0.6.3

[mikelietz]

As discussed on IRC, (http://drunkenmonkey.org/irc/habari/
2009-09-23#T17-10-44 and http://drunkenmonkey.org/irc/habari/2009-09-30#T20-12-07)
there are a few trunk commits that should get merged into the stable
branch.

3726 http://trac.habariproject.org/habari/changeset/3726
3728 http://trac.habariproject.org/habari/changeset/3728
3693 http://trac.habariproject.org/habari/changeset/3693
3743 http://trac.habariproject.org/habari/changeset/3743

Can we consider making these into an 0.6.3 release? Anything else that
should go in there?

[drzax]

I'm all for this. Especially r3693. I've personally helped two people
get around this during their first experience with Habari. It's
confusing and annoying many potential new users.

S.

On Oct 1, 6:26 am, mikelietz <cod...@gmail.com> wrote:
> As discussed on IRC, (http://drunkenmonkey.org/irc/habari/

> 2009-09-23#T17-10-44 andhttp://drunkenmonkey.org/irc/habari/2009-09-30#T20-12-07)

> there are a few trunk commits that should get merged into the stable
> branch.
>
> 3726http://trac.habariproject.org/habari/changeset/3726
> 3728http://trac.habariproject.org/habari/changeset/3728
> 3693http://trac.habariproject.org/habari/changeset/3693

> 3743http://trac.habariproject.org/habari/changeset/3743

[Caius Durling]

On 30 Sep 2009, at 23:54, drzax wrote:

> On Oct 1, 6:26 am, mikelietz <cod...@gmail.com> wrote:
>> Can we consider making these into an 0.6.3 release? Anything else
>> that
>> should go in there?
>

> I'm all for this. Especially r3693.

As we're not talking about releasing 0.7 imminently I think 0.6.3 is a
very good idea. Especially as it fixes bugs different people are
running into more often than not by the sounds of it.

C
---
Caius Durling
ca...@caius.name
+44 (0) 7960 268 100
http://caius.name/

[Michael C. Harris]

2009/10/1 mikelietz <cod...@gmail.com>:

>
> As discussed on IRC, (http://drunkenmonkey.org/irc/habari/
> 2009-09-23#T17-10-44 and http://drunkenmonkey.org/irc/habari/2009-09-30#T20-12-07)
> there are a few trunk commits that should get merged into the stable
> branch.
>
> 3726 http://trac.habariproject.org/habari/changeset/3726

You'll need r3698 too, I believe, which introduced the manage_self token.

> 3728 http://trac.habariproject.org/habari/changeset/3728
> 3693 http://trac.habariproject.org/habari/changeset/3693

I support both of these.

> 3743 http://trac.habariproject.org/habari/changeset/3743

Seems harmless ... I can't believe I'm saying that.

--
Michael C. Harris, School of CS&IT, RMIT University
http://twofishcreative.com/michael/blog
IRC: michaeltwofish #habari

[Andy C]

Anything that improves the impression and user experience for new
Habari users who tend to select 'stable' 0.6.x gets my vote.

Old Chinese CRM proverb says: 'Takes 10 years to win a new customer
and 10 seconds to lose him etc etc.'

On Oct 1, 1:32 am, "Michael C. Harris" <michael.twof...@gmail.com>
wrote:

> 2009/10/1 mikelietz <cod...@gmail.com>:
>
>
>
> > As discussed on IRC, (http://drunkenmonkey.org/irc/habari/

> > 2009-09-23#T17-10-44 andhttp://drunkenmonkey.org/irc/habari/2009-09-30#T20-12-07)

> > there are a few trunk commits that should get merged into the stable
> > branch.
>

> > 3726http://trac.habariproject.org/habari/changeset/3726

>
> You'll need r3698 too, I believe, which introduced the manage_self token.
>
> > 3728http://trac.habariproject.org/habari/changeset/3728

> > 3693http://trac.habariproject.org/habari/changeset/3693

>
> I support both of these.
>

> > 3743http://trac.habariproject.org/habari/changeset/3743

[mikelietz]

I think this should probably go for a vote, then.

+1 to merge 3693, 3698, 3726, 3728 and 3743 into makaanga for a week
of testing, as soon as the vote is closed and the merges are
committed. If nobody else wants it (or if it's my duty for calling the
vote) I'll grab the "release manager" reins on this one, also.

