Project

General

Profile

Statistics
| Revision:
  • svn:ignore: build
  • svn:mergeinfo: /branches/D1_0_6_2_BRANCH:6107-6121

# Date Author Comment
7081 03/19/2012 12:40 PM ben leinfelder

use scope prefix (knb-lter-%) for random test doc population

7080 03/19/2012 12:33 PM ben leinfelder

include new jars for CN.delete() interface
https://redmine.dataone.org/issues/2506

7079 03/19/2012 10:12 AM ben leinfelder

use isAdminAuthorized() to check access to CN.create(). Note this method takes a pid and permission parameter and neither is used. Also removed the NotFound exception because it would never come up.

7078 03/19/2012 10:01 AM ben leinfelder

check that caller is CN/admin for CN.delete()
https://redmine.dataone.org/issues/2506

7077 03/19/2012 09:52 AM ben leinfelder

include CN.delete()
https://redmine.dataone.org/issues/2506

7076 03/16/2012 04:07 PM Chris Jones

Notify each replica MN when critical portions of system metadata change so the MN can pull the latest copy into its store. AccessPolicy and RightsHolder changes are the most critical for the MN to keep updated on.

7075 03/16/2012 11:40 AM Chris Jones

Only allow CNs to call MN.synchronizationFailed() by calling isAdminAuthorized(). The pid must also be valid.

7074 03/15/2012 07:50 PM Chris Jones

Modify CNodeService.setReplicationStatus() slightly to restrict MN-based calls to only set the status to COMPLETED. The CNs should be setting failures or invalidations, or the status can remain at QUEUED or REQUESTED, and the MNAuditTask can revisit those replicas as needed.

7073 03/15/2012 07:14 PM Chris Jones

Add a notifyReplicaNodes() method that calls MNStorage.systemMetadataChanged() on MN replica nodes for a given object identifier. This will be called when there are changes to AccessPolicy and rights holder since these are critical access metadata for an MN, but they can only be changed on the CN.

7072 03/15/2012 12:10 PM Chris Jones

Add some debugging statements in isAuthorized().

7071 03/15/2012 12:08 PM Chris Jones

In setReplicationStatus(), first check for a replica target MN subject match with the session subject. If this fails, look to see if CN admin access is allowed. Otherwise throw NotAuthorized. Addresses https://redmine.dataone.org/issues/2494

7070 03/15/2012 11:46 AM ben leinfelder

do not allow "Metacat-conforming" identifiers to be used. "test.1.001" is interpreted as "test.1.1" which renders "test.1.002" unusable unless a traditional Metacat "update" is used for that id/revision which contradicts the DataONE use of Identifiers that have no lexical requirements for revisions.

7069 03/15/2012 08:08 AM ben leinfelder

check for session when checking administrative authorization

7068 03/14/2012 12:02 PM Chris Jones

Remove individual calls to isAdminAuthorized() in favor of the centralized isAuthorized() call that handles it now.

7067 03/14/2012 11:57 AM Chris Jones

Incorporate isAdminAuthorized() into isAuthorized() for blanket CN access to objects.

7066 03/13/2012 04:00 PM ben leinfelder

check for null Session before continuing with setReplicationStatus()
https://redmine.dataone.org/issues/2476#note-3

7065 03/13/2012 03:09 PM ben leinfelder

do not attempt to parse empty file for the failure (BaseException serialization). There are cases when this is not given (failure="") when there is not a failure.
https://redmine.dataone.org/issues/2476

7064 03/13/2012 03:05 PM ben leinfelder

check for null session (public) calls to MN.replicate() before passing it to the asynchronous implementation

7063 03/13/2012 02:58 PM ben leinfelder

do not replicate if session is null

7062 03/13/2012 02:19 PM ben leinfelder

throw not authorized when attempting to getReplica as an invalid/non-existent node

7061 03/13/2012 12:19 PM ben leinfelder

transitive properties for mapped subjects:
-group membership
-verified flag
https://redmine.dataone.org/issues/2430
https://redmine.dataone.org/issues/2432

7060 03/13/2012 11:24 AM ben leinfelder

check group membership defined at group level (in addition to membership defined as part of of the Person level)
https://redmine.dataone.org/issues/2429

7059 03/13/2012 10:43 AM ben leinfelder

logging for permission checks - trying to nail down details of MN checking

7058 03/13/2012 10:08 AM ben leinfelder

use Event.CREATE.xmlValue() when converting "insert" to "create"
http://redmine.dataone.org/issues/2471

7057 03/12/2012 08:20 PM ben leinfelder

log records should be inclusive of fromDate parameter (>=)
https://redmine.dataone.org/issues/2471

7056 03/12/2012 04:38 PM ben leinfelder

use Timestamp object from results, not a new Date object from that Timestamp object

7055 03/12/2012 12:12 PM ben leinfelder

add an alternative method for loading system metadata identifiers but leave it commented out. We may find that using the ObjectList method is too much overhead, but it will always be consistent with what metacat reports for listObjects().

