v0.7.2

Timm Fitschen
2022-03-28T08:59:44Z

REL: Release v0.7.2

Changelog

See full changelog

[0.7.2] - 2022-03-25

(Timm Fitschen)

This is an important security update.

Added

Implementation for the ACM GRPC-API (caosdb-proto 0.2)

Implementation for the EntityACL GRPC-API (caosdb-proto 0.2)

Fixed

Wrong serialization of date time values in the GRPC-API (resulting in org.caosdb.server.datatime@12347abcd or similar).

Missing serialization of file descriptors in the GRPC-API during retrievals.

caosdb-server#131 Query: AND does not work with sub-properties

Add previously missing Value.equals functions

caosdb-server#132 Query: subproperties should not require parentheses

caosdb-server#174 GRPC-API: Server should gracefully handle non-file entities with file-like attributes.

caosdb-server#217 Server gets list property datatype wrong if description is updated.

caosdb-server#220 Entities can be retrieved via GRPC despite insufficient permissions.

caosdb-server#221 Unknown error during update of property leaving out datatype.

caosdb-server#223 State is being leaked even though RETRIEVE:ENTITY permission is not granted.

Security

Update of logging backend log4j to 2.17.2

Fix for caosdb-server#220 Entities can be retrieved via GRPC despite insufficient permissions.

Fix for caosdb-server#223 State is being leaked even though RETRIEVE:ENTITY permission is not granted.