Issues resolved in CollabNet TeamForge 8.0

Security

The following are the security related issues that have been fixed:

• User accounts were not locked even after exceeding the maximum number of failed login attempts via SVN client, which is now fixed.
• Accessing an invalid URL of ViewVC now displays the appropriate Error 404 (‘The Page cannot be found’) page.
• The user picker pop-up window is now accessible via valid user sessions only.
• When an HTML attachment link is clicked, instead of opening and displaying the content directly, the document is now downloaded to the appropriate location if the SAFE_DOWNLOAD_MODE token is set to ‘all’.
• Issues while uploading certain files from the Create Linked Application page have been fixed.
• The XSS/CSRF vulnerabilities found while providing email information have been fixed.

Tracker

Artifact change log

The artifact change log is now updated for actions such as removal of users from a project and deletion of users from a site.

Workflow

An issue that prevented users with global project roles from seeing all the list values of the STATUS field is now fixed. The STATUS field in the View Artifact page now shows all the list values for all users in a project group, including users with global project roles.

Tracker cloning/Project template creation

TeamForge 8.0 migration script can now remove all orphan records and field_value references, if any. This fixes an issue that prevented tracker cloning and project template creation.

Tracker update notification emails

Tracker update notification emails now contain more specific information about fields and values that are either added or modified.

Current date in planning folder burndown charts

'Now' in planning folder burndown chart refers to the current date of the TeamForge server and not the GMT date/time as was shown earlier.

Text wrapping in multi-line text fields

As multi-line text fields in View Artifact and Print Preview pages were not text-wrapping, users with View Only tracker permission had a readability issue, which is now fixed. Multi-line text content is now wrapped perfectly within the text box.

Simbel

The following Simbel related issues have been fixed:

• Simbel is not inserting records into the ancestor_project table. Whenever a project is created (without any parent project), the ancestor project will be 'proj1002', which is the container for all projects. Simbel works properly only if a parent project is specified in the xml. This issue is fixed now.
• Simbel has been modified to ensure that when a project with cross project artifact associations is imported, it no longer throws an exception but skips them.
• While importing a project, Simbel was picking up filename (file storage name) instead of fileDisplayName of document review attachments. This has been fixed.
• The Simbel import failed, when the separator and the flex field of tracker artifacts had the same name. This has been fixed.

Event handler

Email notifications for all monitored items are now being sent out properly.

SOAP

An issue with user data validations is now fixed with the addition of a new SOAP60 call, setUserData2.

SCM

The SVN commit message reference now appears correctly as a "linkified" value in ViewVC.

Wiki

Entering a new line creates a new paragraph in TeamForge 8.0 wiki editor, the CKEditor, which works the WYSIWYG way.

Site administration

When the site-option token, SAAS_ENABLED, is set to true, site activity notification emails are not sent to all site administrators. A new site option token, NOTIFY_SITE_ADMINS_FOR_SITE_ACTIVITIES, can be used to receive email notifications on operations at the site level that include create users, create projects (including project approval), black-list users, and SCM operations.

Document search

Appropriate search results were not being displayed when the ‘AND’ operator was used in document search. This has been fixed.

Logs

To prevent log threads from getting blocked, an asynchronous handler has now been introduced in JBoss loggers.

Performance

Viewing all monitored objects: A system error occurred while attempting to access All Monitored Objects (My Workspace > Monitoring). This has been fixed. Now, when the user clicks Monitoring, the first project (if any) under My Projects is selected by default. If the user selects All Monitoring Objects, and if the total number of records exceeds 25,000, a message is displayed prompting the user to refine the filter.