7054 03/12/2012 12:09 PM ben leinfelder

add note about long-running load for shared system metadata map

7053 03/12/2012 12:08 PM ben leinfelder

increase amount of text the 'xml_path_index.path' column can accommodate. I was seeing errors like this during indexing:
knb 20120312-11:42:05: [ERROR]: DocumentImpl.buildIndex - SQL Exception while indexing document knb-lter-and.3147 : ERROR: value too long for type character varying(1000) [edu.ucsb.nceas.metacat.DocumentImpl]

7052 03/09/2012 12:40 PM pippin

Added the following values to the HTTPD site configuration:
JkOptions +ForwardURICompatUnparsed
AllowEncodedSlashes On
AcceptPathInfo On

7051 03/08/2012 04:16 PM Chris Jones

If PID is not part of the multipart params, we end up with a NullPointerException. Throw an InvalidRequest in this case rather than ServiceFailure resulting from the NPE.

7050 03/08/2012 03:52 PM ben leinfelder

add note about https://redmine.dataone.org/issues/2451 to the documentation

7049 03/08/2012 02:21 PM ben leinfelder

translate "insert" events in Metacat as Event.CREATE events ("create") for DataONE
https://redmine.dataone.org/issues/2461

7048 03/08/2012 11:18 AM ben leinfelder

for good measure, use the D1 encoding util for url decoding the parameters for listObjects
https://redmine.dataone.org/issues/2460

7047 03/08/2012 10:42 AM ben leinfelder

log record paging:
-use start and count parameters
-if start+count exceeds the total number of records, then only return from start to the end of the list
-if start exceeds total record count, start at the end of the list (will be empty list)
https://redmine.dataone.org/issues/2458

7046 03/07/2012 02:49 PM Chris Jones

Use 'fromDate' and 'toDate' as listObject param filters to comply with the API documentation. We had changed this in MNResourceHandler, but somehow missed it in CNResourceHandler.

7045 03/07/2012 02:30 PM ben leinfelder

check whether mapping (

7044 03/06/2012 08:26 PM ben leinfelder

catch additional NotFound exception for: "do not include log entries for documents that the caller is not allowed to read." https://redmine.dataone.org/issues/2444

7043 03/06/2012 02:03 PM ben leinfelder

serialize exception in header for describe response when there is a BaseException
https://redmine.dataone.org/issues/2440

7042 03/06/2012 01:41 PM ben leinfelder

do not include log entries for documents that the caller is not allowed to read. https://redmine.dataone.org/issues/2444

7041 03/06/2012 01:35 PM ben leinfelder

use revision provided in the docid when looking up guid. had been using latest revision which I think incorrectly reports on the log history.
noticed this when looking at: https://redmine.dataone.org/issues/2444

7040 03/05/2012 06:36 PM Chris Jones

Add testIsEquivIdentityAuthorized() to ensure that [MN|CN].isAuthorized() is authorizing equivalent identities correctly. Note: Using TypeMarshaller.marshalTypeToOutputStream(type, System.out) to serialize an object seems to jack up output to stdout - not sure why.

7039 03/05/2012 06:30 PM Chris Jones

A minor change to isAuthorized() - compare each Person in the SubjectInfo (not just the primary Subject) since each person could have an equivalent identity mapped to the primary Subject. Add debug logging for the comparison.

7038 03/05/2012 04:36 PM ben leinfelder

added debug logging
https://redmine.dataone.org/issues/2429

7037 03/05/2012 04:27 PM ben leinfelder

check if verified flag is null before evaluating (NPE during MN Auth test)
https://redmine.dataone.org/issues/2429

7036 03/05/2012 12:32 PM ben leinfelder

throw InvalidToken when there is invalid SubjectInfo embedded in the certificate
https://redmine.dataone.org/issues/2431

7035 03/05/2012 09:58 AM ben leinfelder

fixed Oracle script issues identified by: Brian Turcotte <>. He provided the fixes, so thank you!

7034 03/01/2012 02:20 PM ben leinfelder

do not include stylesheet for list of checksum algorithms -- there is no template for it and therefore looks blank in a browser

7033 02/29/2012 02:17 PM ben leinfelder

update docs to match node registration behavior: we do not assign them nodeIds at registration

7032 02/24/2012 03:31 PM Chris Jones

Roll back the nodeId default to blank (used to indicate registration on new installs - thanks Matt.)

