* stable: (30 commits)
Remove ansible-tower.repo during packer cleanup
Update package changelogs
Enable SE boolean httpd_execmem
Check that venv is activated before loading wsgi app (#3148)
also limit creation of system auditors to superusers
Make check for idle session more specific
Use foreman.id instead
flake8 fixups
fixing tests for new team role assignment restrictions
driveby cleanup
do not allow assignment of system roles or user.admin_role to teams
Add copyright back with utf-8 encoding
Complete Sat6 integration
Force requests to emit application/json
fix issue with rbac_migrations logger
Enable software collections repo on RHEL 6 + RHSM
Fixed credential migration issue involving null inventory fields in job templates
Allow instant cancel for new jobs
Show new jobs in UI Jobs tab
use existing logging infrastructure
...
* stable:
Update 3.0 changelogs
Spacing in sh script on merge conflict
Update setup for bundled ansible-2 dependencies
fix ansible2.0 bundle deps bootstrap
Use yum's compare_providers() function instead of just pulling the latest alphabetically.
* release_3.0.0: (22 commits)
remove aws ask at runtime prompt from cred form config, resolves#3055 (#3058)
fix missing URI encoding in event summary serch, kickback on #2980 (#3050)
Switch base class for StateConflict
Fixed password show/hide on enter for survey maker password type previews
Fixed password show/hide on enter for survey taker survey questions where type is password
Prevent populate_user from being registered multiple times.
Fixing iterator used when jobs list refreshes
Explicit super user check for JT can_delete
Fix for populating teams for LDAP user.
Update hubspot template for marketting
Fix up flake8
Rolled back the onExit solution previously implemented to handle the backspace navigation on the job launch modal. New solution listens for state changes within the directive and cleans itself up.
Switch disallowed object delete to 409
Password enter show/hide fix
add test for CustomInventoryScript serializer
Fixed bug where hitting enter in a password field in the job launch/survey maker modal would toggle the show/hide.
Setting the local var CredentialList to the deep clone seems to be problematic. Moving this out so that the original object itself is overwritten which is how it's done in other places. (#3017)
Jobs list page size (#3019)
resolves kickback on #2980 (#3008)
add read_role to organization select_related
...
* release_3.0.0: (2364 commits)
remove aws ask at runtime prompt from cred form config, resolves#3055 (#3058)
fix missing URI encoding in event summary serch, kickback on #2980 (#3050)
Switch base class for StateConflict
Fixed password show/hide on enter for survey maker password type previews
Fixed password show/hide on enter for survey taker survey questions where type is password
Prevent populate_user from being registered multiple times.
Fixing iterator used when jobs list refreshes
Explicit super user check for JT can_delete
Fix for populating teams for LDAP user.
Update hubspot template for marketting
Fix up flake8
Rolled back the onExit solution previously implemented to handle the backspace navigation on the job launch modal. New solution listens for state changes within the directive and cleans itself up.
Switch disallowed object delete to 409
Password enter show/hide fix
add test for CustomInventoryScript serializer
Fixed bug where hitting enter in a password field in the job launch/survey maker modal would toggle the show/hide.
Setting the local var CredentialList to the deep clone seems to be problematic. Moving this out so that the original object itself is overwritten which is how it's done in other places. (#3017)
Jobs list page size (#3019)
resolves kickback on #2980 (#3008)
Use the correct yum attribute name
...
* release_3.0.0: (129 commits)
Use the correct yum attribute name
Fix NaN / invalid end date value in schedule edit forms (#3007)
resolves kickback on #2976 (#3009)
Additional UI/JS licenses (#2974)
Install at when configuring on-book AMI conf
Added patch tests for updating project organizations
Make development environment use ATOMIC_REQUESTS
Team organization field made non-null
Don't let normal users create orgless projects
Fix up some flake8 issues
Add delete protection from certain objects
Cascade delete teams when their organization is deleted
Updated tests to reflect credential access after migrations
Changed conditonal to repair console error and page loade error
Remove socket binding when the scope is destroyed so that we don't make errant GET requests in future instances of this controller.
updated EULA text from rnalen
Fix team credential role access in rbac migration
Orphan handling in _old_access.py
Normalized CustomInventoryScriptAccess.can_admin
Use simplified epel-release links
...
