Release 3.1.8

- Updated Spring-boot-parent.
- Changed elixirBonaFideStatus calculation.
- Fixed setting "from" in MimeMessage in Peruns notifications.
- Added method to get list of resource attributes by their names.
- Fixed escaping values in XML in MU password manager.
- Escape HTML in users name in GUI.
- Added alternativeLoginName UES attribute (stored by default).
- Removed duplicit call of attribute value check
  for member-resource attributes.
- Fixed auditer message "Group was moved.".
- Fixed regexes in patterns in LDAPc, we use DOTALL instead
  of MULTILINE modifier. It caused LDAPc to be stuck in resolving
  group messages on "Group was moved." even if it wasn't this kind
  of message.

Author: zlamalp

perun-auditer-exporter/pom.xml

@@ -6,7 +6,7 @@
 	<parent>
 		<artifactId>perun</artifactId>
 		<groupId>cz.metacentrum</groupId>
-		<version>3.1.7</version>
+		<version>3.1.8</version>
 	</parent>
 
 	<groupId>cz.metacentrum.perun</groupId>

perun-auditparser/pom.xml

@@ -6,7 +6,7 @@
 	<parent>
 		<artifactId>perun</artifactId>
 		<groupId>cz.metacentrum</groupId>
-		<version>3.1.7</version>
+		<version>3.1.8</version>
 	</parent>
 
 	<groupId>cz.metacentrum.perun</groupId>

perun-base/pom.xml

@@ -6,7 +6,7 @@
 	<parent>
 		<artifactId>perun</artifactId>
 		<groupId>cz.metacentrum</groupId>
-		<version>3.1.7</version>
+		<version>3.1.8</version>
 	</parent>
 
 	<groupId>cz.metacentrum.perun</groupId>

perun-base/src/main/java/cz/metacentrum/perun/core/api/CoreConfig.java

@@ -431,6 +431,11 @@ private void createAttributeDefinitions(String extSourceType, List<String> attrN
 					attr.setDisplayName("schacHomeOrganization");
 					attr.setDescription("domain name of person's organization (SChema for Academia)");
 					break;
+				case "alternativeLoginName":
+					attr.setDisplayName("alternativeLoginName");
+					attr.setDescription("person's alternative login name in organization (not related to IdP identity).");
+				// forwardedScopedAffiliation - is not standardized and published by the proxy itself, we do not
+				// set it back to the Perun (UES attribute), but we can read it (for registrar purpose).
 				case "dn":
 					attr.setDisplayName("certificate DN");
 					attr.setDescription("Distinguished Name from X509 digital certificate");

perun-base/src/main/resources/perun-base.xml

@@ -96,7 +96,7 @@
 				<prop key="perun.DBInitializatorEnabled">false</prop>
 				<prop key="perun.userExtSources.persistent">PERUN,[\w\d]*</prop>
 				<prop key="perun.proxyIdPs"/>
-				<prop key="perun.attributesForUpdate.idp">mail,cn,sn,givenName,o,ou,eppn,affiliation,displayName,uid,epuid,schacHomeOrganization,forwardedScopedAffiliation</prop>
+				<prop key="perun.attributesForUpdate.idp">mail,cn,sn,givenName,o,ou,eppn,affiliation,displayName,uid,epuid,schacHomeOrganization,forwardedScopedAffiliation,alternativeLoginName</prop>
 				<prop key="perun.attributesForUpdate.x509">mail,cn,o,dn,cadn,certificate</prop>
 				<prop key="perun.instanceId">AOJ26J3D9DCK3OA7</prop>
 				<prop key="perun.instanceName">LOCAL</prop>

perun-cabinet/pom.xml

@@ -6,7 +6,7 @@
 	<parent>
 		<artifactId>perun</artifactId>
 		<groupId>cz.metacentrum</groupId>
-		<version>3.1.7</version>
+		<version>3.1.8</version>
 	</parent>
 
 	<groupId>cz.metacentrum.perun</groupId>

perun-core/pom.xml

@@ -6,7 +6,7 @@
 	<parent>
 		<artifactId>perun</artifactId>
 		<groupId>cz.metacentrum</groupId>
-		<version>3.1.7</version>
+		<version>3.1.8</version>
 	</parent>
 
