summary |
shortlog | log |
commit |
commitdiff |
review |
tree
first ⋅ prev ⋅ next
st782s [Wed, 3 Jan 2018 19:30:16 +0000 (14:30 -0500)]
Harden code
Issue-ID: PORTAL-145,PORTAL-119,PORTAL-118
Harden code to address SQL injecton, XSS vulnerabilities; Separate
docker images for portal, sdk app and DMaaPBC ui; Missing error page
Change-Id: I1818fbf86c601dd41b274729038e731fb2ec8f7d
Signed-off-by: st782s <statta@research.att.com>
st782s [Wed, 22 Nov 2017 16:41:10 +0000 (11:41 -0500)]
Harden code
Issue-ID: PORTAL-145,PORTAL-119
Harden code to address SQL injecton, XSS vulnerabilities; Separate
docker images for portal, sdk app and DMaaPBC ui
Change-Id: I85fad4d3fcee3243207b8f0dfe21beaa41602204
Signed-off-by: st782s <statta@research.att.com>
st782s [Mon, 6 Nov 2017 21:05:26 +0000 (16:05 -0500)]
Release new SDK Version
Issue: PORTAL-19, PORTAL-135
Includes SDK 2.1 release updates deprecating certain methods to address
vulnerabilities
Change-Id: Ibf105a0cf3c7d7e89eb05862c54aadfacf575d97
Signed-off-by: st782s <statta@research.att.com>
Christopher Lott (cl778h) [Fri, 27 Oct 2017 22:29:04 +0000 (18:29 -0400)]
Additional security fixes
Issue: PORTAL-135
Change-Id: I8574fbcd73d9a053e8a19d5a8e4219a4034b751e
Signed-off-by: Christopher Lott (cl778h) <clott@research.att.com>
Christopher Lott (cl778h) [Wed, 25 Oct 2017 13:55:06 +0000 (09:55 -0400)]
Repair security filters
Revise app web.xml to remove typo in Java package name.
Also drop unneeded test class.
Issue: PORTAL-135
Change-Id: I49662928c5eed38520e9a9c5f839385148aef0fa
Signed-off-by: Christopher Lott (cl778h) <clott@research.att.com>
Christopher Lott (cl778h) [Fri, 20 Oct 2017 12:22:19 +0000 (08:22 -0400)]
Role management; security vulnerabilities.
Extend user/role management interface to allow role deletion.
Add filters to defend against common web Javascript attacks.
Drop Greensock code with unusable license.
Use OParent in EPSDK web application.
Issue: US324470, US342324, PORTAL-127
Change-Id: I3a10744fbbbdbda7c88d2b2e542e72e779c9b142
Signed-off-by: Christopher Lott (cl778h) <clott@research.att.com>
Christopher Lott (cl778h) [Thu, 12 Oct 2017 20:42:03 +0000 (16:42 -0400)]
Switch to Mariadb connector.
Issue: PORTAL-104
Change-Id: I71651b5dbbbe397d91168d59dfbc37d4da5778ea
Signed-off-by: Christopher Lott (cl778h) <clott@research.att.com>
Christopher Lott (cl778h) [Wed, 4 Oct 2017 15:18:13 +0000 (11:18 -0400)]
Add missing POM property nexusproxy
Issue: PORTAL-53
Change-Id: I87d995c734e1ec101c560d6d3eff68335ed0afeb
Signed-off-by: Christopher Lott (cl778h) <clott@research.att.com>
Christopher Lott (cl778h) [Wed, 4 Oct 2017 12:22:43 +0000 (08:22 -0400)]
Repair redirect; correct javadoc site path
[PORTAL-53] Correct path for deployment of javadoc web site
[PORTAL-78] Prevent SDJ from redirecting multiples times during single signon
[St164634] Tone down the logging when communicating with the Partnering Applications
Add missing license headers; drop FusionLicenseImpl.
Issue: PORTAL-53 PORTAL-78
Change-Id: I3f8200d8e41754ade05e3f7b38d0db6bdd5e59e8
Signed-off-by: Christopher Lott (cl778h) <clott@research.att.com>
Christopher Lott (cl778h) [Mon, 25 Sep 2017 19:52:24 +0000 (15:52 -0400)]
Sonar Scans and Role Centralization; clean nl
PORTAL-21: centralized user role management
PORTAL-72: Address Sonar Scan code issues for ONAP - mostly on raptor
PORTAL-86: ONAP - Remove internal att.com usages from tests and otherfiles
PORTAL-90: Add debug statements to demo app's class; no functional change
Issue: PORTAL-21 PORTAL-72 PORTAL-86 PORTAL-90
Change-Id: I72a6c812009f51446330bf42bab6d3338d053805
Signed-off-by: Christopher Lott (cl778h) <clott@research.att.com>
Jessica Wagantall [Mon, 18 Sep 2017 22:58:10 +0000 (15:58 -0700)]
Cleanup project's name in Sonar
The name parameter in the root pom.xml should
match the project name in gerrit to reflect consistency
in Sonar.