7031 02/24/2012 02:26 PM Chris Jones

Add a default nodeId in metacat.properties of 'urn:node:METACAT1' as a placeholder that needs to be changed on configuration.

7030 02/24/2012 02:21 PM Chris Jones

Globally change the property 'dataone.memberNodeId' to 'dataone.nodeId'. This is more useful for both MNs and CNs implemented in Metacat. Also, change D1NodeService.getLogRecords() to return log entries with the actual node id rather than the IP address (looks like a cut/paste error)....

7029 02/24/2012 09:46 AM ben leinfelder

throw InvalidToken when an invalid Permission is passed in. THis requires that internal calls to the method also check for this exception.
https://redmine.dataone.org/issues/2388

7028 02/23/2012 09:55 AM Matt Jones

Set mime type on images.

7027 02/23/2012 09:53 AM Matt Jones

Set mime type.

7026 02/22/2012 02:53 PM ben leinfelder

call deleteReplica when we get that request (looks like an undetected copy and paste error)

7025 02/22/2012 02:31 PM ben leinfelder

do not allow blank node references to be used.
https://redmine.dataone.org/issues/2362

7024 02/22/2012 02:27 PM ben leinfelder

only generate system metadata when the call comes from the legacy Metacat API, not the D1 API.
https://redmine.dataone.org/issues/2362 (I think this was the culprit)

7023 02/22/2012 12:47 PM ben leinfelder

do not "lookup" object format when retrieving system metadata -- just return what we have stored as the formatId and don't [erroneously] default it to binary when there's a problem with the lookup (cache or service or otherwise).
https://redmine.dataone.org/issues/2365

7022 02/21/2012 01:11 PM ben leinfelder

Get ReplicationPolicy correctly generated:
-tweak the regular expression for getting the pref/blocked node list for default replication policy.
-set blocked list (had mistakenly been two calls to set pref list)

7021 02/21/2012 10:55 AM ben leinfelder

actually, let's set the serialVersion during the MN.create() call so that the HZ map and the backing store have the same information immediately. Also, this is how the docs specify it.
http://mule1.dataone.org/ArchitectureDocs-current/design/SystemMetadata.html

7020 02/21/2012 10:08 AM ben leinfelder

if serialVersion is null, use defualt value of 0

7019 02/20/2012 03:39 PM ben leinfelder

handle both listing and getting checksums using the GET endpoint -- depends whether or not a pid is included in the URL
https://redmine.dataone.org/issues/2089

7018 02/20/2012 03:01 PM ben leinfelder

include systemmetadata and ore generation flags as "remembered" configuration values for the admin UI.

7017 02/20/2012 12:38 PM ben leinfelder

remove ID mapping when a create()/"insert" call fails so that subsequent calls do not return an IdentifierNotUnique error. In this case it was due to invalid XML.
https://redmine.dataone.org/issues/2341

7016 02/20/2012 12:20 PM ben leinfelder

use RC-3 DataONE jars and fix compilation error that arose. https://redmine.dataone.org/issues/2351

7015 02/17/2012 04:54 PM ben leinfelder

overload getAllDocidsByType() method for backward semtools compatibility

7014 02/16/2012 07:05 PM Chris Jones

Use 'a2dissite' to disable the default site (not 'a2ensite').

7013 02/16/2012 02:47 PM ben leinfelder

do not subset the list for MS generation testing -- at least not as the default in svn!

7012 02/15/2012 09:35 AM Chris Jones

CNodeService.listChecksumAlgorithms() was returning null rather than the list. Fixed.

7011 02/11/2012 04:56 PM ben leinfelder

restore "test" target that I nuked when adding runoneclass. (thanks, Chris)

7010 02/11/2012 11:36 AM Chris Jones

ObjectFormatCache.getFormat(String formatStr) has been deprecated, and now only takes a formatId instance to get a format from the cache. It also throws Service Failure and NotImplemented, so here just set the format to application/octet-stream in any case.

7009 02/11/2012 11:25 AM Chris Jones

Update D1NodeService to reflect new ObjectFormatCache signature.

7008 02/11/2012 10:08 AM Chris Jones

Adding the new d1 [common|libclient] RC2 jars from the D1_COMMON_JAVA_v1.0.1-RC2 and D1_LIBCLIENT_JAVA_v1.0.1-RC2 tags in the repository.

7007 02/09/2012 04:11 PM ben leinfelder

only run ORE generation for EML docs -- no need to run this for all documents (yikes!)

