Sun GlassFish Web Space Server 10.0 Update Series Release Notes

Chapter 3 What's new in Web Space Server 10.0 Update 6

This chapter lists the new features, and the bugs that have been fixed in the Web Space Server 10.0 Service Pack 1, Update 2, Update 3, and Update 4, Update 5, and Update 6 releases.

New Features in Sun GlassFish Web Space Server 10.0 Update 6

The following are the new features added with Web Space Server 10.0 Update 6 release:


Note –

Sun GlassFish Web Space Server 10.0 Update 6, is also supported on WebLogic server.


Call

The Call feature makes use of the RUONAPI. Call add-on allows portal users to establish voice communication based on SIP protocol.

This feature is available as an add-on for Sun GlassFish Web Space Server. See Sun GlassFish Web Space Server 10.0 Add-On Collection for information on all add-ons.

IDM Adapter

The IDM Adapter feature provides integration with Sun Identity Manager 8.1. Using this feature, you can provision users on Identity Manager. Sun Identity Manager provides role-based user provisioning. It enables customers to use business roles for both identity lifecycle management, and identity auditing across enterprise and extranet environments.

This feature is available as an add-on for Sun GlassFish Web Space Server. See Sun GlassFish Web Space Server 10.0 Add-On Collection for information on all add-ons.

The following are the instructions for using the IDM Add-On:

ProcedureTo Install the IDM Adapter Add-On on Identity Manager

Before You Begin

IDM adapter add-on for Web Space Server should be installed on an Identity Manager installation.

For installing and using Sun Identity Manager 8.1; see, http://docs.sun.com/app/docs/coll/1514.6.

You need to install Identity Manager on a machine separate from the machine on which Web Space Server is installed. Download the IDM adapter add-on on the machine on which you have installed Identity Manager. To build the IDM adapter, set JAVA_HOME to JDK 1.5 or above, and ANT_HOME to ANT 1.7 or above respectively.

  1. Copy all the jar files inside the dist folder of IDM adapter add-on to the WEB-INF/lib folder of the deployed web application.

    For example, if the Identity Manager is installed on GlassFish, you need to copy the JAR files to glassfish/domains/domain1/applications/j2ee-modules/idm/WEB-INF/lib folder.

  2. Restart Identity Manager.

  3. Login to Identity Manager as administrator or configurator.

  4. Go to Configure -> Import Exchange File.

  5. Import the dynamicformsinit.xml present in the sample folder of the deployed web application.

    For example, if the Identity Manager is installed on GlassFish, you need to import the dynamicformsinit.xml file present inside the glassfish/domains/domain1/applications/j2ee-modules/idm/sample folder.

  6. Import all the xml files present inside the samples folder inside the downloaded file for IDM Adapter Add-On.

  7. Select Resources Tab. In the Resource Type Actions, select New Resource.

  8. Select Webspace Portal as the Resource Type, and click New.

  9. Click Next, to configure the resource from the Resource Wizard.

  10. In the next screen, provide the hostname, port, adminstrator username and password for Web Space Server, and click Test Configuration to verify if the adapter is able to contact to Web Space Server.

  11. If the connection is successful, you can do click Next for the remaining screens, and click Save on the final screen.

    The resource is listed.

ProcedureTo Provision a User

  1. Login to Identity Manager as Administrator or Configurator.

  2. Navigate to Accounts tab.

  3. To create a new user, select New User from New Actions, in the User List inside List Accounts.

    The Create User page appears. Do not save the page till you complete the below steps. If you save before you complete all the steps, you need to edit the user details by selecting the user from under the User List inside List Accounts in the Accounts tab.

    1. Provide the user details.

    2. Navigate to the Resources tab.

    3. Add WebSpace Portal to the Current Resources.

      The page gets refreshed, and the Create User page is appended with a new page named Webspace Portal.

    4. Navigate to the Webspace Portal tab, and fill blanks fields to complete user details.

  4. Click Save, the user is created on both Identity Manager and Web Space Server.

    All the data provided during creating a user in the Identity Manager is reflected for a user in Web Space Server under My Account. The Identity Manager displays only the first screen details of the user.

New Features in Sun GlassFish Web Space Server 10.0 Update 5

The following are the new features added with Web Space Server 10.0 Update 5 release:

Secure Remote Access

The Secure Web Access Add-On for Sun GlassFish Web Space Server 10.0 software enables remote internet users to securely access a website. It also enables secure access within the intranet of an organization.

Web Space Server offers browser-based secure remote access to portal content and services from any remote device. Web Space Server is a secure access solution that is accessible to users from any device with a JavaTM technology-enabled browser, eliminating the need for client software. Integration with Web Space Server ensures that users receive secure encrypted access to the content and services that they have permission to access.

Secure Web Access software is targeted towards enterprises deploying highly secure remote access portals. These portals emphasize security, protection, and privacy of intranet resources. The architecture of Secure Web Access is well suited to these types of portals. It enables users to securely access intranet resources through the Internet without exposing these resources to the Internet.

The Secure Remote Access add-on guide provides the details of this feature. See Sun GlassFish Web Space Server 10.0 Add-On Collection for information on all add-ons.

SharePoint Integration

The collaboration framework provided by Microsoft SharePoint Services is integrated with Web Space Server. This enables presenting SharePoint services through Web Space Server.

The SharePoint add-on guide provides the details of this feature. See Sun GlassFish Web Space Server 10.0 Add-On Collection for information on all add-ons.

Document Library Migration

This feature enables migrating files in the Document Library from File System to JCR repository and vice-versa. The Document Library Data Migration feature is available with Web Space Server 10.0 Update 5, and do not require separate installation.

For information on Document Library Data Migration feature, see Chapter 5, Content Management System, in Sun GlassFish Web Space Server 10.0 Administration Guide.

Bugs Fixed in Update 5

This section lists the bugs fixed in Sun GlassFish Web Space Server 10.0 Update 5 release.


Web Space Server v10 and ICEFaces 1.8.0: View cannot be restored for the first time submission (6852881)

Description:

When you deploy a ICEFaces portlet on Web Space Server, view is not restored for the first time submission of input through the ICEFaces portlet, but it works again after the first time submission.

Bugs Fixed in Update 4

This section lists the bugs fixed in Sun GlassFish Web Space Server 10.0 Update 4 release.