This reverts the validation of a required Organization on the
Notification Template. After discussion with jlaska and jladd, I think
this can behave fine in this situation. It's more like a Credential
then where without an Organization the NT only becomes available to
Super Users and the creator of the NT.
or how I learned to stop worrying and use SIGKILL.
Ansible has a bug that could potentially leave tower's jobs hanging
around indefinitely requiring manual shell intervention. I'm going to
put this here and until Ansible can get to the bottom of it.
In some scenarios the activity stream associate could be invoked where
obj2 doesn't exist... the .get() will fail and tank the caller
preventing the save. This guards that and blocks the activity stream
event, saving the save (whew!)
* release_3.0.0: (638 commits)
Disallow deleting job templates when there are jobs running
M2M fix for project activity stream
flake8
Made it so org auditors can see all users if ORG_ADMINS_CAN_SEE_ALL_USERS is true
made lebel delete find all associated labels by recursively getting the labels
Fix up organization default exposed by unit test
Fix flake8 'not in'
remove unnecessary fixture from org_credential
fix label dropdown population on edit of JT
Allow anyone who can read an inventory to see adhoc command run against said inventory
Added role visibility tests
Typo
remove duplicate playbook variable
specify database on local restore
do not log postgres restore
add sudo true when sudoing to a user
ansible 1.9 support
filter_visible_roles performance enhancement
fix order_by parameter not being applied to page 2+ of list results (#2786)
Needed to bind removeSchedulesRefresh to the scope so that we could clear the listener properly
...
Previously a super user was required to create and administer custom
inventory scripts. Since these are tied to organizations this commit
extends orgadmin admininstration abilities to custom scripts within
their organization
admin roles on inv scripts can now see the actual script contents. Read
role doesn't convey that capability.
This should be pretty similar to before from a read_role
perspective... it now allows more folks to see the script contents
* release_3.0.0: (270 commits)
Inventory Manage > copy/move groups disable copy option where impossible, add to Root Group target, resolves#1749 (#2218)
fixes access issue for InventoryScript.admin_role
Make sure project team list is filtered for access
Fix up the project teams list
fix api test
fix tests with refreshes
adjusting Credential model and migrations
adjusting API for new Credential.organization
Fix Openstack inventory on Ubuntu 12 (#2318)
Attach labels instead of erroring on creation if label already exists
Fix system-tracking typo
update test_rbac_api to new object_roles naming
Fixing Credential access issue
Fix an issue calling build_env for system jobs
remove dead fields from Groups > Add manual source type, resovles #2288 (#2305)
fixes regression on license expiresOn display, resolves#2277 (#2287)
fix edit action in Jobs > Schedules tab view, resolves#2258 (#2292)
Fixed several bugs with adding permissions where checkboxes weren't checked properly or were disappearing when paging was involved.
specify playbook vars in a way that works with 1.9
Change ldap and other sso defaults to remove from team/admin
...
Previously the default was not to remove an sso user from a team or as
an admin if they were removed from the SSO service. This changes that
and updates some readme-type lines.
There's a condition in sub_list_create_api_view.md template that
controls whether or not the attach/detach documentation is shown for
sublist elements that support it. Looks like it's been this way for a
while. This updates that condition to work anywhere it's needed
Not a good idea to select the virtualenv in the base class. Force
selection to happen in the concrete classes by calling a helper method
to set up the proper virtualenv. This should fix any issues where
tower is selecting the wrong virtualenv to run against.
This adds a field to the user object to denote whether and what kind of
user account it is.
For normal accounts this field will be null.
For social auth accounts it will be "social"
for radius accounts it will be "radius"
This change also prevents a radius user from changing their local
password thus bypassing the password caching feature of django-radius
Passively creating notification templates on m2m endpoints was failing
serializer validation due to a bug trying to look up the related
object. In reality that check should only happen when the view is the
NotificationTemplateDetail view.
* release_2.4.5:
Update setup for bundled ansible-2 dependencies
fix ansible2.0 bundle deps bootstrap
Use yum's compare_providers() function instead of just pulling the latest alphabetically.
This causes some unexpected behavior when commas instead of colons are
used during the job template limit due to a bug in ansible. It has the
effect of expanding the number of hosts that it will run on instead of
just one which is what we are expecting
Matthew Jones