7006 02/09/2012 03:48 PM ben leinfelder

use IdMan method to find docids that do not already have system metadata records -- this lets us re-run without re computing system metadata for every entry (in case the process is interrupted). I haven' been using this option because I wanted to continually regenerate all SM for everything in my test DBs, but we are so close to release that I want to get this in there.

7005 02/09/2012 02:39 PM ben leinfelder

for testing: limit and randomize the docs to generate metadata for

7004 02/09/2012 08:39 AM ben leinfelder

FOR TESTING ONLY: limit number of records to 100 so that we can get an estimate

7003 02/08/2012 03:46 PM ben leinfelder

update the memberNodeId in existing system metadata only after the register/update is successful with the CN -- we can avoid unneeded SM updates in cases when the register/update fails because we gave the CN bad info that it rejects.
https://redmine.dataone.org/issues/2308

7002 02/08/2012 03:12 PM ben leinfelder

include member node id text field now that the CN is not assigning random Ids.
https://redmine.dataone.org/issues/2308

7001 02/08/2012 01:20 PM ben leinfelder

1. lookup and use the guid when processing obsoletes/obsoletedBy entries -- had previously been assuming localId==guid but now that we have introduced DOIs as part of the Metacat upgrade process, we may have DOIs for the guid that map to localIds.
2. base ORE guids on the localid of the data package they are describing and not on their DOI -- otherwise we might mash up the DOI prefix (or other id scheme that we are unaware of). By using resourceMapPreix + localId we are sure to have a valid localid and guid for the ORE map we create and add to the system

7000 02/08/2012 11:23 AM ben leinfelder

use updated authorization policies as discussed in:
https://redmine.dataone.org/issues/2277
and
http://epad.dataone.org/20120131-authn-authz-questions

6999 02/08/2012 10:58 AM ben leinfelder

refactor D1-specific upgrade utilities into their own package

6998 02/08/2012 10:53 AM ben leinfelder

remove createAndInsertSystemMetadat() method that acts on a single localId -- incorporated this into the localId-list-based method.

6997 02/08/2012 10:50 AM ben leinfelder

refactor IdentityManager.createSystemMetadata(sm) to be insertSystemMetadata(sm) so that it is clear that this method inserts the SM object into the backing store. This differentiates it from the "generation" methods we use when we need to create SM about pre-existing objects or objects we get from non-D1 api calls.

6996 02/08/2012 10:44 AM ben leinfelder

generate SystemMetadata during D1 registration (not 2.0.0 upgrade). This process runs in a thread and updates a metacat.properties value when it is complete.

6995 02/07/2012 09:54 PM ben leinfelder

getMultipartParameters() outside of debug block -- thanks Mark Reyes @ CDL for catching this.

6994 02/07/2012 04:53 PM ben leinfelder

dataone configuration and registration enhancements:
-include flag to disable D1 services, currently only the MN side enforces this
-do not allow multiple registration attempts if we have just submitted and are awaiting Node verification by the CN.
-do not allow configuration "bypass" if D1 settings have been configured previously....

6993 02/07/2012 03:18 PM ben leinfelder

use correct Collections import

6992 02/07/2012 11:08 AM ben leinfelder

Show "Update" button if this MemberNodeId is already registered with DataONE, otherwise use the "Register" label

6991 02/07/2012 09:54 AM ben leinfelder

match changes to MN service methods (return type as boolean)

6990 02/07/2012 09:31 AM ben leinfelder

updated d1 jars with latest libclient changes and objectformatcache use

6989 02/07/2012 03:12 AM Matt Jones

Updated configuration documentation in admin guide for Metacat DataONE section. Changed links in configuration utility to point at the Admin guide.

6988 02/07/2012 12:02 AM Matt Jones

Added new methods to generate a default replication policy based on properties from the metacat configuration. This is called during system metadata creation for objects that lack any system metadata.

6987 02/07/2012 12:00 AM Matt Jones

Modify admin configuration to include default replication policy. Extensively revised the DataONE configuration page, including new wording for intro, improved tooltips throughout, new arrangement of sections, and other cosmetic changes.

6986 02/06/2012 11:56 PM Matt Jones

Clean up warnings in class.

6985 02/06/2012 01:06 PM Matt Jones

Remove ability to edit NodeID from D1 configuration page. Fix update of contactSubject and dataone.ore.generated property name.

6984 02/06/2012 01:05 PM Matt Jones

Remove ability to edit NodeID from D1 configuration page. Fix update of contactSubject and dataone.ore.generated property name.

6983 02/06/2012 12:52 PM ben leinfelder

include flag indicating that system metadata generation has completed (useful for independent long-running thread)

6982 02/06/2012 12:38 PM ben leinfelder

handle "BIN" objects so as to avoid repeated calls to lookup the non-existent ObjectFormat