Change-Id: I7c6830cd059f50803713719e77f3019ed40263db
Issue-id: CIMAN-65
Signed-off-by: Jessica Wagantall <jwagantall@linuxfoundation.org>
Christopher Lott (cl778h) [Thu, 7 Sep 2017 12:52:41 +0000 (08:52 -0400)]
Adjust code for Sonar issues
Made non-functional updates to address static code analysis issues.
Update license header with simple double-quote characters.
Issue: PORTAL-72, PORTAL-90
Change-Id: Ic2c330daea07d721f0e6b350ebf03da97073f7ce
Signed-off-by: Christopher Lott (cl778h) <clott@research.att.com>
Christopher Lott (cl778h) [Thu, 31 Aug 2017 20:16:02 +0000 (16:16 -0400)]
Correct distribution management site IDs.
Issue: PORTAL-90
Change-Id: I8fede5b562af873cc8fb246051117ea89d758598
Signed-off-by: Christopher Lott (cl778h) <clott@research.att.com>
Christopher Lott (cl778h) [Thu, 31 Aug 2017 19:16:38 +0000 (15:16 -0400)]
Rename packages to org.onap in 1.4.0-SNAPSHOT
19 - remove openecomp
72 - remediate Sonar scan issues
79 - removed unwanted left menu under Report
90 - apply approved license text
Issue: PORTAL-19, PORTAL-72, PORTAL-79, PORTAL-90
Change-Id: I41a0ef5fba623d2242574bd15f2d9fb8029a496c
Signed-off-by: Christopher Lott (cl778h) <clott@research.att.com>
Christopher Lott (cl778h) [Thu, 24 Aug 2017 15:35:49 +0000 (11:35 -0400)]
Clean files of internal company web site URLs.
Issue: PORTAL-86
Change-Id: I3f735ca981065af2f18dba1b07ec9d3b2cd243c5
Signed-off-by: Christopher Lott (cl778h) <clott@research.att.com>
Christopher Lott (cl778h) [Wed, 23 Aug 2017 19:46:44 +0000 (15:46 -0400)]
Repair role-centralization features in EPSDK
Issue: PORTAL-21
Change-Id: Icf276482609734d3aa24f04ae0a8135021a3d305
Signed-off-by: Christopher Lott (cl778h) <clott@research.att.com>
Christopher Lott (cl778h) [Fri, 18 Aug 2017 18:37:47 +0000 (14:37 -0400)]
Repair centralized-role feature.
Also show ONAP logo in EPSDK-app header top left.
Issue: PORTAL-21, PORTAL-81
Change-Id: I46953123219d4f7a239ca6c5a05890a3769ed2ea
Signed-off-by: Christopher Lott (cl778h) <clott@research.att.com>
st782s [Mon, 14 Aug 2017 15:41:04 +0000 (11:41 -0400)]
DDL updates and cleanup
- remove unused javascript libraries
- remove contentious icons and images
- Remove constraints to support Role Centralization
Issue: PORTAL-21, Portal-17
Change-Id: I347accb04343d1c866c075ee716c46fea9e0d036
Signed-off-by: st782s <statta@research.att.com>
Christopher Lott (cl778h) [Tue, 8 Aug 2017 20:52:35 +0000 (16:52 -0400)]
Revise open-source login strategy impl
- Get required decryption key from system.properties, not portal.properties
- Add icon mapping for ION icons
- Add license header on a few fiels
Issue: PORTAL-64
Change-Id: I0da14178a331c3926bc4c51425f8d9a6877685bc
Signed-off-by: Christopher Lott (cl778h) <clott@research.att.com>
Christopher Lott (cl778h) [Mon, 7 Aug 2017 21:18:51 +0000 (17:18 -0400)]
Repair logback.xml config for impl prefix
Prefix com.att must be used to match EELF implementation packages
which use com.att.*
Change-Id: Ieea6a5b48fbcf0529c980d25442194fbe8eca0cb
Signed-off-by: Christopher Lott (cl778h) <clott@research.att.com>
Christopher Lott (cl778h) [Mon, 7 Aug 2017 18:35:55 +0000 (14:35 -0400)]
Correct user/role REST API password
Value in the database must be encrypted.
