Mercurial > libervia-pubsub
view CHANGELOG @ 330:82d1259b3e36
backend, pgsql storage: better items/notification handling, various fixes:
- replaced const.VAL_AMODEL_ROSTER by const.VAL_AMODEL_PUBLISHER_ROSTER to follow change in pgsql schema
- implemented whitelist access model
- fixed bad access check during items retrieval (access was checked on recipient instead of requestor/sender)
- getItemsData and notification filtering now use inline callbacks: this make these complexe workflows far mor easy to read, and clarity is imperative in these security critical sections.
- publisher-roster access model now need to have only one owner, else it will fail. The idea is to use this model only when owner=publisher, else there is ambiguity on the roster to use to check access
- replaced getNodeOwner by node.getOwners, as a node can have several owners
- notifications filtering has been fixed in a similar way
- psql: simplified withPEP method, pep_table argument is actually not needed
- removed error.NotInRoster: error.Forbidden is used instead
- notifications now notify all the owners, not only the first one
author | Goffi <goffi@goffi.org> |
---|---|
date | Sun, 26 Mar 2017 20:52:32 +0200 |
parents | 642dffb9d6f1 |
children | b80f7848d8a2 |
line wrap: on
line source
v. 0.2 (02/12/2015): - schema updated (unversioned => version 1) - sync with Idavoll - use of sat.tmp.wokkel as a workaround for change not merged upstream - RSM (XEP-0059) implementation - MAM (XEP-0313) implementation - Namespace Delegation (XEP-0355) implementation - Privileged Entity (XEP-0356) implementation - removed remote-roster hack - SàT PubSub can be used as a PEP service (PEP implementation not complete yet) - item publisher is enforced - categories handling (not complete) v 0.1.1 (09/09/2014): bugfix release v 0.1.0 (24/02/2014): ** FIRST PUBLIC RELEASE **