fixes #5436 - provisioning templates are world accessible

(cherry picked from commit aa0ebe8eef311875695135c1714cb09225e8cd13)

Remove test erroneously pulled from develop

fixes #4457 - Session fixation, new session IDs are not generated on login (CVE-2014-0090)

(cherry picked from commit cfa4b52638173b9cf77ee1a5fd0c3a273f875209)

Conflicts:
test/functional/users_controller_test.rb

fixes #4314 - ignore default scope ordering on host search by puppet class

(cherry picked from commit a44dd0943b5ccc2c2e9a0ce264e4b2f38b5edd4d)

Conflicts:
app/models/concerns/hostext/search.rb

fixes #4268 - don't search for host with nil IP on hostname spoofing

(cherry picked from commit 1e0fd283180dc6bda30c880898cdea69cb579194)

Conflicts:
test/fixtures/hosts.yml

fixes #3845 - user login session ending clears chosen organization

(cherry picked from commit f639fdcfb04d2795396d66e64cfb58e300a63188)

fixes #3596 - validation error when user with hostgroup subscription creates a new hostgroup

(cherry picked from commit de7cb88710f028bc33ae9257d185abf0b73554d5)

fixes #3519 - taxonomies include authorization module

(cherry picked from commit 14fdd9046dd3b85979bf95b4d0019e00051e35c2)

fixes #2866 - Changing a hostgroup name doesn't update associated Smart Variable matchers

(cherry picked from commit 709ad8d6f425e0817d3faef2cc629af1458cb1c9)

fixes #3960 - wrap APIv2 errors in an "error" node

(cherry picked from commit 0f7d219a4a65cd795eecd05117b08511d9025de2)

fixes #3920 - prevent 500 ScopedSearch errors on the API, raise UI errors correctly

(cherry picked from commit f9bc5a8e5934aac9bd8d5488f84717d33e359501)

fixes #359 - hostname spoofing for unattended installation templates

(cherry picked from commit 5b70f0e0232bff3e580923f485bc0bd1816d9279)

fixes #3760 - API v2 define metadata @total for each controller

(cherry picked from commit 6f9438866488180e196ff18e1372cf0773afe7b9)

Conflicts:
foreman.spec

fixes #2231 - hostgroup deletion is restricted to hostgroups without children

(cherry picked from commit 8c68024ac619121312680ee8afc467857155e71d)

Fixes #4022: Make api puppetrun a PUT for REST standards

(cherry picked from commit bc11c17bcc66fbec3a71be920efa4de32d508ecb)

fixes #3515 - API handles not found objects with 404

(cherry picked from commit 46338cd73c542ecc3aa045b45e831434792c710e)

Fixes #4020 - enable @static to work on all OS template types

fixes #3178 - add feature for compute profiles for hostgroups and hosts

refs #3928 - use updated test fixture

fixes #3928 - API v2 - update os_default_templates for operating system

refs #3930 - ensure a user can actually update itself.

fixes #3930 - refactoring of edit_self implementation.

fixes #3752 - move data population from migrations into seed script

fixes #3280 - authenticate returns true for API requests when login:false

fixes #3693 - API v2 - accept GET json format of object in PUT/POST requests to add/remove has_many associations

fixes #3491 - API v2 rabl templates base, main, show for each controller

fixes #2983 - Add autosign#index to API v1 and v2 and remove from UI controller

fixes #3646 - API v2 change default root name for api json single object response to no root node but make it configurable

fixes #3137 - API v2 - show error if optional nested object does not exist for nested route

fixes #3018 - API v2 metadata for pagination, search, order in index collection json response

fixes #3011 - default root node name for api collections json response to :results but make it configurable

fixes #3736 - users API uses login name as an identifying attribute

fixes #3510 - plugin interface for registering a plugin, updated menu system

fixes #2763 - correcting doco links

fixes #3603 - replaced a relation with a collection in 'where' conditions

fixes #3017 - split APIv2 controllers from v1 parents

fixes #3312 - support /users/extlogin as a login page based on REMOTE_USER

Fixes #3569, #3210 - Use port from foreman_url for templates

fixes #3597 - removing rr gem, make tests consistent by using just mocha

fixes #3566 - exposes orchestration tasks via the API at /api/orchestration/id/tasks

fixes #3577 - do not treat `params[:dryrun]` with value `false` as true

fixes #2951 - Host API documentation lacks compute_resource_id

fixes #1830 - auto assign puppet proxy if its not defined upon facts/reports event

fixes #3140 - API to allow importing of puppet classes

Fixes #3293 add FactoryGirl to tests

fixes #3239 - pxelinux spoofing on postgres now works

fixes #3136 - host cloning should auto-suggest a new IP address

fixes #3111 - v2 API calls to /api/[class]/[object]/parameters/[parameter] return wrong object