The DML file had a clear-text value.
Change-Id: Ia9b3070740c82a6608562e81464ba4362d4c2b42
Signed-off-by: Christopher Lott (cl778h) <clott@research.att.com>
Christopher Lott (cl778h) [Mon, 7 Aug 2017 15:42:04 +0000 (11:42 -0400)]
Remove icons; revise role centralization.
Some icons & images are being removed due to restricted use.
Made enhancements to the Role centralization code to allow multiple urls for one function code.
This replaces the previous commit by Sunder Tattavarada.
Issue: PORTAL-17, PORTAL-21
Change-Id: I1d9dc4f1ae20aeb26af00bb0d6384cca926f2115
Signed-off-by: Christopher Lott (cl778h) <clott@research.att.com>
st782s [Thu, 27 Jul 2017 13:57:46 +0000 (09:57 -0400)]
Role centralization
Adding functionality to account for global roles across all applications
which will be added at portal level
Issue: [PORTAL-21]
Change-Id: I4cdee652aaaa124abddb63410e1e45257b5bb6e0
Signed-off-by: st782s <statta@research.att.com>
Christopher Lott (cl778h) [Fri, 21 Jul 2017 13:39:26 +0000 (09:39 -0400)]
Rename maven group ID to org.onap.portal.sdk
Libraries previously used group ID org.openecomp.ecompsdkos.
Also adds properties to an app property file to patch around a code problem.
Issue: PORTAL-19
Change-Id: Ic2f62b1127ad3d66e24448fdb9760d0c3d023bd0
Signed-off-by: Christopher Lott (cl778h) <clott@research.att.com>
Christopher Lott (cl778h) [Wed, 19 Jul 2017 20:35:41 +0000 (16:35 -0400)]
Add properties required by core controllers.
These properties were expunged for 1610 but reappeared
during the 1702 code rebasing. Code will be cleaned;
restoring the properties as a stopgap fix.
Issue: Portal-34
Change-Id: If39d82e7c44bd7beedad7ae3ed5a6e9a9dfa00e1
Signed-off-by: Christopher Lott (cl778h) <clott@research.att.com>
st782s [Fri, 14 Jul 2017 18:19:22 +0000 (14:19 -0400)]
[Portal 21] Role management
This push includes continuation of the changes required to handle
cetralized roles,user management
Change-Id: I38e9dc946ff53ac61dd3b580c335f4ad52b372f7
Signed-off-by: st782s <statta@research.att.com>
Christopher Lott (cl778h) [Wed, 12 Jul 2017 23:25:41 +0000 (19:25 -0400)]
Revert to org.openecomp.ecompsdkos libraries
The LF is awaiting TSC approval to rename repository from
ecompsdkos to portal.sdk, and that blocks deployment of libraries
with Maven group id org.onap.portal.sdk. Until that is approved,
revert to using Maven group id org.openecomp.ecompsdkos
Change-Id: I9e03b9f71562393493ce9eea41e2a6a4df921c99
Signed-off-by: Christopher Lott (cl778h) <clott@research.att.com>
Christopher Lott (cl778h) [Wed, 12 Jul 2017 19:14:57 +0000 (15:14 -0400)]
Drop version number suffix from sdk-app war.
A partial step in repairing the portal deployment process.
Change-Id: I01afa08a5bfbb49013327f9b2f20358b81fee7f7
Signed-off-by: Christopher Lott (cl778h) <clott@research.att.com>
Christopher Lott (cl778h) [Fri, 7 Jul 2017 19:36:15 +0000 (15:36 -0400)]
[PORTAL-19] Rename maven groupId to org.onap
Release 1.3.0 of EP SDK uses org.onap.portal.sdk
Change-Id: I5cf8e9d4382ab474267063937c53c375bd250b2d
Signed-off-by: Christopher Lott (cl778h) <clott@research.att.com>
Christopher Lott (cl778h) [Fri, 7 Jul 2017 11:21:10 +0000 (07:21 -0400)]
[PORTAL-25] Role Centralization
Bump EP SDK version to 1.3.0-SNAPSHOT
Support Role Centralization & Common Set of Roles across All ONAP On-Boarded Applications
Change-Id: Icfc1bbfddaf2c7c7176b4cf7bb7017d853c63100
Signed-off-by: Christopher Lott (cl778h) <clott@research.att.com>
Christopher Lott (cl778h) [Wed, 28 Jun 2017 19:07:52 +0000 (15:07 -0400)]
[PORTAL-23] Update EPSDK version to Release 1.1.0
from SNAPSHOT
Change-Id: I2cd51f965fc081bbb0389c33832b22231831b963
Signed-off-by: Christopher Lott (cl778h) <clott@research.att.com>
Christopher Lott (cl778h) [Mon, 19 Jun 2017 13:53:49 +0000 (09:53 -0400)]
[PORTAL-15] Repair RAPTOR and role defects.
