Fixes and enhancements added to SVN

[Russ Johnson]

I have committed quite a few fixes and enhancements to SVN tonight. If
you pull the updates down from SVN, you will note there is a
mysql_update.sql file that needs to be run to update your db. I havent
done the mssql update file yet but you can look at the mysql one and
update your db accordingly... its a simple change to the user table.

There were quite a few changes but the biggest is probably adding a
role to the users table. This has allowed me to lock down the project
creation methods and links to only users who are admin role.

This role will probably be used to add the read-only public views as
well in the next few days.


272
2 files
01:19 - AngryFly
Reference #70 - updated the coldbox config to 2.6 settings and added a
few settings to the environments config for development

271
1 file
01:11 - AngryFly

270
2 files
01:04 - AngryFly
- fixed a display issue with the ticket properties

269
2 files
00:53 - AngryFly
- added the role column to the user table scripts for mssql

268
1 file
00:50 - AngryFly
- added the role column to the user table script

267
1 file
00:44 - AngryFly
- updated event args to duck typing in Ticket handler

266
5 files
00:34 - AngryFly
- updated security interceptor to check for roles in the security
rules checks
- updated the dashboard sidebar and mainprojectnav to check for admin
role for new project creation
- added security rule for new projects
- added session.role to user initialization

265
1 file
00:17 - AngryFly
- added sql update scripts to support addition of user role column

264
4 files
00:11 - AngryFly
- added user role for setting admin status

263
1 file
23:45 - AngryFly
- added assigned ticket count to top user area of profile screen

262
1 file
23:43 - AngryFly
- fixed a bug that was showing the wrong menu when viewing a user
profile

261
8 files
01:43 - AngryFly
Reference #69 - converted all handlers to use duck-typing for event
argument.

[Mark Mandel]

Russ -

I haven't installed SWG yet, can I still do that with the current SVN
mySQL install script, or do I need to run both?

Mark

--
E: mark....@gmail.com
W: www.compoundtheory.com

[Luis Majano]

Russ,

I started to glance the code and will give you some updates soon.

On the security interceptor I see you have preEvent security turned
on. Are you sure you want this? This basically checks for
authorization before any event execution even internally by running
runEvent() methods. If that is the case, then you are set. If not,
having it to false, basically enables security on the preProcess
interception point. IT all depends on your use case.

Another observation: Will you stay with the xml rules security file or
are you planning to manage it via the DB?

> E: mark.man...@gmail.com
> W:www.compoundtheory.com

[Russ Johnson]

No you dont need to run both. I updated the mysql and mssql install
scripts with the new column info... so for a clean install you only
need the one file....

The update is only there as a convenience for the folks who have
already installed it and have some data entered already.

I also fixed a permissions issue on the avatars folder on
Skweegee.com. I noticed today that several of you had updated your
avatars but the file never uploaded due to incorrect permissions.
Thats fixed now so feel free to upload your avatar now!

- Russ

> E: mark.man...@gmail.com
> W:www.compoundtheory.com

[Russ Johnson]

Im thinking about moving it to the DB in the future just to make it
easier to manage and update.

I will look at the preEvent setting. I may have read the docs wrong
and set it errantly.

Thanks!