Metacat

throw InvalidToken when session is null

correct typo

Send the correct node id (the target node) when calling setReplicationStatus()

get pid from normal params, not the URL -- the client should include them in the params -- and not as a serialized "object" since it is just a string value

check obsoletes and obsoletedBy PIDs when updating objects

delete system metadata when MN.delete() is called.

throw InvalidToken when there is no session (certificate) provided in update() and delete() methods.

Calls to setReplicationStatus() can only be made by a CN or the MN that is the target replica node. Implement this service restriction in CNodeService using CertificateManager's equalsDN() method.

The ReplicationStatus parameter is 'status', not 'replicationStatus', in the architecture documentation.

Although parameters for setReplicationStatus() are expected as multipart/form-data fields, they seem to be added to the HttpServletRequest as URL parameters during the proxy forwarding in d1_cn_rest_proxy. Test for their existence as multipart fields, but fall back to request params, otherwise, throw an InvalidRequest exception.