Tunnel-Web authentication of users doesn't work when Web Space Server is configured with AM (6778779)

Description:

Authentication of users need to work if Web Space Server is configured with OpenSSO.


Missing Polish flag in Enterprise 2.0 theme (6809325)

Description:

The Language portlet in Enterprise 2.0 theme is missing Polish flag.


Wrong asadmin password does not cause install script to gracefully exit (6827587)

Description:

Wrong asadmin password does not cause install script to exit gracefully.


Separate landing pages are needed for different users in samples (6828119)

Description:

Separate landing pages are needed for different users on sample communities.


OpenSSO add-on: deleting a user in OpenSSO makes users list in control panel empty (6829342)

Description:

The following is a issue specific to the OpenSSO add-on installed on Web Space Server. Deleting a user on OpenSSO results in the deletion of all users listed on the Control Panel of Web Space Server.


Liferay trusted repos can be a part of untrusted Web Space Server repos (6829716)

Description:

Liferay trusted repositories can be a part of untrusted Web Space Server repositories.


OpenSSO add-on: After the specified idle timeout user gets logged off even when active (6831407)

Description:

When Web Space Server is configured with OpenSSO add-on, user gets logged off after the specified idle timeout even if the user is not idle.


Flash uploader doesn't work with OpenSSO add-on in Firefox (6839464)

Description:

The cookies required for ssotoken creation is not present. As a result, Flash uploader doesn't work with OpenSSO add-on in Firefox.


Web Space Server should contain log4j.properties (6845864)

Description:

To specify log levels, the log4j.properties file needs to be copied from liferay/portal/branches/5.2.x/classes and placed into WEB-INF/classes folder of Web Space Server.


Enable migration of data from File System to Jackrabbit in Document Library (6848838)

Description:

When customers create a bunch of data (by uploading various files), and want to move to Jackrabbit, then the data needs to be migrated from File System to Jackrabbit storage. A tool should be provided for the same.

Bugs fixed in Liferay 5.2.3

Sun GlassFish Web Space Server 10.0 Update 4 includes all the bug fixes made for the Liferay 5.2.3 release.


