Changelog: 9.1.4 - current

Release 9.1.20

1. bug-fix: After renaming a component the correct component will be selected now.
2. enhancement: API enhancement: The Content facade objects can now be used for template resources as well as content resources. The old constructors remain supported and default to content mode.
3. enhancement: Replaced the editor for date components with an improved calendar based one.

Release 9.1.19

1. bug-fix: Corrected the handling of createUser SQL statement in DBUserGroup.
2. bug-fix: Updated range of years in the date editor.
3. bug-fix: When running under the Java security manager, the retrieval of database connections now works more reliable when component manager methods are called by low-privileged packages.

Release 9.1.18

1. bug-fix: Added a workaround for a bug in the current Oracle 10 driver, which sometimes cut off a few bytes from the end of binaries during package import. This has no effect on users of other databases.
2. bug-fix: Using DBRoleGroup no longer throws an error when using the new init parameters.
3. enhancement: Added LastModifiedComponents action which delivers last modified components on the server.

Release 9.1.17

1. bug-fix: Updated client signature certificate.
2. bug-fix: Lock handling made stricter to prevent a bug where context changes would end up without shared locks. Private lock creation is now blocked if shared locks from different contexts would be involved.
3. bug-fix: Made the client ignore and log invalid type names (e.g. ones with double periods like "testpackage..testtype") instead of hanging on login.
4. enhancement: Added new optional initial parameters to DBRoleGroup and DBUserGroup to be more flexible. If you want to use these parameters, you have to add them in your project.xml configuration file.
5. bug-fix: Changed the behaviour of the "session expired" error mechanism. First, this means that specifying single pages (as opposed to folders) in public tags now works properly. Also, "component not found" errors (usually handled as HTTP error code 404) have priority over session expiry errors.
6. bug-fix: When using Java 6, the component name field in the "New Component" dialog did not have the focus by default, as it does when using Java 5. This has been changed, so that the field is now focused for both Java releases.

Release 9.1.16

1. bug-fix: Fixed a bug in RemoteTransformer that causes a broken finix render tag when inserting components by drag-and-drop.
2. bug-fix: Fixed a potential concurrency issue with the QueryResultSorter, if it was used with multiple locales at the same time.
3. enhancement: Enhanced syntax highlighting in RemoteTransformer.
4. enhancement: The internal transaction handling system has been extended to allow its use with multiple datasources. This allows developers to tie their own database logic to the Contelligent transaction, even if no external UserTransaction implementation exists.
5. enhancement: A simple request counter has been added to the Server Management module.
6. bug-fix: Fixed a bug that caused temporary hourglass components to remain if the "move relations" path list was closed or replaced by a different list.

Release 9.1.15

1. enhancement: Text editors now allow searching when not in edit mode.
2. bug-fix: Fixed QueryResultSorter not working properly on Date components with timeFormat set to "hide".
3. bug-fix: RemoteTransformer now supports mode=path, mode=ref and related parameters.
4. enhancement: The category wizard now always displays the original category name in addition to the localized category title.
5. bug-fix: Highlighting changes (for XSL and Tcl) no longer cause extra undo steps to be created. All changes related to highlighting are merged into a single undo step with the original change.

Release 9.1.14

1. bug-fix: Fixed a problem that could sometimes cause component moves to shorter paths to fail due to some relations not being detected for update.
2. bug-fix: Fixed the problem that user bookmarks were deleted, when changing the properties of a bookmarkFolder or bookmark.
3. enhancement: Added the 'setNamedUser' method to the Session interface in the public API. Note that users passed to this method must already be authenticated.

Release 9.1.13

1. enhancement: Added basic SOAP request functionality to the HTTPRenderer. If the new property 'soapAction' is set to a non-empty value, the HTTPRenderer renders its subcomponent 'soapContent' and sends this as the request. The 'SOAPAction' header is also set to the value specified in the property.
2. enhancement: Added system property "contelligent.client.jre" to overwrite the JRE version used in the Webstart descriptor for the Client.
3. enhancement: Improved quality of log output. Some less interesting messages were moved from INFO to DEBUG and other have been made more useful by adding information like the component path in question.