On Sep 30, 8:32 pm, "Michael C. Harris" <michael.twof...@gmail.com>
wrote:

> 2009/10/1 mikelietz <cod...@gmail.com>:
>
>
>
> > As discussed on IRC, (http://drunkenmonkey.org/irc/habari/

> > 2009-09-23#T17-10-44 andhttp://drunkenmonkey.org/irc/habari/2009-09-30#T20-12-07)

> > there are a few trunk commits that should get merged into the stable
> > branch.
>

> > 3726http://trac.habariproject.org/habari/changeset/3726

>
> You'll need r3698 too, I believe, which introduced the manage_self token.
>
> > 3728http://trac.habariproject.org/habari/changeset/3728

> > 3693http://trac.habariproject.org/habari/changeset/3693

>
> I support both of these.
>

> > 3743http://trac.habariproject.org/habari/changeset/3743

>
> Seems harmless ... I can't believe I'm saying that.
>
> --

[Michael C. Harris]

2009/10/1 mikelietz <cod...@gmail.com>:

>
> I think this should probably go for a vote, then.
>
> +1 to merge 3693, 3698, 3726, 3728 and 3743 into makaanga for a week
> of testing, as soon as the vote is closed and the merges are
> committed.

+1

> If nobody else wants it (or if it's my duty for calling the
> vote) I'll grab the "release manager" reins on this one, also.

I think it's amusing that you think someone might fight you for it :)

--

[Sean T Evans]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

mikelietz wrote:
> I think this should probably go for a vote, then.

Let's consider the vote called. Open for 24 hours-ish. Let's call it
midnight east coast time tomorrow.

I'm +1

>
> +1 to merge 3693, 3698, 3726, 3728 and 3743 into makaanga for a week
> of testing, as soon as the vote is closed and the merges are
> committed. If nobody else wants it (or if it's my duty for calling the
> vote) I'll grab the "release manager" reins on this one, also.
>

In the past, for security releases, we've released as soon as the voting
period was up to get the fix out to users as soon as possible. If
there's a compelling reason to hold the release, a -1 vote with the
technical information as to the reason constitutes a veto in any case.

Let's run with it.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAkrEItUACgkQmQpMBUWJpdtLgQCcCd7EQ7oXpbA/y/iBpcQUOKGQ
LxwAoKGCpG5JCFH/Xy/4wm4Ujw7WTE7D
=O6jx
-----END PGP SIGNATURE-----

[Caius Durling]

On 1 Oct 2009, at 03:39, mikelietz wrote:

> I think this should probably go for a vote, then.

+1

C

[Ali B.]

On Thu, Oct 1, 2009 at 12:47 PM, Michael C. Harris <michael...@gmail.com> wrote:

2009/10/1 mikelietz <cod...@gmail.com>:
>

> I think this should probably go for a vote, then.
>
> +1 to merge 3693, 3698, 3726, 3728 and 3743 into makaanga for a week
> of testing, as soon as the vote is closed and the merges are
> committed.

+1

+1 from me as well.
 

> If nobody else wants it (or if it's my duty for calling the
> vote) I'll grab the "release manager" reins on this one, also.

I think it's amusing that you think someone might fight you for it :)

Heh. He's right, no one will :) But hey, merge and tag away and let us know. We will still need to test new installations and upgrades.

--
Ali
http://awhitebox.com

[rick c]

On Sep 30, 4:26 pm, mikelietz <cod...@gmail.com> wrote:
> As discussed on IRC, (http://drunkenmonkey.org/irc/habari/

> 2009-09-23#T17-10-44 andhttp://drunkenmonkey.org/irc/habari/2009-09-30#T20-12-07)

> there are a few trunk commits that should get merged into the stable
> branch.
>

> 3726http://trac.habariproject.org/habari/changeset/3726
> 3728http://trac.habariproject.org/habari/changeset/3728
> 3693http://trac.habariproject.org/habari/changeset/3693

> 3743http://trac.habariproject.org/habari/changeset/3743

>
> Can we consider making these into an 0.6.3 release? Anything else that
> should go in there?

Two other security-related revisions to consider for a 0.6.3 release

http://trac.habariproject.org/habari/changeset/3745
http://trac.habariproject.org/habari/changeset/3746

The first checks permissions to help ensure a user can't delete a post
they shouldn't have access to. It takes a weird concatenation of
events for them to be able to take advantage of this.

The second fixes ticket #1011 ( I hope).by making the undelete plugin
ACL aware.

http://trac.habariproject.org/habari/ticket/1011

Rick

[Randy Walker]

+1 for 0.6.3

--
Randy Walker

[Michael Bishop]

All sound reasonable to me…+1

~miklb

[mikelietz]

These additional two commits sound good to me as well. Consider them
added to the slate.

Is this a bad time to ask about one more cosmetic update, changing the
"Forgot your password?" button to "Reset password" as seen in trunk?

More votes, please.