** Bug
   * [LPS-252] - Content type image/jpg not recognized by IE
   * [LPS-377] - Update socialRequest status don't consider receiverId
   * [LPS-642] - service-ext.properties is not working
   * [LPS-956] - Request parameter without =xxxx in IBM JSF portlet causes ArrayIndexOutOfBoundsException in PortletRequestDispatcherImpl
   * [LPS-965] - Issue while deleting fields in shopping cart portlet
   * [LPS-970] - MailEngine.send() not sending attachments
   * [LPS-973] - Restore archive settings in web proxy portlet not working
   * [LPS-1022] - Communities Portlet - Adding Communities using Symbols and not Chars
   * [LPS-1151] - Shopping portlet-No validation is done when non numberic characters are given for Price and Discount
   * [LPS-1167] - changing openoffice.server.host has no effect
   * [LPS-1280] - Forgot password option asks for answer with no question
   * [LPS-1299] - Deletion of answers in the poll always deletes the last answer
   * [LPS-1324] - Archived list item display number in web proxy portel is not working.
   * [LPS-1360] - UnsupportedOperationException when changing the parent of a wiki page
   * [LPS-1378] - Context xml file should not be copied to domain1/conf directory when appserver = Glassfish.
   * [LPS-1606] - Staging workflow - No User exists with the primary key 0
   * [LPS-1608] - LDAP is not updated when user requests a new password from the 'Forgot Password' functionality.
   * [LPS-1752] - Results of All Articles in KnowledgeBase Portlet are not paginated
   * [LPS-1909] - ResourceResponseImpl may add http headers twice
   * [LPS-1977] - Adding a new wiki page with the same title in different parents causes that the older page dissapears
   * [LPS-1979] - Problems with theme.css.fast.load=true in 5.2
   * [LPS-1989] - Phantom portlets appear to page
   * [LPS-2002] - getArticleDisplay from  JournalArticleLocalServiceImpl ignores templateId
   * [LPS-2024] - Announcements can't be subscribed as Email or SMS
   * [LPS-2046] - Can not access login page,to display "You do not have the roles required to access this portlet."
   * [LPS-2050] - User profil -  update impossible without change password
   * [LPS-2086] - MBStatsUser table doesn't update when posts are deleted
   * [LPS-2093] - Staging with Organization roles won't work
   * [LPS-2099] - Tags Removed When Upgrading to 5.2.0
   * [LPS-2100] - Documents in Document Library No Longer Available After Upgrade to 5.2.1
   * [LPS-2111] - Errors when creating new Users in User Administration
   * [LPS-2115] - Organization role with permission to manage suborganizations can't create suborganizations
   * [LPS-2121] - Deleting thread in MB only deletes first message
   * [LPS-2124] - Web/Journal Content Display that is waiting configuration is only viewable by Onmiadmin
   * [LPS-2145] - Styled navigation.css points to invalid welcome_message.png
   * [LPS-2163] - CalendarUtil does not give correct result on equalsByDay
   * [LPS-2171] - Blog portlet scoping bug
   * [LPS-2172] - Incorrect Region Code for Alberta, Canada
   * [LPS-2176] - guest can view a portlet in an users public page even when guest has no view permission for the portlet, but "user" role  has view permission for the portlet
   * [LPS-2182] - Avoid "Catch 22" situation with LDAP configuration: Credentials are never saved because of crash when using wrong credentials.
   * [LPS-2183] - Fix "ant setup-eclipse" for Plugins SDK
   * [LPS-2186] - DataHandler ClassNotFound during export/import
   * [LPS-2188] - Shared public render parameters are not saved when the portlet changes window state
   * [LPS-2193] - Passwords should not be tracked during LDAP imports
   * [LPS-2195] - Staging permissions do not work with organizations
   * [LPS-2196] - Control Panel does not allow you to export a LAR file.
   * [LPS-2200] - An attacker can insert and execute malicious script
   * [LPS-2202] - Requiered changing password may result in a lost of the organization context
   * [LPS-2203] - Fix Friendly URLs so they work with shared public render parameters
   * [LPS-2206] - Message board category security poorly implemented
   * [LPS-2214] - when editing user roles programatically, the new roles are not indexed
   * [LPS-2218] - Error when creating Location Organizations
   * [LPS-2220] - Bug in searching web contents through the web content display portlet
   * [LPS-2225] - Document Library - You can not add a comment when you try to edit a document.
   * [LPS-2227] - After changing the scope of a portlet, you can no longer add new pages through the "add page" tab
   * [LPS-2228] - Activities portlet ignores permissions
   * [LPS-2235] - Able to create pages with blank names
   * [LPS-2238] - Removing unnecessary paths
   * [LPS-2244] - PortalImpl.getStaticResourceURL concatenating wrong minifierType parameter on JavaScript urls when css_fast_load=0
   * [LPS-2245] - LanguageFilter does not work when VirtualHost is defined
   * [LPS-2246] - Asset Publisher - Cannot Add Comment : "You have entered invalid data. Please try again."
   * [LPS-2249] - Ordering results by score and then by modification date
   * [LPS-2253] - Attempting to add a group to 'User Groups' when editing a user results in exception "Column not found: USERGROUP.NAME"
   * [LPS-2254] - Power User Role rights not propagating properly to users that are assigned via groups rather than direct assignment.
   * [LPS-2266] - Creating structure sometimes shows error when trying to use inheritance
   * [LPS-2268] - Schedular in  Dock-->Staging-->Pubblish to Live does not work
   * [LPS-2270] - ClassNotFoundException: com.sun.portal.wsrp.consumer.common.DeploymentServiceRemoteImpl ...
   * [LPS-2271] - webform portlet does not work on Sun PC
   * [LPS-2272] - Community administrator not able to approve membership requests
   * [LPS-2275] - Links in admin GUI are broken when accessing a community that has a virtual host
   * [LPS-2282] - Custom CSS loaded before theme
   * [LPS-2284] - Broken links for the BlogsAggregator portlet when blog is scoped to a page
   * [LPS-2286] - Caches of web content articles are not hit
   * [LPS-2291] - The 404 page should not use the home URL when a virtual host is being used
   * [LPS-2292] - Link to portlet url is not correctly mapped to layout on import if exported plid does not exist
   * [LPS-2294] - Can't allow community administrators to use their own logo - checkbox javascript error
   * [LPS-2298] - UnmodifiableList needs to be Serializable
   * [LPS-2299] - "hibernate.generate_statistics" was not properly read from portal.properties
   * [LPS-2305] - Improve DB performance by having better transaction boundaries
   * [LPS-2314] - The showListed option in Web Content Search ineffective
   * [LPS-2316] - custom attribute width
   * [LPS-2317] - CalEvent service doesn't handle custom attribute persistence
   * [LPS-2318] - BlogsEntry service doesn't handle custom attribute persistence
   * [LPS-2323] - Phishers can redirect users to an untrusted site
   * [LPS-2325] - MySQL does not allow unique index keys to be created on columns over 255 when using utf-8
   * [LPS-2336] - Error changing email address through hooks
   * [LPS-2339] - Can not add comments.
   * [LPS-2346] - Plugin Installer stops working if an java.lang.Error is thown during portlet deployment
