fixes #10832 - separating lookup keys into puppet and variable

Fixes #11579 - Reports show/destroy restricted by host authorization (CVE-2015-5233)

ReportsController 'show' and 'destroy' now perform a check to see if
the User is authorized to see the Host associated with the Report. In
case it's not, it returns 404, as to not give hints whether a Report...

Fixes #11451 - Changed bookmark name to be unique per controller.

Refs #3809 - Style/blocks cop enabled

Fixes #10727 - Added validation to require BMC Smart proxy in order to add BMC nic

Fixes #10780 - factory girl examples for provisioning

Fixes #7096 - Adds STI to templates

This commit converts Ptables to be just another type of Template so it
gets the same features as ConfigTemplate. ConfigTemplate was renamed to
ProvisioningTemplate to reflect UI and the name under it's commonly known.

fixes #9301 - make puppet environment optional for hosts

fixes #1213 - Get email reports of audit changes

Fixes #10442 - dry up host managed logic

Fixes #9634 - creating a host with an interface and without os returns a validation message

Fixes #5554 - fixed hostgroup and fqdn validations in multiple matchers

Fixes #9391 - Added validation code to NIC, so it validates that host's location/org is compatible with the one set on NIC's subnet

fixes #10020 - add next-server/filename attrs to provision NIC DHCP record

A host's DHCP record used to be constructed with PXE attributes in
Orchestration::DHCP, but moved to Nic::Managed during 43c4bd7. Nic::Managed
didn't add PXE attributes, so this commit adds these when provision? is set....

Fixes #7505 - Changed the way trends are stored in the DB. Now they are stored as intervals

Refs #3809 - Remove cop IndentationConsistency

Refs #3809 - Remove cops for empty lines

fixes #9358 - match unattended template requests against provision interface

fixes #8953 - update IPA userclass param on realm update

Fixes #7456 - Extract primary interface from host

• Tomas Strachota (tstrachota) <tstrachota@redhat.com>
• Marek Hulán (ares) <mhulan@redhat.com>
• Gregory Sutcliffe (GregSutcliffe) <gsutclif@redhat.com>

All host must have at least one primary interface and one provision (can...

fixes #6369 - allow to override puppet ca/master to nil

fixes #8857 - refactor Debian boot_files_uri into parent class to match CoreOS

Fixes #8428 - Connecting audits to existing users

Fixes #7233 - Drop Ruby 1.8.7 and revert Ruby 1.8.7 specifics

Fixes #8321 - correctly pull Compute Resource image method from compute attributes

Refs #969 - Foreman-side changes for serving templates from the proxy

fixes #7586, #7734, #7172 - user preferences for receiving mail notifications

Adds a framework for user-selectable mail notifications. The work is
still done in ActionMailer classes and launch by rake in cron, however a
wrapper called MailNotification is used to provide RBAC and make the...

Fixes #3260- Allows puppet to manage value of smart class parameter that can be overrided

Fixes #7562- reducing number of reports created by test to stop sigkill during test

Fixes #7733 - Remove hosts.yml fixtures and use FactoryGirl instead

Fixes #7401 - Add support for bonds

Renames physical_device to attached_to and move the virtual device
form out of BMC.
Extends the form for Bond devices
Allow configuration of bonds in KS template
Parsing of Bond interfaces from facts
Mac address is required only for physical devices

Fixes #1592: making report::expire faster and without errors

Fixes #6444 - add support for virtual NICs

Extend additional interface details refs #2240

NIC facts parsing change and we create interfaces in Foreman according
to facts we recieve.

Subclasses does not define their own attributes and serialize them to
attrs hash. All BMC attributes are extracted to separate columns so it's...

fixes #7066 - add back $login interpolation for LDAP service account usernames

In cases where an LDAP connection is required outside of the context of user
authentication (e.g. validation of external user group name), an error is
thrown. Users are recommended to use dedicated service accounts for this...

Fixes #5734 - API for external groups management

Fixes #813 - External usergroups can be linked to an LDAP auth source

fixes #6177 - clear host facts/reports when build=true set over API

fixes #6216, #4416 - avoid foreign key errors when deleting some objects in use

fixes #6229 - validate installation media exists for new host if pxe_build

fixes #5848 - can't search for host with class inherited from config group

fixes #3892 - process REMOTE_USER_GROUP_N and REMOTE_USER_GROUP_#, add user to groups based on external user groups.

Fixes #4287 - Join directly to template_combinations when resolving templates

fixes #5453 - ensure all VMware compute attribute keys are symbolized

fixes #5246 - remove second host/class lookup impl so config groups are included in ENC output

fixes #4597 - map host disassociate actions to permission

fixes #1902 - audit changes to lookup keys and values/overrides

refs #2189 - update host group parameter search tests

fixes #1804 - find hosts through nested hostgroups on puppet class search

fixes #812 - new permissions model, user group role and nest support, role filters for better granularity

• Daniel Lobato <elobatocs@gmail.com>
• Joseph Magen <jmagen@redhat.com>
• Tom McKay <thomasmckay@redhat.com>
• Greg Sutcliffe <gsutclif@redhat.com>...

Fixes #3293 add FactoryGirl to tests