Release Notes - Spring JIRA

Release Notes - Spring Security - Version 2.0.0 - HTML format

Configure Release Notes

Sub-task

[SEC-639] - Update FilterChainProxy examples to use <filter-chain-map> syntax
[SEC-653] - Namespace configuration overview
[SEC-667] - Taglib changes as of SEC-309
[SEC-698] - Change references to contacts sample client directory
[SEC-766] - Rewrite ACL docs

Bug

[SEC-422] - BasicLookupStrategy - computeRepeatingSql contains bad SQL
[SEC-527] - Serialization Error in ACL cacheing (new acls packages)
[SEC-530] - ACLs: No way to insert an ACE at the first position in the ACE list
[SEC-547] - acls BasicLookupStrategy user too many (> 1) databasse connections
[SEC-572] - Cannot set ACL's parent to null
[SEC-589] - BasicLookupStrategy#readAclsById(ObjectIdentity[], Sid[]), throws exception, when a warning log would do
[SEC-590] - BasicLookupStrategy#readAclsById(ObjectIdentity[], Sid[]) has a loop that sometimes terminates prematurely
[SEC-602] - Acl (Acls) class ObjectIdentityRetrievalStrategyImpl doesn't work well with proxied objects
[SEC-655] - When inserting ACE's in a parent ACL it's possible to end up with a child ACL that has a stale reference to its parent
[SEC-669] - PrincipleSid.equals(..) is case sensitive
[SEC-670] - Deleting from ACL_OBJECT_IDENTITY can cause deadlocks under (load test)
[SEC-676] - Children Acls are not removed from cache when parent is deleted
[SEC-697] - It's not possible to change ACL owner
[SEC-750] - Support for JPA PersistenceContext annotation broken
[SEC-754] - Wrong byte array lenght used in Md4PasswordEncoder#encodePassword
[SEC-768] - Namespace throws IllegalStateException if no namespace filters are used and a entry-point-ref isn't set

Task

[SEC-743] - Update petclinic tutorial for Spring Security 2.0
[SEC-770] - Mark old org.springframework.security.acl module as deprecated

Improvement

[SEC-426] - Improve the ACL documentation.
[SEC-597] - AclImpl.setParent() throws Exception when changing parent to null
[SEC-703] - Expose customization of SQL used by <jdbc-user-service>
[SEC-753] - Import-Package versioning prevents usage of Spring > 2.5.0
[SEC-755] - Bundle-SymbolicName should follow Spring nameing conventions
[SEC-767] - Make session fixation protection check for committed response

Edit/Copy Release Notes

The text area below allows the project release notes to be edited and copied to another document.

Release Notes - Spring Security - Version 2.0.0
    
<h2>        Sub-task
</h2>
<ul>
<li>[<a href='https://jira.spring.io/browse/SEC-639'>SEC-639</a>] -         Update FilterChainProxy examples to use &lt;filter-chain-map&gt; syntax
</li>
<li>[<a href='https://jira.spring.io/browse/SEC-653'>SEC-653</a>] -         Namespace configuration overview
</li>
<li>[<a href='https://jira.spring.io/browse/SEC-667'>SEC-667</a>] -         Taglib changes as of SEC-309
</li>
<li>[<a href='https://jira.spring.io/browse/SEC-698'>SEC-698</a>] -         Change references to contacts sample client directory
</li>
<li>[<a href='https://jira.spring.io/browse/SEC-766'>SEC-766</a>] -         Rewrite ACL docs
</li>
</ul>
                
