Entries tagged [security]

Tuesday February 24, 2015

[ANN] Apache Isis 1.8.0

The Isis team is pleased to announce the release of:
  • Apache Isis Core version 1.8.0
  • SimpleApp Archetype 1.8.0
New features in this release include:
Full release notes are available on the Isis website.

Note that:
  • as of 1.8.0 the Wicket Viewer is bundled in with Core
  • the ToDoApp archetype is no longer provided, however the example todoapp is available from Isis addons (not ASF) to fork and adapt.
  • this release drops support for JDK 1.6, standardizes on JDK 1.7

You can access this release directly from the Maven central repo, or download the release and build it from source.

Enjoy!

--The Apache Isis team


Tuesday October 21, 2014

[ANN] Apache Isis version 1.7.0 Released

The Isis team is pleased to announce the release of:
* Apache Isis Core version 1.7.0
* Wicket Viewer 1.7.0
* SimpleApp Archetype 1.7.0
* ToDoApp Archetype 1.7.0

New features in this release include:
- ISIS-809: @ViewModel annotation, no longer requiring explicit implementation of the IViewModel interface.
- ISIS-916: ability to override framework-provided services, such as MementoService or BookmarkService.
- ISIS-917: (beta): pluggable representations for the RO viewer

There are also some security fixes:
- ISIS-883: Bookmarkable action URLs can be submitted by a user without permissions to bring up action dialog (thereafter that user can invoke).
- ISIS-884: ErrorPage vulnerable to XSS attacks.
- ISIS-895: HomePage should honour authorization rules.

Full release notes are available at [1,2,3,4] on the Isis website.  

Isis modules that in 1.6.0 were released as part of Isis core have now moved to Isis addons [5]. Meanwhile the profilestore component (previously in core, but unused in the Wicket viewer) has been retired.  Migration should be straightforward, see [6].

Significant updates in Isis add-ons:
- isis-module-security module [7], for administering authentication and authorization
- all modules re-released against for 1.7.0.

You can access this release directly from the Maven central repo [8], 
or download the release and build it from source [9].

Enjoy!

--The Isis team

[1] http://isis.apache.org/core/release-notes/isis-1.7.0.html
[2] http://isis.apache.org/components/viewers/wicket/release-notes/isis-viewer-wicket-1.7.0.html
[3] http://isis.apache.org/archetypes/release-notes/todoapp-archetype-1.7.0.html
[4] http://isis.apache.org/archetypes/release-notes/simpleapp-archetype-1.7.0.html
[5] http://isis.apache.org/core/release-notes/migrating-to-1.7.0.html
[6] https://github.com/isisaddons/isis-module-security
[7] http://www.isisaddons.org
[8] http://search.maven.org
[9] http://isis.apache.org/download.html

Calendar

Search

Hot Blogs (today's hits)

Tag Cloud

Categories

Feeds

Links

Navigation