   * [LPS-2347] - Remote Publish does not publish portlets marked as "always exportable"
   * [LPS-2348] - Cachability on ResourceRequest is blank
   * [LPS-2351] - PortletRequestUtil fails if the cachability of the ResourceRequest is not PAGE
   * [LPS-2353] - ThemeDisplay isLifecycleRender returns the wrong value when portlet is not directly accessed
   * [LPS-2356] - viewMode is always null
   * [LPS-2375] - Missing portlet icons maximize, minimize, close in IE6
   * [LPS-2379] - Group finder with parameters companyId, name should always return a unique value
   * [LPS-2385] - Mail Engine does not always return the correct property value
   * [LPS-2387] - POP Notifications does not work in secure mode
   * [LPS-2388] - Company key should not be updated except when it has not been initialized
   * [LPS-2393] - XSS vulnerability in My Communities portlet
   * [LPS-2394] - DropIndexes tries to drop indexes from across all the databases that MySQL is hosting
   * [LPS-2395] - XSS vulnerability in calendar portlet
   * [LPS-2396] - Add new indexes after verification
   * [LPS-2397] - XSS vulnerability in <liferay-portlet:renderURLParams>
   * [LPS-2398] - XSS vulnerability in themes
   * [LPS-2399] - XSS vulnerability with several portal parameters
   * [LPS-2401] - Group_.classNameId, classPK and Role_.classNameId, classPK should always return unique values
   * [LPS-2404] - Configuring the Liferay Message Bus in the Plugins Env via Spring does not switch classloader contexts properly
   * [LPS-2406] - Search: Rating icons laying into two lines
   * [LPS-2407] - Create account : Invalid date of birth validation issue
   * [LPS-2411] - Remove unnecessary duplicate call to getCurrentURL
   * [LPS-2413] - User display tagllib does not close div's correctly
   * [LPS-2417] - Control Panel - Communities Do Not Appear in Drop Down
   * [LPS-2419] - Journal Content don't use default language
   * [LPS-2421] - render_portlet-ext.jsp is included in the wrong spot
   * [LPS-2427] - Organization administrators cannot manage suborganizations that are 2 or more levels deep
   * [LPS-2428] - ConnectionHeartBeatJob not closing statement. Causes maximum open cursors exceed. ORA-01000
   * [LPS-2429] - Asset Publisher generates an error when clicking "View Blog" if the blog entry is not published any where
   * [LPS-2430] - The method getShardId(String, String, String, String) is undefined for the type ShardSelector
   * [LPS-2435] - Admin Control Panel edit user loses user's organization
   * [LPS-2445] - An exception occurred processing JSP page /html/portal/render_portlet.jsp at line 96
   * [LPS-2448] - Asset Publisher Bug in Title field when using extra characters (question marks, etc.)
   * [LPS-2455] - Role User is removed from database table (users_roles) when saving user profile
   * [LPS-2456] - Editing roles in "Default User Associations" in Control Panel appends whitespace to role names.
   * [LPS-2460] - Comments, ratings, tags, and categories are not being exported correctly
   * [LPS-2463] - VerifyUsers takes forever to complete when there are many users
   * [LPS-2465] - When replying to a membership request, the requester's name is displayed incorrectly
   * [LPS-2467] - Should use current time when updating attachments in message board
   * [LPS-2475] - It does not allow you to remove the Permissions for a Guest to View one particular image.
   * [LPS-2476] - When trying to add the Document Library Portlet or the Image Gallery Portlet it does not load until you refresh the page.
   * [LPS-2480] - In 'Document Library' when you try to update the document twice it doesn't update.
   * [LPS-2481] - Service Builder not getting exceptions from *ServiceImpl
   * [LPS-2483] - Exception on any JSON service call
   * [LPS-2503] - Blog with SCOPE has wrong RSS feed connected
   * [LPS-2514] - Cannot create more then two revision of a document in Document Library
   * [LPS-2519] - An organization administrator gets an error when trying to assign an org role to a user of his organizations
   * [LPS-2529] - The Blog portlet's rss feed does not work in a virtual host
   * [LPS-2536] - Asset Publisher - Voting system doesn't work
   * [LPS-2538] - typo in com.liferay.portal.editor.fckeditor.receiver.CommandReceiverFactory
   * [LPS-2539] - Web Content List portlet does not list the articles associated with structures if no structure is selected in the configuration
   * [LPS-2543] - Current URL /web/guest/$my_account_url generates exception: null
   * [LPS-2544] - Group.getDescriptiveName() for a layout returns a XML string
   * [LPS-2545] - Calling PortalUtil.getPlidFromFriendlyURL() doesn't return the plid of the default layout if the friendlyURL passed is that of the layoutSet
   * [LPS-2557] - Recursive permission logic for  folders and categories missed the first folder or category
   * [LPS-2563] - User with Administrator role does not see suborganizations in the Control Panel navigator
   * [LPS-2566] - XSS vulnerability in Liferay.currentURL
   * [LPS-2573] - Asset Publisher does not increment view count
   * [LPS-2578] - Bug with page permissions
   * [LPS-2579] - Blogs aggregator error to display blog content when SCOPE is used
   * [LPS-2580] - Blog Aggregator: when SCOPE is used, and BODY is shown, error on comments link
   * [LPS-2587] - Batch operations don't work properly
   * [LPS-2589] - Exporting web content or wiki pages to PDF, DOC, ... does not include images correctly
   * [LPS-2594] - Class loading problems for the portlet-layout-listener-class element
   * [LPS-2604] - Control panel no longer lists all properties for My Account
   * [LPS-2611] - Adding user using JSON service don't accept organizationIds
   * [LPS-2617] - Disabling gender does not hide gender option when creating new account
   * [LPS-2621] - Hooks did not read case sensitive property names
   * [LPS-2624] - loose content when delete any repeating field from webcontent. Webcontent form resets itself to empty fields and deletes all repeating fields from the webcontent form.
   * [LPS-2640] - Viewing an IG image should update the asset's view count
   * [LPS-2641] - Missing Images not handled properly
   * [LPS-2642] - ampersand validation errors caused by the script and css compressor
   * [LPS-2644] - companylogo url uses unencoded ampersand
   * [LPS-2646] - Default value of costum attribute of type 'Boolean' is not taken
   * [LPS-2650] - Visiting a bookmark in Asset Publisher does not increment visit count
   * [LPS-2652] - URL can only be invoked using POST Errors
   * [LPS-2657] - Should add a check on whether all the sql statements are commented out before running them in DB2Util
   * [LPS-2658] - ClassCastException when casting a com.liferay.portal.kernel.xml.Node to an Element, even though it is an instance of Element
   * [LPS-2661] - ServiceComponent fails on portlet with service.xml
   * [LPS-2671] - PortletImpl clone did not accurately clone the object
   * [LPS-2672] - in control panel, delete a communitiy that you are currently accessing ,will get error messages
   * [LPS-2673] - Alerts portlet does not show alerts to normal users
   * [LPS-2674] - Assigning a user to a usergroup with web pages may cause errors
   * [LPS-2679] - Asset Publiser - Image Gallery - "Back" link does not work