<h2>        Bug
</h2>
<ul>
<li>[<a href='https://jira.spring.io/browse/SEC-422'>SEC-422</a>] -         BasicLookupStrategy - computeRepeatingSql contains bad SQL
</li>
<li>[<a href='https://jira.spring.io/browse/SEC-527'>SEC-527</a>] -         Serialization Error in ACL cacheing (new acls packages)
</li>
<li>[<a href='https://jira.spring.io/browse/SEC-530'>SEC-530</a>] -         ACLs: No way to insert an ACE at the first position in the ACE list
</li>
<li>[<a href='https://jira.spring.io/browse/SEC-547'>SEC-547</a>] -         acls BasicLookupStrategy user too many (&gt; 1) databasse connections
</li>
<li>[<a href='https://jira.spring.io/browse/SEC-572'>SEC-572</a>] -         Cannot set ACL&#39;s parent to null
</li>
<li>[<a href='https://jira.spring.io/browse/SEC-589'>SEC-589</a>] -         BasicLookupStrategy#readAclsById(ObjectIdentity[], Sid[]), throws exception, when a warning log would do
</li>
<li>[<a href='https://jira.spring.io/browse/SEC-590'>SEC-590</a>] -         BasicLookupStrategy#readAclsById(ObjectIdentity[], Sid[]) has a loop that sometimes terminates prematurely
</li>
<li>[<a href='https://jira.spring.io/browse/SEC-602'>SEC-602</a>] -         Acl (Acls) class ObjectIdentityRetrievalStrategyImpl doesn&#39;t work well with proxied objects
</li>
<li>[<a href='https://jira.spring.io/browse/SEC-655'>SEC-655</a>] -         When inserting ACE&#39;s in a parent ACL it&#39;s possible to end up with a child ACL that has a stale reference to its parent
</li>
<li>[<a href='https://jira.spring.io/browse/SEC-669'>SEC-669</a>] -         PrincipleSid.equals(..) is case sensitive
</li>
<li>[<a href='https://jira.spring.io/browse/SEC-670'>SEC-670</a>] -         Deleting from ACL_OBJECT_IDENTITY can cause deadlocks under (load test)
</li>
<li>[<a href='https://jira.spring.io/browse/SEC-676'>SEC-676</a>] -         Children Acls are not removed from cache when parent is deleted
</li>
<li>[<a href='https://jira.spring.io/browse/SEC-697'>SEC-697</a>] -         It&#39;s not possible to change ACL owner
</li>
<li>[<a href='https://jira.spring.io/browse/SEC-750'>SEC-750</a>] -         Support for JPA PersistenceContext annotation broken
</li>
<li>[<a href='https://jira.spring.io/browse/SEC-754'>SEC-754</a>] -         Wrong byte array lenght used in Md4PasswordEncoder#encodePassword
</li>
<li>[<a href='https://jira.spring.io/browse/SEC-768'>SEC-768</a>] -         Namespace throws IllegalStateException if no namespace filters are used and a entry-point-ref isn&#39;t set
</li>
</ul>
        
<h2>        Task
</h2>
<ul>
<li>[<a href='https://jira.spring.io/browse/SEC-743'>SEC-743</a>] -         Update petclinic tutorial for Spring Security 2.0
</li>
<li>[<a href='https://jira.spring.io/browse/SEC-770'>SEC-770</a>] -         Mark old org.springframework.security.acl module as deprecated
</li>
</ul>
    
<h2>        Improvement
</h2>
<ul>
<li>[<a href='https://jira.spring.io/browse/SEC-426'>SEC-426</a>] -         Improve the ACL documentation.
</li>
<li>[<a href='https://jira.spring.io/browse/SEC-597'>SEC-597</a>] -         AclImpl.setParent() throws Exception when changing parent to null
</li>
<li>[<a href='https://jira.spring.io/browse/SEC-703'>SEC-703</a>] -         Expose customization of SQL used by &lt;jdbc-user-service&gt;
</li>
<li>[<a href='https://jira.spring.io/browse/SEC-753'>SEC-753</a>] -         Import-Package versioning prevents usage of Spring &gt; 2.5.0
</li>
<li>[<a href='https://jira.spring.io/browse/SEC-755'>SEC-755</a>] -         Bundle-SymbolicName should follow Spring nameing conventions
</li>
<li>[<a href='https://jira.spring.io/browse/SEC-767'>SEC-767</a>] -         Make session fixation protection check for committed response
</li>
</ul>