Fixes #5645: Fixes session undefined error when user has a default taxonomy set.

fixes #3914 - set current taxonomies on login from user defaults

fixes #4462 - extending the /users/login handling to process REMOTE_USER through intercept

fixes #4457 - Session fixation, new session IDs are not generated on login (CVE-2014-0090)

fixes #3475 - make it possible to force the 401 status.

fixes #812 - new permissions model, user group role and nest support, role filters for better granularity

• Daniel Lobato <elobatocs@gmail.com>
• Joseph Magen <jmagen@redhat.com>
• Tom McKay <thomasmckay@redhat.com>
• Greg Sutcliffe <gsutclif@redhat.com>...

fixes #3920 - prevent 500 ScopedSearch errors on the API, raise UI errors correctly

fixes #3940 - extlogout page layout fixed

refs #3935 - fixes hash style to support ruby 1.87

fixes #3935 new login page RCUE style

fixes #3930 - refactoring of edit_self implementation.

fixes #3312 - support /users/extlogin as a login page based on REMOTE_USER

fixes #2741 - rails 3 syntax

fixes #2969 - remove all legacy api code in UI controllers, add deprecation response

fixes #2639 After creating user with empty e-mail it becomes impossible to add it.

Fixes #2502 - session expiration updates

Signo now allows to transparently prolong user session which got
expired. Also when you now logout from Foreman you will end up in Signo
login form. This brings some code clean up and test changes and small
SSO method API change.

Fixes #2513 - orgs created in katello do not appear in org filtering

- topbar cache sweeper turned on for api controllers
- a bit of refactoring to get rid of repetitive expire_fragment

fixes #2281 - don't allow admin flag to be removed from admin account

fixes #2444 - locale selector in user account

fixes #2401 - cannot create new admin user

fixes #2417 - SSO abstractioning

Apache and Signo SSO reworked to a new general SSO concept.

You can use SSO service that comes with Katello for loggin in. It's
based on OpenID protocol with slightly customized provider.

Enforce hostgroup/role uniqueness on User relation

upgrade foreman to rails 3.2.13

This commit updates from rails 3.0.x to 3.2.x, main changes include:

• Asset pipline support
• cleanup of existing assets (javascript, css, images)

Users who uses foreman in production, make sure that you now compile
your assets, e.g...

Add gettext calls to the locations pages and the user pages.

These pages provide examples for using single translations:

_("Here is a simple")

single substitutions:

_("I like %s") % "pie"

and complex ones:

_("%{character"} should %{action}") % {:character => "Jar Jar Binks", :action => "be erased"}

fixes #2219 - Hostgroup ownership is hierarchical

fixes #2269 - Add gettext framework to foreman.

This patch adds a gettext based localization framework to the Foreman. This is done by adding the fast_gettext and gettext_i18n_rails gems along with their depdencies. An example translation is done to the login page and the users controller....

Taxonomy (Orgs / Locations related fixes)

• fixed edit habtm with taxonomy join.
• code cleanup
• use sub query instead of inner join, it solved all the org problems :) and perform better.

Add organization and location to foreman.

This feature allows foreman to provide multi location, multi tenant and
multi organizations capablities.

the idea is that resources within foreman (e.g. hosts, subnets, users,
environments etc) can belong to one or more locations and organization,...

Bug #1936 Allow user creation without email

make sure user expire when editing the user or when logging out

[SQL optimizations] - many small optimizations

• Bookmarks have only users, not usergroups
• added caching to the settings table
• removed notice message lookups (we are not really using those)...

ensures that auto completer for users search works even when you are not an admin

fixes #1446 - expire idle web sessions

WIP rails3 migration

fixes #1274 - a user is not able to edit itself

refactor - various facts cleanups

Fixes #921 - Roles and admin not saved on create new user

Signed-off-by: Paul Kelly <paul.ian.kelly@googlemail.com>

Fixes #906 - Always allow a user to edit some of their own User details

Signed-off-by: Paul Kelly <paul.ian.kelly@googlemail.com>

ensures that current user is cleared, refs #807

fixes #797 - JSON for users not returned

fixes #806 - Switch to JQuery instead of Prototype JavaScript library

added css grid and converted most pages to use that grid

views cleanup and added more operatingsystems icons

Fixes #670 - Adds proper json support for most CRUD operations

fixes #303 - cleanup flash hash from activescafold leftovers

Fixes #442 - User edit removes the Anonymous role

Fixes #366 - Redmine authorization port

This is a major feature which provides RBAC authorization within Foreman
a mental note to myself - never ever work on large commits

Some of the controller filters were running twice,
this way is the preferred way to ensure that they running only once where appropriate.

minor cache optimizations and use routing helper

Fixes #390 - A user account is always associated with a session

XHTML compliance

Fixes #145 - Added AuthSourceInternal

Added a password setting facility to the user class for AuthSourceInternal
Switched to SHA1
Changed :ldap to :login
Applied numerous fixes from Ohad Levy
Fixed malformed user page
Switched attr_accessible to attr_protected...

fixes #302 and all references to_label and to_s
removed references to all per_page settings as they are common now

fixes #293 - add table sorting to users page

Fixes #232 - Removes AS from Users page

The password verification test has not yet been implemented but will get done in AuthSourceInternal fix
All tests now pass These tests now work whether settings[:ldap] is enabled or not
Plus whitespace fix

Fixes #170 - implement usergroups

Added migration
Added tests
Added MVC files
Added the routes as well
Added the program logic and additional views
Added RESTful actions for update and create
Added validations to ensure that usergroup.name and user.login do not collide...

fixes #173 - redirection loop on login

Squashed commit of the following:

commit c4382aeea5d72402bcbf3049d3c08f74792ca379
Author: Ohad Levy <ohadlevy@gmail.com>
Date: Thu Oct 15 22:03:26 2009 +0800

disable ldap by default

commit 685baf5f2c78128feebcbeed6910b131a072a81b
Author: Ohad Levy <ohadlevy@gmail.com>...