   * [LPS-2682] - Prevent duplicate resource and resource code exceptions
   * [LPS-2684] - "index.read.only" is not honored properly
   * [LPS-2685] - Selecting a Users UserGroups via the control pannel fails for company admin users
   * [LPS-2694] - Image Gallery: don't display tab "My Images" for other users
   * [LPS-2698] - problem with Document Library versionning
   * [LPS-2701] - Virtual Hosting tests not properly modularized, causing test breakage.
   * [LPS-2709] - You cannot view the images in the 'Image Gallery' portlet.
   * [LPS-2710] - Marking an alert as read does not work correctly
   * [LPS-2712] - Struts PropertyMessageResources locks under high load
   * [LPS-2714] - Can't get outside theme to be used as default
   * [LPS-2717] - Wiki Portlet: Error when you name a Child Page with the same name as the Parent
   * [LPS-2722] - Asset Publisher: Order By Doesn't Order Blogs Properly If "Publish Date" is Chosen
   * [LPS-2724] - Asset Publisher configuration doesn't save the metafields correcty when using manual asset selection
   * [LPS-2725] - Permissions not persisting correctly in portlets
   * [LPS-2726] - InitialThreadLocal did not properly use the constructor's value as a prototype
   * [LPS-2732] - DB2 error while upgrading v5_1_5.UpgradeTags
   * [LPS-2738] - Forgot password functionality does not set other user password properties, breaking LDAP export
   * [LPS-2739] - Improve Sprite generation for IE6 by generating Sprites as GIFs for IE6
   * [LPS-2743] - CacheFilter generates wrong cache keys
   * [LPS-2752] - Flags taglib did not escape content, causing JS errors
   * [LPS-2753] - Wrong data into Region table for country Italy
   * [LPS-2755] - LDAP export fails when importing a user from LDAP
   * [LPS-2758] - Read / Write DB Split needs to align better with transactional boundaries
   * [LPS-2760] - LDAP import stops if there is an issue updating a user
   * [LPS-2763] - Web content search links for some articles do not work
   * [LPS-2770] - Old versions of Journal Article looses it's tags if new version is deleted
   * [LPS-2771] - Saving new unapproved version of Article makes old approved version disappear
   * [LPS-2772] - Error appears during copying page with Polls portlet from Live to Staging.
   * [LPS-2778] - Resource code cache key can be wrong if name is a number
   * [LPS-2779] - Merging pages with the Guest community works intermittently
   * [LPS-2780] - Portlets -> look and feel -> reset should reset the text boxes
   * [LPS-2790] - Verification would run every other start up even though verified
   * [LPS-2794] - Excessive garbage creation in the MBMessageLocalServiceImpl.getMessageDisplay()
   * [LPS-2797] - Navigation issue in Server Administration -> Properties tab
   * [LPS-2800] - An exception during verify process could cause indexer to never return from readOnly state
   * [LPS-2803] - ResourceActionsUtil.getPortletResourceActions() causes NPE if a portlet does not exist
   * [LPS-2812] - Wiki Creole link does not work
   * [LPS-2813] - Length check for String in Base64.decode
   * [LPS-2824] - Unable to change organization specific permissions in the control panel
   * [LPS-2825] - Wiki displays incorrect UI error msg and also throws wrong exception
   * [LPS-2828] - PluginPackageUtil throws StringIndexOutOfBoundException if module version is missing in the war name
   * [LPS-2829] - NoSuchFolderException appears during exporting community with at least one page containing Document Library Display portlet
   * [LPS-2831] - Immage Gallery breaks if image description contains newlines.
   * [LPS-2836] - using "reference" element in plugin's service.xml to refer to portal services generates code properly but fails to load with exceptions on deploy
   * [LPS-2838] - Upgrading services generated by service builder requires presence of portlet-model-hints-ext.xml
   * [LPS-2839] - expiration-cache breaks JSR-286 inter portlet communication
   * [LPS-2842] - CompanyImpl for Sharded Databases do not retrieve proper Account data
   * [LPS-2843] - High load on social comment feature leads to potential for concurrent data insertions
   * [LPS-2846] - RSS Portlet does not show Atom 1.0 feed
   * [LPS-2859] - WSDD generation broken because of UnicodeProperties
   * [LPS-2860] - XSS vulnerability in status page because of bad url
   * [LPS-2870] - CLONE -Can't allow community administrators to use their own logo - checkbox javascript error
   * [LPS-2878] - isIndexReadOnly changes not taking effect
   * [LPS-2880] - Importing a Wiki Page that has been deleted and rewritten will cause duplicate page errors
   * [LPS-2881] - Access to a restricted community virtualhost is not handled properly
   * [LPS-2887] - You can not add a Web Content article.
   * [LPS-2888] - Child Wiki Pages with page names alphabetically earlier than their parent Wiki Pages will not import correctly
   * [LPS-2889] - WikiPortletDataHandlerImpl.java compilation error
   * [LPS-2892] - User administration throws runtime exception and is not functioning
   * [LPS-2900] - Firefox (and other browsers) will only show the scrollbar when needed
   * [LPS-2901] - Feed clients don't recognize when a BlogEntry is updated and show duplicates
   * [LPS-2903] - Chat portlet - compiling error
   * [LPS-2905] - Web Form Plugin is not redirecting on success
   * [LPS-2920] - create a journal conent with page type as article, and type article id while staging. After you publish to live the artile id is null
   * [LPS-2922] - Ensure ConvertProcess supports shards
   * [LPS-2930] - XSS escaping is too aggressive
   * [LPS-2945] - Not included portles are shown in the Add Application Menu
   * [LPS-2949] - Add a new method getWARThemes to ThemeService which can be accessed by external tools.
   * [LPS-2950] - JSONServiceAction.java 's getJSON() doesn't return proper JSON String when the return type of the method is JSONArray
   * [LPS-2955] - Unable to view Portal Properties in Admin Portlet after first page.
   * [LPS-2956] - JMX statistics for destinations do not report the proper pending message count
   * [LPS-2971] - Portlet's name with ' and manage pages
   * [LPS-2988] - V 5.2.2  for vista 64bit IE8 GA JS ERROR
   * [LPS-2994] - When a new page is created with "Copy parent" checked the portlets are copied but the preferences are not
   * [LPS-2996] - Weather portlet images not showing up
   * [LPS-3004] - You can't edit / delete / post reply to comments.
   * [LPS-3005] - Chat Portlet Does Not Compile
   * [LPS-3007] - Non-Power Users are still able to see "My Community" after "layouts.power.user.required" values are set to true
   * [LPS-3012] - After ticking use small image checkbox in a journal article export doesn't work it cause NullPointerException
   * [LPS-3016] - Error in UpgradeTags.java in upgrading process to 5.2.3
   * [LPS-3024] - Remove redundant admin portlet in struts-config.xml
   * [LPS-3025] - When edditing layout templates you can end up with stranded/inaccessible portlets
   * [LPS-3031] - Tag name is not validated when added
   * [LPS-3035] - Export/Import Community Causes Errors
   * [LPS-3040] - update: portlet / type settings / meta-...
   * [LPS-3041] - javascript theme bug under linux
   * [LPS-3043] - ClassNotFoundException after hot deploy of plugins when other plugins or ext reference it's service interfaces.
