".mindapp" to basic ".do". Calls to MindappAction are recognised by path, not extension, and workaround for security check was done by altering Central web-security.xml file (LAMS Mindapp has own security mechanism based on OpenID).

Change deployment descriptors so there are different application names for Dev and Pres server.

Fix some other bugs.

  1. … 2 more files in changeset.
LDEV-2110: Adding 2.4 jps

LDEV-2548 Ability for a course manager to see *all* lessons...

*merge from lams2_3_release

  1. … 1 more file in changeset.
LDEV-2577 The new CKEditor does not have Java Integration library (yet). We have been using it to: a) get the tag library to create our own tag <lams:FCKeditor> But the new CKEditor uses AJAX to get the contents, so the library is not needed anymore. The references to it has been deleted from every tool. FCKEditor.tag has been rewritten to use the new syntax. b) get a FCKEditor internal file manager by a Connector from the jar The new CKEditor does not provide a file manager - the license became commercial and the whole thing became a separate project, CKFinder. There were alternatives suggested on the web: jasfinder - http://sourceforge.net/projects/jasfinder/support kcfinder - http://kcfinder.sunhater.com/ some other - http://www.miguelmanchego.com/2009/gestor-de-archivos-ckeditor/ but we have already nicely integrated with the old file manager. This page: http://jacek-kromski.jogger.pl/2009/09/25/integracja-ckeditor-z-przegladarka-plikow-z-fckeditor/ in polish says how to use the file manager from the old FCKEditor. The steps that have to be done: - download the new CKEditor - download the old FCKEditor - copy the filemanager to ckeditor directory - in the file browser/default/frmresourceslist.html, line 92 (with SetUrl call) needs to be replaced to: window.top.opener.CKEDITOR.tools.callFunction( window.top.document.CKEditorFuncNum, fileUrl, '' ); - in the file browser/default/browser.html add in line 80: document.CKEditorFuncNum = GetUrlParam( 'CKEditorFuncNum');

FCKeditor has been used in version 2.6.6, the last one before switching to CKEditor project.

Changes required to use newer version of Java Integration library

for FCKEditor so it was upgraded to the latest (for FCKEditor, because one for CKEditor does not exist) version 2.6.

This also required the Prototype to be upgraded to the latest 1.6.1.

The CKEditor code also needed to be changed, so if another upgrade to a newer version occurs, we need to remember to repeat these steps:

http://cksource.com/forums/viewtopic.php?f=5&t=15750

It says:

/ckeditor/plugins/link/dialogs/link.js

Changes

label:a.lang.common.target,'default':'notSet' --> label:a.lang.common.target,'default':'_blank'

label:a.lang.link.targetFrameName,'default':'' --> label:a.lang.link.targetFrameName,'default':'_blank'

It is also worth mentioning that if you include the ckeditor.js file twice in the same page, sometimes it causes trouble, thus detection in the CKEditor.tag files.

  1. … 1096 more files in changeset.
Merge lams2_3 to head (including things not merged last time due to eclipse's merge wizard not handling the lams2_3 start point as expected)

  1. … 167 more files in changeset.
Added pedagogical_planner folder to secure content

LDEV-2110

Added findUserLessons.jsp and findUserLessonsAutocomplete.jsp to secure content

LDEV-2110

LDEV-1907 Show a plus sign "+" in the activity if it contains more than 10 learners

LDEV-1469 Progress Bar - rotate green triangles

LDEV-1929 Implement presence in learner (Flash and non-flash)

= TODO:

+ must refactor to use xmpp service to create users with admin account

+ fix IE to catch flashvars sent from javascript

+ find workaround to not commenting out sasl in jsjac lib

LDEV-1783 Improve the error message when a user tries to select an activity inside an optional activity/sequence via the progress bar

  1. … 33 more files in changeset.
LDEV-273 Password Reset

xdoclet changes for the forgot password tast

Changes to the web-security.xml for lams-central mean that every new secure jsp must be added to the sevcurity provisions instaedof having the *.jsp provision.

  1. … 1 more file in changeset.
LDEV-1245 allow learners to access content repository download servlet

updating security-roles in web.xmls with change from 'course' to 'group' admin/manager

  1. … 2 more files in changeset.
added author admin security role

added *.do to protected resources

updated security defin

  1. … 1 more file in changeset.
Renamed security-role STAFF to MONITOR

  1. … 14 more files in changeset.
fix problems of role definitions

LDEV-75: Tweaked the Flash crash dump - must be logged in to do a dump and the file now has a .xml extension.

  1. … 4 more files in changeset.
Add security and fix bug in SharedSession

  1. … 2 more files in changeset.
Move login/index stuff from Lams_common

  1. … 4 more files in changeset.
Move login/index stuff from Lams_common

  1. … 43 more files in changeset.