Release 9.1.12

1. enhancement: Acquisition of database connections is no longer synchronized, which should improve performance in high load situations. When using a datasource which is not threadsafe, you can force the old behaviour by setting the "contelligent.datasourceNotThreadsafe" option to true.
2. bug-fix: Fixed a case where a relation with target path '...aaa/bbb/ccc' was also shown for a component '...aaa_bbb/ccc' when trying to move this second component.
3. bug-fix: Fixed a few instances where the Java platform encoding was used instead of the configured Contelligent encoding. This might result in different string hashes compared to the previous releases.

Release 9.1.11

1. bug-fix: Loading of bookmarks should now be much faster.
2. enhancement: On shutdown, the server now persists the list of components still to be added to the system index. The indexing then resumes once the server is restarted.
3. enhancement: BrowserRedirector has a new property "readSubcomponent". If this property is true then a subcomponent "url" will be rendered to retrieve the full target URL. With the property set to false, the component defaults to the previous behaviour.
4. bug-fix: Creating a new context in the client will no longer cause a warning about missing components in the server log file.
5. bug-fix: Fixed the path combo box in the client breaking when the user switches to another context.
6. bug-fix: Deleting a blueprint will now raise an error message on failure.
7. enhancement: If the 'url'-property of a HTTPRenderer is left blank, it will now try to resolve a subcomponent also named 'url'. If such a component exists, it is rendered and the render result is then used as the URL to be requested. This can be used to dynamically generate URLs for retrieval of data from external sources. Please note that if you use this feature, your script will have to carefully filter input parameters to prevent cross-site-scripting (XSS) attacks.
8. bug-fix: Improved error message when setting invalid property values.

Release 9.1.10

1. bug-fix: Fixed the rollback button in the PropertyEditor sometimes not resetting all displayed values to the last saved values.
2. enhancement: SimpleQuery now returns its query results in the order of the folder the query was used on. For instance, for a SortedFolder, the query results will be in the manually sorted order of the components.
3. bug-fix: Fixed a problem where the SimpleQuery would not invalidate its cache when a change event was generated for the query base folder instead of a subcomponent.
4. enhancement: Added a "namespacePrefix" property to the MenuComposer. If this is for example set to "test-" then the MenuComposer would no longer use the "createMenuEntry" subcomponent, but "test-createMenuEntry". Same for all other per-page subcomponents. ("menuTitle" etc.)
5. enhancement: Added a new element "small-binary-threshold" to the main.xml. This allows you to set the size in bytes above which binary components will no longer be stored in the component cache, but instead streamed from the database each time they are requested. Unless set, the value defaults to 102400, which was the fixed value in previous releases.
6. bug-fix: Made the "followLinks" property of QueryResultEntry work even if the base component of the query result is a link. Previously, it only supported the specified subcomponent being a link.
7. enhancement: Added properties "forceProtocol" and "forceHttpAuth" to the BrowserRedirector. These work the same way as the render parameters with the same names provided by Pages, Binaries, Actions etc.
8. enhancement: Bookmarks functionality enhanced: Bookmarks can be organized in directories now.
9. enhancement: QueryResultFilter now supports the filter values "write", "delete" and "execute" which function analogous to "read".
10. bug-fix: After a change event for user data, the client no longer reloads all the principal groups, but only those that have actually changed.
11. bug-fix: Fixed a problem that caused preview URLs to contain a double slash at one point.
12. bug-fix: Fixed a problem in the configuration parser which caused the sso-servlet-mapping directive in main.xml to be ignored.
13. bug-fix: Fixed a problem where an Action did not allow its parameter folder to be a Link.
14. enhancement: Added a new privilege "Transfer components between views", which allows the user to cut/copy/paste components between different enviroments. Note that this enables the user to bypass a list of restricted types for a specific environment.