--mikelietz

On Oct 1, 3:14 pm, rick c <rickcock...@gmail.com> wrote:
> On Sep 30, 4:26 pm, mikelietz <cod...@gmail.com> wrote:
>
> > As discussed on IRC, (http://drunkenmonkey.org/irc/habari/
> > 2009-09-23#T17-10-44 andhttp://drunkenmonkey.org/irc/habari/2009-09-30#T20-12-07)
> > there are a few trunk commits that should get merged into the stable
> > branch.
>
> > 3726http://trac.habariproject.org/habari/changeset/3726
> > 3728http://trac.habariproject.org/habari/changeset/3728
> > 3693http://trac.habariproject.org/habari/changeset/3693
> > 3743http://trac.habariproject.org/habari/changeset/3743
>
> > Can we consider making these into an 0.6.3 release? Anything else that
> > should go in there?
>
> Two other security-related revisions to consider for a 0.6.3 release
>

> http://trac.habariproject.org/habari/changeset/3745http://trac.habariproject.org/habari/changeset/3746

[Ali B.]

No issues with adding all of these either. Go for it.

--
Ali
http://awhitebox.com

[Colin]

A big +1 for me

On Friday, October 2, 2009, Ali B. <dmon...@gmail.com> wrote:
> No issues with adding all of these either. Go for it.
>

> On Fri, Oct 2, 2009 at 1:17 PM, mikelietz <cod...@gmail.com <javascript:_e({}, 'cvml', 'cod...@gmail.com');>> wrote:
>
>
> These additional two commits sound good to me as well. Consider them
> added to the slate.
>
> Is this a bad time to ask about one more cosmetic update, changing the
> "Forgot your password?" button to "Reset password" as seen in trunk?
>
> More votes, please.
>
> --mikelietz
>

> On Oct 1, 3:14 pm, rick c <rickcock...@gmail.com <javascript:_e({}, 'cvml', 'rickcock...@gmail.com');>> wrote:

>> On Sep 30, 4:26 pm, mikelietz <cod...@gmail.com <javascript:_e({}, 'cvml', 'cod...@gmail.com');>> wrote:
>>
>> > As discussed on IRC, (http://drunkenmonkey.org/irc/habari/
>> > 2009-09-23#T17-10-44 andhttp://drunkenmonkey.org/irc/habari/2009-09-30#T20-12-07)
>> > there are a few trunk commits that should get merged into the stable
>> > branch.
>>
>> > 3726http://trac.habariproject.org/habari/changeset/3726
>> > 3728http://trac.habariproject.org/habari/changeset/3728
>> > 3693http://trac.habariproject.org/habari/changeset/3693
>> > 3743http://trac.habariproject.org/habari/changeset/3743
>>
>> > Can we consider making these into an 0.6.3 release? Anything else that
>> > should go in there?
>>
>> Two other security-related revisions to consider for a 0.6.3 release
>>
>> http://trac.habariproject.org/habari/changeset/3745http://trac.habariproject.org/habari/changeset/3746
>>
>> The first checks permissions to help ensure a user can't delete a post
>> they shouldn't have access to. It takes a weird concatenation of
>> events for them to be able to take advantage of this.
>>
>> The second fixes ticket #1011 ( I hope).by making the undelete plugin
>> ACL aware.
>>
>> http://trac.habariproject.org/habari/ticket/1011
>>
>> Rick
>
>
>
> --
> Ali
> http://awhitebox.com
>
> >
>

--
Colin Seymour
Blog: http://colinseymour.co.uk
Tech Stuff: http://www.lildude.co.uk

[mikelietz]

OK, I've merged the following revs to the makaanga branch, and it
should be ready for people to kick the tires and look under the hood:
3618 Password reset is an action, and should be phrased as such. Also
means the text isn't cut off in the button any more.
3698 Allow users to edit their own profile page.
3693 Work around a bug in PHP 5.2.10 and PHP 5.3. Allows Habari to be
installed on those PHP versions.
3726 Add permission check to core dash modules so that users without
access to moderate comments can't view the comment module on the
dashboard. And more.
3728 Changed hotkey for My Profile to a 'Y' to obviate conflict with
the Manage menu hotkey.
3743 Inserting a missing image into the manual.
3745 Ensure the user has permission to delete a post before deleting
it.
3746 Make the undelete plugin ACL aware.

This is not the release, it is just for testing pending a release.

For testing, please check out https://svn.habariproject.org/habari/makaanga/0.x/htdocs

As of a couple minutes ago, the /dist download
http://habariproject.org/dist/habari_makaanga.zip hasn't yet caught up
with the merges I did tonight.