   * [LPS-3048] - The Wiki LAR Files can not be imported immediately
   * [LPS-3061] - File Uploader no longer responds after files are selected
   * [LPS-3064] - Blogs LAR Does Not Import Comments
   * [LPS-3073] - Asset Publisher CSS should be moved to css.jsp
   * [LPS-3075] - Cache filter incorrectly caches log in requests
   * [LPS-3083] - Bitwise permissions ignores owner role
   * [LPS-3084] - Wiki Search Returns No Results
   * [LPS-3099] - Request parameter values are duplicated when virtual hosts are used
   * [LPS-3105] - Web content link to layout structure element may not show the first page in a community
   * [LPS-3106] - The 'My Documents' and 'Recent Documents' tabs do not display anything in the 'Document Library' portlet.
   * [LPS-3115] - Blocking cache never released in some circumstances
   * [LPS-3117] - Ranks are not shown in Message Boards
   * [LPS-3119] - Cannot delete communities that have web content.
   * [LPS-3120] - Searching users in control panel with Solr installed doesn't work
   * [LPS-3130] - ExpandoTableLocalServiceUtil.deleteTable() leaks ExpandoRow entries
   * [LPS-3134] - Google gadget portlet does not work due to Google pages changes
   * [LPS-3136] - Custom reminder queries do not work at "forgot password"
   * [LPS-3141] - could not import the ics file generated by MS Outlook server because it had tab char for line break
   * [LPS-3145] - org.postgresql.util.PSQLException: ERROR: column "remindby" cannot be cast to type "pg_catalog.int4"
   * [LPS-3147] - You Can Not View Users from User Groups.
   * [LPS-3152] - XSS vulnerability in custom attributes
   * [LPS-3155] - XSS vulnerability with organization names
   * [LPS-3159] - Custom Attribute never shown to Guest with VIEW granted
   * [LPS-3160] - Enable assigning UPDATE to Guest for Custom Attributes
   * [LPS-3162] - Exception is thrown when Guest accesses a selection list Custom Attribute
   * [LPS-3165] - Arbitrary System-Level File Access
   * [LPS-3173] - JournalArticle urlTitle does not take into different versions
   * [LPS-3175] - Create of unique index fails if there is duplicate data
   * [LPS-3176] - XSS vulnerability in password policies
   * [LPS-3177] - XSS vulnerability with role names
   * [LPS-3178] - XSS vulnerability in Mange Pages
   * [LPS-3187] - Problems with I18nServlet and organizations.
   * [LPS-3193] - When setting the permissions for a resource the permissions inherited from scopes group, group template and community are not shown
   * [LPS-3209] - after publish article to live from staging, journal content search portlet can not hit the content of jounral article
   * [LPS-3215] - The solution to LPS-2286 caused a regression forcing JournalContentUtil to have a dependency on ThemeDisplay
   * [LPS-3219] - Missing language key in Blogs Configuration
   * [LPS-3220] - XSS vulnerability in Shopping portlet
   * [LPS-3228] - UpgradeLayout throws SQLException when upgrading Microsoft SQL Server to v5_0_0
   * [LPS-3229] - UpgradeDocumentLibrary throws SQLException when upgrading Microsoft SQL Server to v5_1_5
   * [LPS-3230] - Document Library Display Portlet may change the HTML title
   * [LPS-3231] - Modifications to system column in Company table and related services causes UpgradeProcesses to fail for 5.1.x to 5.2.x
   * [LPS-3232] - Directory Portlet throws exception when trying to view users of a usergroup
   * [LPS-3233] - Track viewed threads by thread instead of by message via MBMessageFlag
   * [LPS-3234] - UpgradeMessageBoards throws SQLException when upgrading Microsoft SQL Server to v5_1_5
   * [LPS-3235] - Missing language keys
   * [LPS-3241] - Portal does not always properly render virtual host urls
   * [LPS-3245] - Hello World portlet did not close writer
   * [LPS-3247] - Document Library Display uses same columns for folders and documents
   * [LPS-3249] - Publishing a workflow proposal should not show options for scheduling
   * [LPS-3265] - Blogs portlet does not load until you refresh the page
   * [LPS-3270] - Get rid of InvokerSimpleAction instantiation on the HookHotDeployListener.initEvent method
   * [LPS-3275] - ORA-01719 Error in message boards queries
   * [LPS-3276] - Journal article call picture inside of document library portlet cause Orm exception
   * [LPS-3281] - Regular users should not see the Content menu in the Control Panel if they don't have permissions to manage content
   * [LPS-3282] - Nested portlet does not work in 5.2.x. and 5.1.x
   * [LPS-3283] - Workflow portlet cannot save definitions
   * [LPS-3285] - User cannot access auth.public.paths if he doesn't have a private community
   * [LPS-3286] - XSS vulnerability in <title> and <meta> tags
   * [LPS-3310] - Forgot password captcha can be circumvented
   * [LPS-3312] - My posts in Message boards is not ordered correctly
   * [LPS-3314] - Ensure that thread local caches are cleared for every thread
   * [LPS-3319] - clpMessageListenerClass can not load class
   * [LPS-3323] - Guests should never have the View permission by default for contents created through private pages
   * [LPS-3324] - Export calendar events can sometimes be triggered by a crawler that should allow a get and not require a post
   * [LPS-3330] - PersistenceImpl caching the wrong object in fetch methods
   * [LPS-3333] - UserLocalServiceImpl - trim and toLowerCase ineffective on user fields (Strings are immutable)
   * [LPS-3352] - Sprite generator does not release open images files, and causes too many open files on repeated deployments of themes.
   * [LPS-3355] - Unable to manage content in control panel if user is not assigned to any organizations
   * [LPS-3357] - PersistenceImpl throws null pointer for Date fields that are also part of unique finders
   * [LPS-3358] - Clear finder and entity caches on redeploy of plugins
   * [LPS-3374] - Copy Page selection entries are over-eagerly escaped
   * [LPS-3375] - Article selection doesn't account for (can't see) Staging community
   * [LPS-3377] - StagingUtil should stream whenever possible
   * [LPS-3378] - Poller processor is using wrong class loader for plugins
   * [LPS-3391] - Wiki: Recent Changes feed links don't work
   * [LPS-3399] - Calendar portlet does not cleanup temp files after export/import of events
   * [LPS-3408] - WAR does not have ccpp.jar
   * [LPS-3409] - Blogs Trackback should not require post
   * [LPS-3410] - SB Plugin's table upgrade logic doesn't support added columns
   * [LPS-3412] - Can't use the XStream support in LAR framework from plugins due to classloader restrictions
   * [LPS-3413] - LAR Export throws exception and fails because NoSuchDiscussionException is thrown
   * [LPS-3415] - LAR Export doesn't handle PERMISSIONS_USER_CHECK_ALGORITHM == 6
   * [LPS-3416] - Adding additional addresses shows an ugly error message (that can be ignored)
   * [LPS-3418] - SearchPermissionChecker doesn't handle PERMISSIONS_USER_CHECK_ALGORITHM == 6
   * [LPS-3419] - Certain portlets can cause the LAR export to fail.
   * [LPS-3420] - Automatically exporting Journal to LAR is not always the desired behavior
   * [LPS-3433] - Adding DelayedTask so that Javascript can easily stagger a function
   * [LPS-3446] - layout edit page generates javascript error
   * [LPS-3545] - All Organisations not available in My Places for a Member User