Change-Id: I1fd4049f1253801021f97ef7bcb3ffb11d8b8c76
Signed-off-by: Christopher Lott (cl778h) <clott@research.att.com>
Christopher Lott (cl778h) [Tue, 13 Jun 2017 19:44:09 +0000 (15:44 -0400)]
[PORTAL-18] Drop LF staging repositories.
Add skip-deploy configuration to epsdk-app-os.
Change-Id: I3825b3d57d187c495f78dbc0f19ba0062bbd32f4
Signed-off-by: Christopher Lott (cl778h) <clott@research.att.com>
Christopher Lott (cl778h) [Tue, 13 Jun 2017 18:33:51 +0000 (14:33 -0400)]
[PORTAL-15] RAPTOR reporting fixes
Also repairs a bug in the user-management overlay screen.
Ticket number all caps this time.
Restore epsdk-app-os pom -SNAPSHOT suffix
Change-Id: I7ef620c4ebc52259bcf474908bc4810dfd7e41e7
Signed-off-by: Christopher Lott (cl778h) <clott@research.att.com>
st782s [Wed, 7 Jun 2017 14:43:46 +0000 (10:43 -0400)]
[Portal 15] Also includes Portal 8
This enhancement included changes pertaining to the the charting and
search functions of Ecomp SDK Analytics and inclusion of os module in
root POM
Change-Id: I4a2db5588a311a1098ee67c7d352299afb7679a0
Signed-off-by: st782s <statta@research.att.com>
st782s [Thu, 1 Jun 2017 21:32:04 +0000 (17:32 -0400)]
[PORTAL-13] Also [PORTAL-6]
The fixes include adding additional connection parameters to the
datasource class and adding licensing text at the root level
Change-Id: Ib37739f1c3eb9253363bb1546679936007be6cbc
Signed-off-by: st782s <statta@research.att.com>
st782s [Wed, 24 May 2017 14:20:53 +0000 (10:20 -0400)]
[PORTAL-10] Enhancing Drill Down
Changes have been made to improve the stability of Drill down
capabilities.
Change-Id: I6d4831b69f19f9b33cf43b65acc6dd7c5deebb67
Signed-off-by: st782s <statta@research.att.com>
Christopher Lott (cl778h) [Thu, 11 May 2017 13:38:56 +0000 (09:38 -0400)]
[PORTAL-7] Features and repairs from 1707
This merges latest changes made to Raptor and other features.
Change-Id: I3a58f88e988ddadf52e1c0c782cdccd2b2ecf5e9
Signed-off-by: Christopher Lott (cl778h) <clott@research.att.com>
TATTAVARADA [Thu, 27 Apr 2017 11:53:18 +0000 (07:53 -0400)]
[PORTAL-7] Rebase
This rebasing includes common libraries and common overlays projects
abstraction of components
Change-Id: Ia1efa4deacdc5701e6205104ac021a6c80ed60ba
Signed-off-by: st782s <statta@research.att.com>
Manoop Talasila [Wed, 19 Apr 2017 20:25:25 +0000 (16:25 -0400)]
[PORTAL-7] code rebase
Change-Id: I2c9a6720f773335275b5c04607e5615c1f645670
Signed-off-by: Manoop Talasila <talasila@research.att.com>
Manoop Talasila [Tue, 4 Apr 2017 19:38:06 +0000 (15:38 -0400)]
javadocs site added
Change-Id: Ia5d2451e994a3e870cdf2f151bfce8be070f7b82
Signed-off-by: Manoop Talasila <talasila@research.att.com>
Daniel Rose [Fri, 31 Mar 2017 14:31:40 +0000 (14:31 +0000)]
Merge "Point Nexus proxy to new URL"
Andrew Grimberg [Wed, 29 Mar 2017 17:37:43 +0000 (10:37 -0700)]
Point Nexus proxy to new URL
The nexus.openecomp.org domain has been deprecated for nexus.onap.org
Change-Id: I74d65e254f5d3d0aafb4307a20192a1546ec63ce
Signed-off-by: Andrew Grimberg <agrimberg@linuxfoundation.org>
