Fixes #10782 - global host status

• OK
• WARN
• ERROR

Plugins can add their own substatuses. These are automatically...

Fixes #11426 - remove puppet class paremeters no longer possible during edit in UI

Fixes #1477 - Hostgroup no longer looses puppet classes when environment changed during hostgroup editing

fixes #11649 - taxonomies api - add description to base.json.rabl

Adding the 'description' to the base.json.rabl so that it is displayed
when a user performs commands like 'organization list' from hammer-cli-katello.

E.g.

hammer> organization list
---|----------------------|----------------------|---------------...

fixes #10832 - separating lookup keys into puppet and variable

Fixes #11579 - Reports show/destroy restricted by host authorization (CVE-2015-5233)

ReportsController 'show' and 'destroy' now perform a check to see if
the User is authorized to see the Host associated with the Report. In
case it's not, it returns 404, as to not give hints whether a Report...

fixes #9058 - interfaces should not be affected when changing loc/org

Fixes #11255 - Fixed inheritance checks for explicit input on host clone

Fixes #4419 - rearranging smart class parameters edit form

Fixes #10248 - cloning volume information for virtual machines

Fixes #9591 - Added support for "inherit" state.

Fixes #10929 - Add removed widgets to dashboard

This commit allows users to re-add widgets. At this point it's only
possible to recover removed widgets by clicking on "Reset to default".

To do this I populate the 'Add widgets' list by getting a diff
between the current widgets and the available ones. The code calls any...

Fixes #4830 - Added a new template to show when no trend data is collected.

Fixes #10550 - Settings API will not update when value parameter is missing

Fixes #11089 - Adapt tests to Rails 4

This commit contains all changes to tests in branch
https://github.com/theforeman/foreman/pull/2055 that I found to be
retrocompatible with Rails 3. The more of these we can get in, the less
code we will have to review for Rails 4, and the more relevant it will...

Fixes #11035 - template preview feature

Fixes #8343 - Consolidated code paths, and removed unnecessary DB calls for parent object

Fixes #11078 - Substitute find_all_by by where to comply with Rails 4

This commit takes away all instances up to this point of find_all_by to
improve Rails 4 compatibility. They are substituted by .where calls.

Fixes #10356 - changed the POST/PUT RABL template to be the same as the GET template

HTTP response code standardized to 201 on create.

Fixes #10963 - partition table can't access os ids

Refs #10720 - Use API v2 response for vm_compute_attributes

Fixes #6976 - Build default PXE menu should be POST request

Fixes #7096 - Adds STI to templates

This commit converts Ptables to be just another type of Template so it
gets the same features as ConfigTemplate. ConfigTemplate was renamed to
ProvisioningTemplate to reflect UI and the name under it's commonly known.

fixes #10720 - Adds API to get host vm attributes

This exposes an API to fetch a host's vm_compute_attributes,
such as vmware cpus and memory. It lives at a separate endpoint
because it involves a fetch for data from the compute resource,
and may have different performance characteristics than the database.

Fixes #10715 - api build_pxe_default returns non-JSON message

The fix adds a new method `render_message` for responding with a status
text.

fixes #9301 - make puppet environment optional for hosts

Fixes #3711 - usergroup name can't be null

fixes #9031 - Add routes to view template_combinations per hostgroup / environment

fixes #10586 - make the 401 status comparison actually match.

fixes #10482 - get external user group members only once during refresh

fixes #9812 - Adds validation on override value, ensure match returns error if blank

fixes #10342 - adding :host_parameters_attributes to except list in template_used()

Fixes #9674 - Handle ProxyAPI exceptions on PuppetCA controller

fixes #9773 - correctly render template URL

Fixes #9391 - Added validation code to NIC, so it validates that host's location/org is compatible with the one set on NIC's subnet

Fixes #10123 - Tests API v2 external user groups

The addition of a .refresh call after create, update and delete, caused
our tests to fail because of many failed calls to LDAP.
We can just expect the method to return true as we're not testing the
refresh functionality in these methods.

Fixes #9884 - refresh deleted external usergroups

Fixes #8812 - Pass model type so search_for is called on Host

At least on version 1.6.1, the absence of this second parameter leads to a
runtime crash when it's time to validate if the current user (non-admin) is
allowed to perform a power operation on given a host via the APIv2....

Fixes #10002 - Add attribute ancestry to taxonomies API v2

Fixes #7378 - fixed API lookup keys filters

Fixes #9444 - prevent 404 error on current_parameters and domain_selected

Fixes #9657 - merge NICs from compute profile in host create API

- updated api docs for hosts and interfaces
- host create/update api actions now merge interfaces from compute
profiles
- NIC type mapping extracted into a separate class
- return full host detail after host update

Fixes #9678 - Can't update admin flag for users via API

find_resource needs to be defined prior to UsersMixin is included as it
requires the variable @user being set.