Note I don't have access to a PHP 5.2.10 or PHP 5.3 box for testing
3693.

mikelietz

On Oct 2, 2:02 am, "Ali B." <dmond...@gmail.com> wrote:
> No issues with adding all of these either. Go for it.
>
>
>
> On Fri, Oct 2, 2009 at 1:17 PM, mikelietz <cod...@gmail.com> wrote:
>
> > These additional two commits sound good to me as well. Consider them
> > added to the slate.
>
> > Is this a bad time to ask about one more cosmetic update, changing the
> > "Forgot your password?" button to "Reset password" as seen in trunk?
>
> > More votes, please.
>
> > --mikelietz
>
> > On Oct 1, 3:14 pm, rick c <rickcock...@gmail.com> wrote:
> > > On Sep 30, 4:26 pm, mikelietz <cod...@gmail.com> wrote:
>
> > > > As discussed on IRC, (http://drunkenmonkey.org/irc/habari/
> > > > 2009-09-23#T17-10-44 andhttp://
> > drunkenmonkey.org/irc/habari/2009-09-30#T20-12-07)
> > > > there are a few trunk commits that should get merged into the stable
> > > > branch.
>
> > > > 3726http://trac.habariproject.org/habari/changeset/3726
> > > > 3728http://trac.habariproject.org/habari/changeset/3728
> > > > 3693http://trac.habariproject.org/habari/changeset/3693
> > > > 3743http://trac.habariproject.org/habari/changeset/3743
>
> > > > Can we consider making these into an 0.6.3 release? Anything else that
> > > > should go in there?
>
> > > Two other security-related revisions to consider for a 0.6.3 release
>

> >http://trac.habariproject.org/habari/changeset/3745http://trac.habari...

[Ali B.]

Thanks Mike.
Tested upgrades from 0.6, 0.6.1 and 0.6.2. Upgrading from 0.5 worked as expected for me as well.
Security related fixes seem to be in place. I don't have any of these PHP versions either so I could not test that.

--
Ali
http://awhitebox.com

[rick c]

Just as a reminder to everyone, the test procedures are outlined at

http://wiki.habariproject.org/en/Test_Procedure

Rick

[Michael Nacos]

I'll do some postgresql tests this weekend, if this release can wait until then :-)

2009/10/7 rick c <rickc...@gmail.com>

[mikelietz]

If you can test PostgreSQL that would be great - please keep us
posted.

On Oct 8, 4:46 am, Michael Nacos <m.na...@gmail.com> wrote:
> I'll do some postgresql tests this weekend, if this release can wait until
> then :-)
>

> 2009/10/7 rick c <rickcock...@gmail.com>

[Michael Nacos]

Hi, I have just run some tests with the proposed 0.6.3 on a PHP 5.2.6 + lighttpd + Postgresql 8.3 + Debian Lenny box and I am happy to report no Postgresql-related issues. I have tried installing from scratch and migrating from 0.6.2.

One issue that did come up during installing from scratch involves the autop plugin (there was an error message that it doesn't provide all the methods of its interface or something along these lines). I deleted its directory and installation succeeded.

cheers, Michael

[Ali B.]

Thanks for testing it Michael.

Not sure about the error though. No issues with the autop plugin so far here. Can someone else try to reproduce this please?

--
Ali/dmondark
http://awhitebox.com

[mikelietz]

Confirmed I get the same error.

It would seem the autop plugin seems to have snuck into the /dist
makaanga zipfile. I'd recommend grabbing it from SVN, if possible.

If not, you can try this - I exported the branch, and zipped it:
http://dropoid.com/6o+
mikelietz

[mikelietz]

r3707 needed to be merged - I wasn't able to authorize the flickr
silo, and other remoterequests would likely fail.

As such, you should svn up, or you can try this zip I exported:
http://dropoid.com/6p+

Thanks all for helping test this release!

[mikelietz]

Another merge, another zip. Thanks dmondark for adding 3178!

New download if you're not using SVN for testing: http://dropoid.com/6q+

I'm having trouble with the wordpress importer, but it may be my host.
I get errors that the MySQL server has "gone away". Anybody else tried
out an import from a remote server?

mikelietz

[mikelietz]

Actually, disregard the previous zip. http://dropoid.com/6r+ is the
working makaanga download, for testing, including r3178.

On Oct 12, 2:16 pm, mikelietz <cod...@gmail.com> wrote:

[mikelietz]

Has anybody else successfully imported a wordpress database from a non-
localhost database? I've tried it from two different installs now
(same target, different instances) but I keep those getting errors the
server going away.

On Oct 12, 2:16 pm, mikelietz <cod...@gmail.com> wrote:

[mikelietz]

I have now successfully imported a WP database (the sample 2.71 from -
dev) remotely. My problems were due to my host shutting down remote
mysql access.

This is now up for a vote. Please go to http://groups.google.com/group/habari-dev/t/b6cbfa0e3d3610af

[mikelietz]

This has now been released. See http://habariproject.org/en/habari-063-released
for more info.

mikelietz

[Michael Nacos]

running 0.6.3 already :-)

2009/10/16 mikelietz <cod...@gmail.com>