** Improvement
   * [LPS-366] - An attacker can enter and execute malicious scripts in application
   * [LPS-447] - Content portlets should not be shown even if the user has "add portlet" permission
   * [LPS-523] - Asset Publisher: Add Configuration Option To Show Or Hide Tags
   * [LPS-1934] - Support hiding from user management the sections for roles and other associations even if they are assigned somewhere else
   * [LPS-2191] - Modify readme.html to point to new documentation page
   * [LPS-2217] - Add Germany's regions to the database out of the box
   * [LPS-2226] - Minor improvements for the Discussion taglib
   * [LPS-2239] - Minor fixes for the Wiki taglib section
   * [LPS-2243] - Minor fixes for the Web Content Display taglib section
   * [LPS-2251] - ant build-ext should sync portal/lib and ext/lib folder
   * [LPS-2277] - Global "Class" variable causes conflicts with 3rd party libraries
   * [LPS-2290] - When accessing the root URL of a community with a virtual host it should always go to the front page
   * [LPS-2303] - Add upgrade-ext target to allow users to upgrade from an ext environment
   * [LPS-2304] - Allow arbitratry params to the index user search queries
   * [LPS-2310] - Create unique indexes to speed up performance
   * [LPS-2320] - Make the default for expandoBridge.isIndexEnabled smarter
   * [LPS-2327] - Drop old indexes for better performance, and also allows better indexes with the same name to be used
   * [LPS-2329] - ORM / Hibernate wrapper needs to expose setCacheable
   * [LPS-2340] - Should be able to control how many entires are automatically expanded in RSS portlet
   * [LPS-2355] - Springify JournalContentUtil
   * [LPS-2357] - New method to PortalSessionContext
   * [LPS-2359] - The ordering of CSS and Javascript files by top_head.jsp needs to be standardized
   * [LPS-2363] - Updated german translation for 5.2.2
   * [LPS-2366] - Add Italian regions to the database out of the box
   * [LPS-2377] - Upgrade to Jackrabbit 1.5.3 because of bug fixes and improved text extraction
   * [LPS-2378] - Use java.util.UUID instead of JUG
   * [LPS-2380] - Removing unnecessary "lower" in sql query improves performance
   * [LPS-2381] - *ServiceImpl.is* should not be wrapped with a tx for better performance
   * [LPS-2383] - Additional role checking method available in UserService
   * [LPS-2408] - FinderCache keys are longer than they need to be
   * [LPS-2410] - Create friendlier methods for ClassNameService
   * [LPS-2412] - Refactor StartupAction to move logic into utility class
   * [LPS-2415] - MailMessage needs friendlier setters for to, cc, and bcc to accept non array addresses
   * [LPS-2418] - Improve startup time by 20% for servers connecting to a network database
   * [LPS-2420] - Cache system roles and groups because they can never be modified
   * [LPS-2426] - Add re-usable 'extendList' method to AbstractModelExtensionHandler
   * [LPS-2431] - Blogs Aggregator should be able to show a blog entry itself if it's not published anywhere else
   * [LPS-2433] - Mkae PortalUtil.getPlidFromPortletId smarter
   * [LPS-2439] - Streamline calls to get Users, Groups, Roles, and User Groups by companyId and name
   * [LPS-2440] - Improve manual usage of FinderCache
   * [LPS-2442] - Add indexer to Calendar
   * [LPS-2444] - InitialThreadLocal as a helper class that is a ThreadLocal that takes in an initialValue in the constructor
   * [LPS-2458] - LAR import fails if categories-hierarchy.xml is not found
   * [LPS-2464] - Eliminate the need for *ServiceJSON classes
   * [LPS-2470] - Support different configurations for the form of User Administration and My Account.
   * [LPS-2472] - Better default names for staging for Organizations and Users
   * [LPS-2485] - Dropping indexes should happen right before adding new indexes
   * [LPS-2488] - When clicking on MB Category in search results, you should go to the category
   * [LPS-2489] - Added remove() methods to ArrayUtil
   * [LPS-2492] - Improve the "Portlet Not Setup Page"
   * [LPS-2498] - Make "/-/" point to a constant called Portal.FRIENDLY_URL_SEPARATOR
   * [LPS-2499] - widget.js should generate iframe with id
   * [LPS-2501] - Change Message Board thread searching to be more obvious about scope
   * [LPS-2507] - MBThreadFinder.findByGroupId has unnecessary join
   * [LPS-2509] - DBUtil.DB_TYPE_* should be DBUtil.TYPE_
   * [LPS-2510] - DBUtil.isSupportsAlterColumnName and isSupportsAlterColumnType
   * [LPS-2511] - Speed up upgrade process for databases that support altering the column type (db2 does not)
   * [LPS-2513] - Sample Action that ensures all requests are HTTPS
   * [LPS-2523] - Add ability to change max file sizes through the gui
   * [LPS-2526] - PortalUtil.getCurrentCompleteURL
   * [LPS-2531] - MBCategory should store thread and message count
   * [LPS-2533] - Add groupId to MBMessage and MBThread for better performance
   * [LPS-2554] - Remove unnecessary Message Boards transactions
   * [LPS-2555] - Optimize number of calls in Message Boards that are used to check if a user is subscribed to a category or thread
   * [LPS-2556] - Optimize the number of calls to check if a Message Board thread has been read or not
   * [LPS-2558] - Remove unused methods in MBMessageDisplay
   * [LPS-2559] - BaseModel should allow generics
   * [LPS-2562] - Improve performance of displaying Message Boards Categories
   * [LPS-2570] - Allow for Office 2008 file extensions by default in doc lib
   * [LPS-2572] - Expose "default.landing.page.path" to hooks
   * [LPS-2574] - TagsAsset SQL for plugins
   * [LPS-2592] - Allow searching by groupId
   * [LPS-2593] - Disable document conversion cache in developer mode
   * [LPS-2598] - Provide a more highly optimized data entry method for ExandoValue
   * [LPS-2599] - Wrap verify in BatchSession
   * [LPS-2602] - Don't show "I Agree" button in "Terms of Use" if user has already agreed.
   * [LPS-2603] - Add "toggleSelectBox" helper method to util.js
   * [LPS-2609] - Refactor ratings so that it can be easily used from any portlet
   * [LPS-2614] - Add better indexes for Group_
   * [LPS-2616] - MySQL sql selects are case insensitive by default, so do not use "lower(" function
   * [LPS-2619] - Allow for more overrides in hooks
   * [LPS-2626] - Increase performance of adding permissions
   * [LPS-2631] - Allow new users to specify password on signup