refs #3141 - added tests around Foreman::Controller::SmartProxyAuth

Fixes #3128 - add json format back to images_controller

fixes #1244 - add smart proxy feature refresh link + API call

fixes #2810 - more restful API v2 JSON responses in puppetclasses

NOTE: breaking changes to API v2 api/lookup_keys does not exist, replaced by api/smart_variables and api/smart_class_parameters

fixes #3101 - list available images for CRs, add iam_role field to images API

Fixes #2984 - API v1/v2 StatisticsController and remove JSON from UI controller

fixes #3089 - Updating settings causes settings page to load again within the page

fixes #2764 - settings defined in settings.yaml file are now read-only

fixes #2400 migration to remove orphaned records and add foreign keys constraints to database tables

fixes #2969 - remove all legacy api code in UI controllers, add deprecation response

fixes #2996 - VM show screen syntax error on ruby 1.8

fixes #1853 - Users now have a new filter to subscribe to new hostgroups

fixes #3046 - add NIC CRUD, power and boot operations API

Fixes #2414 - Move puppet report processing code to the report processor

This creates a API route for POST:/api/reports which matches the GET
format for reports. Tests are updated, with the report model tests
moving to the puppet-foreman module (along with the report fixtures).

fixes #2863 - restrict APIs to resources that a user is permitted to manage (CVE-2013-4182)

Refs #2414 - Remove Puppet from facts API and Settings

Reports are still in progress and will come in a later PR
DB schema is updated to not need puppet/rails

fixes #2988 - merge authentication code, enables REMOTE_USER auth on new API controllers

fixes #2891 Openstack power control operations support

Compute resource helper Strings should be possible to translate

Compute resource permission to pause vms

Tests for Openstack VM pausing/resuming

VMs UI shows only available actions

I18n string issues. Vm power state cannot be properly translated yet...

fixes #2877: deletion of the organization or location in the context no longer breaks the session

fixes #2788 - changes to fixtures and tests in preparation for testing adding/removing puppetclasses

fixes #2788 - adding / removing puppet classes updates the change even if the form is not submitted

Fixes #2576 - Add optional update of Host.ip from built request

fixes #2693 - don't cause handle_ca error when no Puppet CA associated with host

fixes #1770 - Refactored rdeckfacts definition to use facts_hash

fixes #2142 add Smart Parameters and Smart Class Parameters to API v2

fixes #2782 - LDAP password overwritten as blank

Remove some unnecessary variables from the hostgroups functional test

fixes #2713 - do not update nics table on every host update as a workaround to bug #2489

fixes #2728 - POST /api/hostgroups does not accept ancestry

fixes #2489 - fixes BMC password caused by rails bug accepts_nested_attributes_for and serialized child field

fixes #2484 - host, hostgroup, and BMC passwords were overwritten as blank

fixes #2639 After creating user with empty e-mail it becomes impossible to add it.

fixes #2660 - settings, improve tests and fixes

- added string settings type
- fixed tests previously commented out due to CI failures
- more tests for core settings functionality
- parsing of string values enhanced and extracted to a separate method
- setting value to nil when it equals default is back...

Fixes #2038 - updated config and partition table templates using ones from the community repository

fixes #2602 - scoped_search error when using postgresql

fixes #2539 - added API puppetrun access permission and test

Fixes #2571 - Deleted admin is recreated

fixes #2553 let setting admin attribute on user creation

fixes #2550 Puppetclass search_by_host doesn't return all classes for an unknown host

Tests for puppetclass API searches on nonexistent hosts

Puppetclass search_by_host does not fail if Host does not belong to any Hostgroup

Puppetclass search_by_host query looks for distinct puppetclasses instead of pruning them afterwards...

fixes #2440 remove unused files, code, unnecessary require statements

Revert "fixes #2484 - host and hostgroup root passwords are not saving"

This reverts commit 2193afa0e33e939739a53d2918cb2e31ee92ac7a.

merged by mistake

fixes #2484 - host and hostgroup root passwords are not saving

fixes #2281 - don't allow admin flag to be removed from admin account

fixes #2444 - locale selector in user account

refs #2400 clean up tests so there are no orphaned foreign keys

fixes #2420 - extract strings for i18n from JavaScript, various i18n fixes

fixes #2401 - cannot create new admin user

fixes #2426 - translate model and column names to English

fixes #2472 - prevent duplicate users from hostgroup ancestors

fixes #2463 - move test files to follow controller move

Fix tests misusing assert and assignment vs. comparison

Fix finder_needs_type check in sti mixin