uPortal 5.0.3
This is another patch release (maintenance update) for uPortal 5.0. It includes a handful of fixes & improvements.
Update Notes
New BROWSE Permissions
To fix a bug where unpublished portlets (Expired, Approved, etc.) were visible to users in the Customize Drawer & search ui, three new activities (permissions) were added to the UP_PORTLET_SUBSCRIBE
permission owner.
These are the ones:
<activity>
<name>Browse Approved</name>
<fname>BROWSE_APPROVED</fname>
<desc>Browse uPortal content that is approved, but not yet published</desc>
<targetProvider>channelsAndCategoriesTargetProvider</targetProvider>
</activity>
<activity>
<name>Browse Created</name>
<fname>BROWSE_CREATED</fname>
<desc>Browse to uPortal content that has not yet been approved or published</desc>
<targetProvider>channelsAndCategoriesTargetProvider</targetProvider>
</activity>
<activity>
<name>Browse Expired</name>
<fname>BROWSE_EXPIRED</fname>
<desc>View expired uPortal content in the Marketplace</desc>
<targetProvider>channelsAndCategoriesTargetProvider</targetProvider>
</activity>
These activities should be included in the UP_PORTLET_SUBSCRIBE.permission-owner.xml
file (in uPortal-start) and the file should be re-imported. These changes will be made to the master
branch in the Apereo uPortal-start repo shortly (in a few minutes), so you can obtain them there.
With these changes in place, you can import the file with this command:
$ ./gradlew dataImport -Dfile=data/base/permission_owner/UP_PORTLET_SUBSCRIBE.permission-owner.xml
Change Log
- Fixed a bug in how BROWSE permission is handled with unpublished portlets (Expired, etc.) by implementing additional BROWSE_* permissions based on life cycle state in the manner that SUBSCRIBE already handles them (see the Update Notes section)
- Handled missing activity data in permissions checking more gracefully (see the Update Notes section)
- Improved performance of query.getResultList() in JPA PortletDefinitionImpl (FYI this change makes a MASSIVE difference)
- Fixed a regression in the Portlet Admin tool where newly selected principals no longer received BROWSE & SUBSCRIBE permissions by default
- Fixed a display issue with
no-chrome
portlets that have DLM restrictions applied - Added CSS classes to the
- elements surrounding portlet chrome options to make them easier to style
- Added a SimplePredicate class to uPortal-rendering/src/main/java/org/apereo/portal/rendering/predicates that's easy to configure in Spring
There is additional detail in the JIRA Release Notes.
This update should be safe to apply to any uPortal 5.0.x implementation (though we recommend the data adjustment in the Update Notes section).
Thanks to everyone who contributed!