 	<groupId>cz.metacentrum.perun</groupId>
@@ -202,6 +202,11 @@
 			<artifactId>opencsv</artifactId>
 		</dependency>
 
+		<dependency>
+			<groupId>org.apache.commons</groupId>
+			<artifactId>commons-text</artifactId>
+		</dependency>
+
 		<dependency>
 			<groupId>com.google.apis</groupId>
 			<artifactId>google-api-services-admin-directory</artifactId>

perun-core/src/main/java/cz/metacentrum/perun/core/api/AttributesManager.java

@@ -440,6 +440,22 @@ public interface AttributesManager {
 	 */
 	List<Attribute> getAttributes(PerunSession sess, Group group, List<String> attrNames) throws PrivilegeException, InternalErrorException, GroupNotExistsException;
 
+	/**
+	 * Get all attributes associated with the resource which have name in list attrNames (empty too).
+	 * Virtual attribute too.
+	 * <p>
+	 * PRIVILEGE: Get only those attributes the principal has access to.
+	 *
+	 * @param sess      perun session
+	 * @param resource     to get the attributes from
+	 * @param attrNames list of attributes' names
+	 * @return list of attributes
+	 * @throws PrivilegeException      if privileges are not given
+	 * @throws InternalErrorException  if an exception raise in concrete implementation, the exception is wrapped in InternalErrorException
+	 * @throws ResourceNotExistsException if the resource not exists in Perun
+	 */
+	List<Attribute> getAttributes(PerunSession sess, Resource resource, List<String> attrNames) throws PrivilegeException, InternalErrorException, ResourceNotExistsException;
+
 	/**
 	 * Get all attributes associated with the member which have name in list attrNames (empty too)
 	 * Virtual attributes too.

perun-core/src/main/java/cz/metacentrum/perun/core/bl/AttributesManagerBl.java

@@ -352,6 +352,19 @@ public interface AttributesManagerBl {
 	 */
 	List<Attribute> getAttributes(PerunSession sess, Group group, List<String> attrNames) throws InternalErrorException;
 
+	/**
+	 * Get all attributes associated with the resource which have name in list attrNames (empty too).
+	 * Virtual attribute too.
+	 *
+	 * @param sess perun session
+	 * @param resource to get the attributes from
+	 * @param attrNames list of attributes' names
+	 * @return list of attributes
+	 *
+	 * @throws InternalErrorException if an exception raise in concrete implementation, the exception is wrapped in InternalErrorException
+	 */
+	List<Attribute> getAttributes(PerunSession sess, Resource resource, List<String> attrNames) throws InternalErrorException;
+
 	/**
 	 * Get all attributes associated with the vo which have name in list attrNames (empty and virtual too).
 	 *

perun-core/src/main/java/cz/metacentrum/perun/core/blImpl/AttributesManagerBlImpl.java

@@ -363,6 +363,13 @@ public List<Attribute> getAttributes(PerunSession sess, Group group, List<String
 		return getAttributesManagerImpl().getAttributes(sess, group, attrNames);
 	}
 
+	@Override
+	public List<Attribute> getAttributes(PerunSession sess, Resource resource, List<String> attrNames) throws InternalErrorException {
+		if (attrNames.isEmpty()) return new ArrayList<>();
+		return getAttributesManagerImpl().getAttributes(sess, resource, attrNames);
+	}
+
+	@Override
 	public List<Attribute> getAttributes(PerunSession sess, Member member, List<String> attrNames, boolean workWithUserAttributes) throws InternalErrorException {
 		List<Attribute> attributes = this.getAttributes(sess, member, attrNames);
 
@@ -3832,7 +3839,6 @@ public void removeAllAttributes(PerunSession sess, Resource resource, Member mem
 		for (Attribute attribute : attributes) attribute.setValue(null);
 		try {
 			checkAttributesValue(sess, resource, member, attributes);
-			checkAttributesValue(sess, resource, member, attributes);
 		} catch (WrongAttributeAssignmentException ex) {
 			throw new ConsistencyErrorException(ex);
 		}