Fixes #9593 - replace .all.map(&:<attr>) with .pluck(:attr)

Fixes #9427 - Return meaningful errors from subnets/freeip and parse the error response to the UI

Refs #3809 - Remove classcheck cop

Refs #3809 - Remove various small cops

Refs #3809 - Remove cop IndentationConsistency

Refs #3809 - Remove cops for empty lines

fixes #9358 - match unattended template requests against provision interface

fixes #9030 - Adds support to clone config template via api

Fixes #7456 - Extract primary interface from host

• Tomas Strachota (tstrachota) <tstrachota@redhat.com>
• Marek Hulán (ares) <mhulan@redhat.com>
• Gregory Sutcliffe (GregSutcliffe) <gsutclif@redhat.com>

All host must have at least one primary interface and one provision (can...

fixes #8484 - make SmartProxyAuth concern more useful to plugins

Fixes #8796 - Fix to_gb size calculation and constentize

fixes #8049 - Add timezone to user

Fixes #8405 - Filter :interfaces_attributes when calculating templates_used

Refs #3809 - Remove useless assignments

fixes #5634 - save sso_method on session expiry

fixes #5773 - redirect to referrer URL that includes page and search

Refs #969 - Foreman-side changes for serving templates from the proxy

Fixes #8091: connect-src accepts WSS

fixes #7586, #7734, #7172 - user preferences for receiving mail notifications

Adds a framework for user-selectable mail notifications. The work is
still done in ActionMailer classes and launch by rake in cron, however a
wrapper called MailNotification is used to provide RBAC and make the...

fixes #4463 - use unattended URL for hostgroup provisioning

Fixes #746 - Generate all the Host template when click on Build to avoid errors during installation

Fixes #8005 - Convert allowed NIC types to strings

- allowed NIC type classes need to be registered now
- api for interfaces use lowercase human readable values for defining types
- fixed output of api's create action to the standard format

Fixes #6710 - unicode characters in url parameters

Original methods to_param defined on resources called name.parameterize
to get rid of url-unsafe characters. This function unfortunately also
stripped off unicode characters.

Changes:
- parameterization extracted into a separate module Parameterizable...

Fixes #7733 - Remove hosts.yml fixtures and use FactoryGirl instead

fixes #7331 - delete unassigned os default templates

fixes #7985 - add support for ws:// in secure headers

fixes #7898 - ensure that format can respond to json / yaml

fixes #7372 - API v2 - accept PUT/POST requests with wrapped root node to add/remove has_many associations of child nodes

fixes #7907 - Allow images from gravatar on secure headers

fixes #7805 - Add several security related HTTP headers - security hardening.

• Content Security Policy
• HTTP Strict Transport Security
• X-XSS-Protection...

Fixes #7884 - Display Fog errors on vm operation

Fixes #5139 - leftovers subscribe_to_all_hostgroups

Remove user_xxx unnecessary tables and notices

Update subhostgroups removed

Fixes for migration of foreign keys

Remove users from compute_resource fixture

Remove table notices after fk are removed for pg/mysql

Refs #3809 - Use parentheses in method definitions

Refs #3809 - Fix a few rubocop TODOs

Refs #3809 - Remove rubocop TODOs

Removed the following TODOs so that cops for these will run from now on:

Lint/AmbiguousOperator, DefEndAlignment, DeprecatedClassMethods
EnsureReturn, RequireParentheses, Void, BlockAlignment, EndAlignment,
UselessAccessModifier,...

fixes #2321 - remove new puppet creation option

refs #7608 - i18n fixes, tests, use POST for action + only display link if authed

fixes #6856 - API v2 - more efficient import puppetclasses for single environment

Fixes #7572 - remove rundeck from core

Foreman rundeck is now a plugin available in https://github.com/theforeman/foreman_host_rundeck

fixes #4386 - gem friendly_id to simplify find by id, name, label, etc

Fixes #6999 - protect user logout against CSRF requests (CVE-2014-3590)

To avoid CSRF, logout is changed to be a POST request so
protect_from_forgery checks the CSRF token. However, in Rails 3 the only
strategy available is to nullify the session of the attacker....

fixes #5896 - Set Compute Resource's 'Console passwords' option in API

fixes #3544 - Editing an oVirt compute resource allows changing the type, which is unsupported

Fixes 4642: Fix intermittent test failures on rundeck functional tests

Fixes #3085: Request to be able to clone host groups via API

fixes #7314 - Set settings explicitly instead of stubbing Settings

refs #6161 - Add test to make sure override is marked on create

Fixes #4596 - Change parent of host group via AJAX

Reparenting host groups requires submitting the form to see the changes
nowadays, this fix makes the host group model inherit all properties
from the parent and show them in real time.

fixes #7253 - change nil admin field on users to false, matches usergroups

When the admin field was nil, admin_changed? in user model validations can
evaluate to true if the field changed from nil to false.

Fixes #3840 - Removes unused Signo related code

Fixes #6444 - add support for virtual NICs

Extend additional interface details refs #2240

NIC facts parsing change and we create interfaces in Foreman according
to facts we recieve.

Subclasses does not define their own attributes and serialize them to
attrs hash. All BMC attributes are extracted to separate columns so it's...

Fixes #6831 - expire topbar cache for admin on taxonomy updates

fixes #6205 Changed regex to parse CNs from SSL DNs on separator chars

Fixes #6756 - exposes vmware resource pools and folders through the API

Fixes #6608 - expose disk usage info through available_storage_domains API

fixes #6696 - API v2 - specify 'host' as the key in which parameters will be wrapped rather than Host::Base

fixes #6964 - replace default scope that hides users with explicit scope