Synnefo

quotaholder: Do not check provision integrity

The API is responsible to provide valid data to the backend.

astakos: Improve printing in quota-verify

Also add option to delete project and user holdings that do not correspond
to actual astakos entities.

astakos: Adapt to new project/app scheme

astakos: Introduce base projects

Every user is associated with a special-purpose `base' project. Its
mission is to manage the user's base quota.

astakos: Mark project membership as initialized

Add flag `initialized' on ProjectMembership. It is set to true once a user
is accepted. It is used to distinguish users that have registered
project quota (but may have been removed since then).

astakos: Fill grants' project_capacity

Each resource grant that a project provides is now also associated with
a project-level limit. This is set by consulting the existing user-level
limit and the max members allowed. If the latter limit is not set, we
consider the project's current number of active members.

astakos: Make limit_on_members_number a bigint

We need bigint in order to represent infinite as 2**63-1.

astakos: Store all project info on the project model

A project entry will contain all information needed to operate a project.
An application will store just the information provided by the applicant.

astakos: Typo fix

astakos: Refactor notification code

Introduce generic notify functions that consult a dict for a given action.

astakos: Introduce private projects

A private project can only be accessed by its owner and its members.
No user can join the project; but the owner can enroll members.

astakos: Change contact form textarea size

astakos oa2: Fix request authorisation code failures due to unicode issue

If the object to be urlencoded has its own urlencode() method,
use this instead.

Refs: #4971

cyclades: Improvements to Astakos stats

Improve the exposed stats from the Astakos API and the way they are
displayed in 'stats-astakos' management command.

astakos: Fix bug in Astakos stats view

'ASTAKOS_AUTH_URL' setting is not present in Astakos node.

Fix stdout/stderr write in astakos/quota commands

Write actual command output and user prompts to stdout; error and progress
messages to stderr.

astakos oa2: Restrict redirect URI length during client registration.

Apply the check in the oauth2-client-add snf-manage command.

Refs: #4804

astakos: Filter for project-list table

astakos: Table manipulation style improvments

astakos: Extend form.innerlabels cookie bug fix

astakos: Django 1.4.1 compatibility

astakos: Update tests

quotaholder: Delete holdings of non-accepted users

Delete all holdings with a holder that does not correspond to an accepted
user uuid. This is expected to affect only holdings with zero usage, because
an astakos migration has previously accepted users with non-zero usage for...

astakos: Accept users with non-zero quota usage

Due to a non-handled case during the introduction of the user moderation
framework, there can exist non-accepted users with non-zero quota usage.
This can have happened if a user was set inactive before that migration....

quotaholder: Revert holding deletion

Revert deletion of holdings for non accepted users, introduced in cfc934f.

astakos oa2: Handle failures due to too long redirect urls

Change database field to TextField in order to avoid restrictions on the
redirect url lengths
Update tests

This fix introduces a database migration of the oa2 app

Refs: #4804

astakos: 'activation' -> 'verification'

Change all Astakos messages to reflect the new sign up procedure:

• first send a verification email
• user clicks on verification link
• mark as pending moderation
• activate

astakos: Handle third party unverified user change password form submition

astakos: Improved email validator

Custom EmailValidator class backported from django 1.6

astakos: Prerender password input value in profile form

astakos: Auth provider presentation fix

prevent encoding errors

quotaholder: Delete holdings of non-accepted users

Users would previously acquire quotas on email verification; this is now
done on user acceptance. We delete holdings for non-moderated and for
rejected users.

astakos: More logging fixes

pithos: Fix view issue with unicode paths

astakos: Hide empty project list in view

astakos: Set initial signup values if available

prefill third party signup form with initial values (first name, last name,
email) if available in the third party provider response.

Conflicts:

snf-astakos-app/astakos/im/views/target/shibboleth.py

astakos: Log shibboleth exception and merge fixes

astakos: Fix test

astakos oa2: Add copyright notes

astakos oa2: Add access_token field

Distinguise offline and online token use

astakos oa2: rename settings and url prefixes

Change setting and url prefixes from `oa2` to
`oauth2`

astakos: Additional tests for validating access token

astakos: Minor changes in oa2 app

astakos: oa2 app

astakos: Introduce CRUD management commands for oa2 clients

astakos: Introduce api call for validating a temporary oa2 token

astakos: Ensure computed result gets returned

Relying on cache.get is not always safe

astakos: Cache endpoints in POST /tokens

Since endpoints are rarely altered, we speed up POST /tokens by caching
them.

quotaholder: Reuse holding IDs in set_quota

For efficiency reasons, commit 20c6de3 deletes and recreates holdings
instead of updating them one by one. In order not to exhaust the IDs, we
reuse the deleted ones.

astakos: Lock user in im views

Make sure that views modifying users run in a transaction and lock users
before updating.