Release 9.1.9

1. enhancement: Doubleclicking a component inside a FolderGUI now completely navigates to that location, including opening it in the component tree.
2. enhancement: New client functionality added: A User now can create bookmarks of component paths for faster access to components.
3. enhancement: New action added: CreateUserContentAction creates content below user home folder. Parameters are: VALUE - the (textual) value to be stored in a component; RELATIVEPATH - the name of/path to the component below user home in which the value will be stored.
4. bug-fix: Fixed a small client problem that caused the tree focus to be lost on component selection.
5. enhancement: Security enhancement: From now, only those principals obtained through the ContelligentSecurityManager authentication methods can be bound to a session object. Related to this, new runtime permissions "getLoginToken" and "validateAuthentication" have been added. Neither should be usually have to be granted to non-core code, unless that code is intended to replace internal login mechanisms.
6. enhancement: Added new functionality for QueryResultFilter. It is now possible to filter Resultentrys by regular expressions of Perl type syntax. One has to provide the information in the property "filter" in this Pattern: "regexp":ResultEntryName:regexp. Where ResultEntryName is the name of the Resultentry to filter and regexp is the regular Expression (e.g. ^A.* )
7. bug-fix: Fixed the display problem that newly created roles were not shown with their full name in the user module until a reload.
8. bug-fix: Fixed a problem where the "Edit all users and roles" privilege did not enable the "New role" button in the client for all role groups.
9. bug-fix: Generated links to components should now include the request scheme ('http' or 'https') that was used to request the page, instead of always defaulting to 'http'.
10. enhancement: In addition to the 'secure' flag set by the servlet container, Contelligent now also considers a request secure if the request scheme is 'https'.

Release 9.1.8

1. enhancement: Client signature certificate updated with expiration at June 10th 2008.
2. bug-fix: Disabling the relations check through the startup parameter now automatically includes using the weak import mode for packages.
3. enhancement: CreateContentAction can now handle html form input paramters which represent an element of an xml data structure. Parameternames which contain an '#' will be interpreted as such an element. For example, providing the parameters "userdata#address/street/name" and "userdata#address/street/housenumber" will lead to an XML tree with elements "address/street/name" and "address/street/housenumber" which will be persisted in a component named "userdata" (as usual, the component must already exist for this).
4. bug-fix: Fixed a bug that caused package uninstallation to fail if the package used the class preloading feature.
5. enhancement: Added a new configurable privilege "Preview as any role" which allows using preview even with roles that the caller does not himself has, as well as with roles marked as security critical. Please consider all security implications before granting this privilege to a user.

Release 9.1.7

1. enhancement: Added the Description GUI, which simply displays the type description in a GUI tab for each component.
2. bug-fix: Got rid of an unnecessary reload in the client resulting in a small performance improvement.
3. enhancement: Made the Server Management and Privileges modules available in the bootstrap configuration.
4. bug-fix: Fixed the "add component" menu item (and some others) being disabled when the root component is selected.
5. enhancement: Metadata values can now be selected through QueryResultEntry. To do so, specify a key in the format '[path]#metadata#[metadatakey]'. For example to retrieve the metadata value 'header:Cache-Control' of the result base component, set the key property of the QueryResultEntry component to '.#metadata#header:Cache-Control'. If multiple metadata values for this key exist, they are returned in comma separated format.
6. enhancement: The QueryResultEntry has gained a new property 'defaultResult'. This is the result used when the selected key is undefined.
7. enhancement: The BaseURL component now has an additional render parameter to choose between using and not using a trailing slash.

Release 9.1.6

1. bug-fix: Fixed a problem that could sometimes cause queries in contexts to include components already deleted in the context.
2. enhancement: The internal name of the builtin system principal has changed, "system-users:system" was changed to "_contelligent_:system". The principal "_nobody_:nobody" for the guest user remains as is.
3. enhancement: A principal "_contelligent_:index" has been added for use by the search indexer. This builtin user has READ access everywhere but no other permissions.
4. bug-fix: Fixed a problem where the initial import after installation would fail when using Java 6. Note that Java 6 is still not officially supported for production use; please use Java 5 for that.
5. enhancement: Added support for full boolean expressions to the RoleDependentRenderer. To enable this, set the new property "advancedMode" to true. Then you can use expressions like "system-users:test OR (system-roles:user AND NOT system-roles:admin)" in the roles property. As shown here, this also allows directly specifying users instead of just roles.
6. bug-fix: Fixed a display problem where multi-copy of components into a SortedFolder would not remove progress indicators (hourglass) when done.
7. bug-fix: Fixed a concurrency bug in the client. When processing change events from the server, this could result in corruption of the displayed component tree.
8. bug-fix: The client now places added, copied and moved components at the proper position in the component list, instead of the end.
9. bug-fix: Fixed a bug in the client that could cause the component paging buttons to appear even in small folders if a component was added.

Release 9.1.5

1. enhancement: Added a breadcrumb bar navigation element to the component view of the client.
2. bug-fix: Fixed a problem where the MoveSortedContentAction did not check the additional environment security configuration, so users were able to reorder components at any location where they simply had write permission.
3. bug-fix: The event dispatcher is now resistant to event listeners that throw runtime exceptions.