Andrew Grimberg [Wed, 29 Mar 2017 15:19:43 +0000 (08:19 -0700)]
Update .gitreview with onap URL
Change-Id: I3c3e490e56cd19066a2de0c98126e6c147f0795e
Signed-off-by: Andrew Grimberg <agrimberg@linuxfoundation.org>
talasila [Fri, 24 Mar 2017 14:31:59 +0000 (10:31 -0400)]
staging repo added
Change-Id: If6b8c8471a065071db16e92b23b661c08318e3d4
Signed-off-by: talasila <talasila@research.att.com>
talasila [Wed, 22 Mar 2017 21:00:16 +0000 (17:00 -0400)]
gitignore added
Change-Id: I4c7297282fb2e30fe6b83f1f4997325f6f48bcda
Signed-off-by: talasila <talasila@research.att.com>
talasila [Fri, 10 Mar 2017 16:28:52 +0000 (11:28 -0500)]
1.1.0-SNAPSHOT is updated in poms
Change-Id: I421ba5299aa0b9f2ae470d2e030f3a8b3219d539
Signed-off-by: talasila <talasila@research.att.com>
talasila [Tue, 7 Mar 2017 21:40:38 +0000 (16:40 -0500)]
staging release 1.0.0
Change-Id: I57a66486f2dddba807b3df6083ce4ffcf0ff7e52
Signed-off-by: talasila <talasila@research.att.com>
talasila [Tue, 7 Mar 2017 19:37:39 +0000 (14:37 -0500)]
snapshot release and added staging plugin
Change-Id: Ia2b704f400c9bc5cfdc56791e0d9239e254b426a
Signed-off-by: talasila <talasila@research.att.com>
talasila [Fri, 17 Feb 2017 16:44:35 +0000 (11:44 -0500)]
fixed nexus url
Change-Id: I2c29bebbf426cc4c37e93f4cb9ef191533acb5b8
Signed-off-by: talasila <talasila@research.att.com>
talasila [Sat, 11 Feb 2017 02:56:39 +0000 (21:56 -0500)]
sdk v1.0.0 release
Change-Id: Ic9c1a7cb67284bf8fa1001eaa6b7d35b0f621f56
Signed-off-by: talasila <talasila@research.att.com>
talasila [Sat, 11 Feb 2017 02:52:07 +0000 (21:52 -0500)]
sdk release v1.0.0
Change-Id: Ief598c3c390fd1e97d714bc813cd506517cfc428
Signed-off-by: talasila <talasila@research.att.com>
talasila [Fri, 10 Feb 2017 21:34:12 +0000 (16:34 -0500)]
updated poms to SNAPSHOT
Change-Id: Iff637e1390638112f73d4d367ac7e4cb028f8fde
Signed-off-by: talasila <talasila@research.att.com>
talasila [Fri, 10 Feb 2017 20:35:43 +0000 (15:35 -0500)]
removed blackduck plugin
Change-Id: I5f71c7066937b4a4bdb1fd3385df00bb7e811de3
Signed-off-by: talasila <talasila@research.att.com>
talasila [Fri, 10 Feb 2017 20:00:57 +0000 (15:00 -0500)]
version number corrected
Change-Id: I48c832882ad771f5aa816af1bdfc360da68598af
Signed-off-by: talasila <talasila@research.att.com>
talasila [Thu, 9 Feb 2017 20:44:45 +0000 (15:44 -0500)]
Nexus repo URL update in ecompsdkos pom
Change-Id: Id2fa226655eb0daa626ba2210a645cae77a099e9
Signed-off-by: talasila <talasila@research.att.com>
talasila [Tue, 7 Feb 2017 20:09:58 +0000 (15:09 -0500)]
LICENSE.txt added
Change-Id: I21732cb23d48838227ee9f6474c9d2221f63fb57
Signed-off-by: talasila <talasila@research.att.com>
talasila [Tue, 7 Feb 2017 16:47:55 +0000 (11:47 -0500)]
Initial OpenECOMP Portal SDK commit
Change-Id: I66a3491600a4b9ea241128dc29267eed6a78ed76
Signed-off-by: talasila <talasila@research.att.com>
Andrew Grimberg [Fri, 3 Feb 2017 21:06:09 +0000 (21:06 +0000)]
Initial empty repository
Code Review / portal / sdk.git / log