   * [LPS-2634] - Remove uuid.jar
   * [LPS-2639] - Bookmark/DL asset view count should equals the bookmark's visit count / DL download count
   * [LPS-2660] - Improve caching of entities
   * [LPS-2669] - Remove unnecessary join when counting Roles_Permissions
   * [LPS-2670] - Remove unnecessary SQL calls in AdvancedPermissionChecker
   * [LPS-2683] - Create sample MemoryCacheManager for people who want to implement their own cache managers
   * [LPS-2686] - Remove usage of InitializingBean where it's not needed
   * [LPS-2687] - Enable the spring capabilities of ServiceBuilder enabled plugins to be used from non-ServiceBuilder using plugins
   * [LPS-2699] - Improve debug logging during "Test LDAP User" user setup
   * [LPS-2700] - Entity Cache and Finder Cache should use Ehcache's BlockingCache for better performance
   * [LPS-2705] - Reduce hits to underlying cache for EntityCache and FinderCache by providing a thread local cache
   * [LPS-2706] - Upgrade to commons collections 3.2.1
   * [LPS-2707] - Remove extraneous warnings when fetching a portlet with portlet id of ""
   * [LPS-2711] - Better default c3po settings
   * [LPS-2742] - Allow for tag based navigation when Asset Publisher is in manual mode
   * [LPS-2744] - Add french regions
   * [LPS-2751] - Upgrade to Ehcache 1.6 B3 because it's about 80 times faster than 1.5.0.
   * [LPS-2754] - Improved visual cue when missing LDAP password
   * [LPS-2756] - Improve documentation for the property "index.on.startup"
   * [LPS-2757] - GroupLocalSevice.getNoLayoutsGroups method to grab groups that do not have any layouts
   * [LPS-2761] - Refactor VerifyWikiCreole to be a ConvertWikiCreole that can be invoked from admin portlet
   * [LPS-2762] - Space issues for account creation/login
   * [LPS-2777] - Message Boards message posts pagination in "flat" view
   * [LPS-2782] - Apply urlTitle pattern to Web Content
   * [LPS-2783] - Upgrade to Commons Math 1.2
   * [LPS-2784] - MathUtil to provide fast log base 2 calculations
   * [LPS-2785] - Cache resource code on startup for faster performance
   * [LPS-2786] - ResourceActionsUtil was passing in unnecessary company id to fetch actions
   * [LPS-2787] - PermissionServiceImpl.checkPermission should take in long primKey
   * [LPS-2788] - PermissionLocalServiceImpl.hasUserPermissions should take in a name that relates to the resource id
   * [LPS-2793] - Security Algorithm 6, bitwise based permission scheme
   * [LPS-2798] - JSONServiceAction should handle more exceptions, and also be smart enough to guess the serialization strategy by the return type
   * [LPS-2806] - Make use of the friendly URL separator consistent in JSPs
   * [LPS-2808] - Page keywords, description, title, and sibtitle catenated with existing value by BLANK instead of SPACE, also, as much as possible, only add unique keywords so as to reduce size
   * [LPS-2817] - Improve isNull method in Validator
   * [LPS-2822] - Swedish language, some new text and some polish
   * [LPS-2844] - Improve *ModelImpl setter logic
   * [LPS-2854] - Make pinging google on new BlogEntry an option
   * [LPS-2857] - Classic theme dropdown menu for first level children
   * [LPS-2858] - Remove unused *ServiceFactory classes that were already deprecated in 5.1.x
   * [LPS-2861] - Performance optimization in PortalInstances
   * [LPS-2864] - Tighten up dependency object creation for assets
   * [LPS-2865] - Cleaning up tag libs and repetitive empty string checks
   * [LPS-2866] - Lowering message bus' default thread allocation for parallel destinations
   * [LPS-2868] - Remove unnecessary code in creating of url title for a blog entry
   * [LPS-2886] - Add a previous and next button to blogs for easier navigation in detail view
   * [LPS-2904] - Improvements in iFrame Portlet
   * [LPS-2913] - New transaction definition level "portal" that reads it from portal.properties
   * [LPS-2918] - Add support to specify dynamic parameters for iframe portlet
   * [LPS-2932] - Allow the disabling of result count in search container
   * [LPS-2934] - Adding more report formats and improving report engine integration
   * [LPS-2940] - Social indexes were not unique
   * [LPS-2941] - Upgrade to ehcache 1.6 B4
   * [LPS-2944] - Change "lucene.optimize.interval" default setting to 100 for better write performance
   * [LPS-2952] - Giving feedback to the user when there is an error on reporting abuse
   * [LPS-2953] - Confusing UI when creating location organizations
   * [LPS-2954] - Support internationalization of the title of system roles
   * [LPS-2963] - Cache registry needs method to allow clearing of specific registry / cache name
   * [LPS-2965] - ServiceBuilder convention for hierarchical tree data
   * [LPS-2966] - Organization should use hierarchical tree for better performance
   * [LPS-2967] - Pagination for Edit Permissions UI
   * [LPS-2968] - Speed up upgrade of tags for databases that support updating with inner joins
   * [LPS-2969] - Denormalize User_ and Contact_ table for faster speed in querying users
   * [LPS-2970] - Missing index for Group_(companyId, classNameId, liveGroupId, name)
   * [LPS-2974] - Move Document Library constans out of portal-impl
   * [LPS-2975] - Remove unnecessary  joins in Message Boards
   * [LPS-2976] - Properly forward 404 errors
   * [LPS-2986] - Allow users to create a new wiki page after doing a search
   * [LPS-2987] - Setting log4j level should also set jdk logging level
   * [LPS-2989] - Improve speed for retrieving message  boards recent posts
   * [LPS-2991] - Improve speed for retrieving message boards flag
   * [LPS-2995] - Blogs comments pagination
   * [LPS-2998] - Paginate items when indexing
   * [LPS-2999] - Improve ExpandoBridge indexer logic
   * [LPS-3000] - Populate the new User_ columns with the correct data
   * [LPS-3006] - Update tags asset after tags entries are set
   * [LPS-3013] - ServiceBuilder reIndex should not create a new tx
   * [LPS-3015] - IGImage needs groupId for faster performance
   * [LPS-3017] - WikiPage should have groupId to speed up queries
   * [LPS-3020] - Add groupId to Document Library objects for faster query performance
   * [LPS-3021] - Add classNameId and classPK to MBMessage to remove extra join when viewing comments
   * [LPS-3023] - Add subtype for managing autogenerated roles
   * [LPS-3038] - Add "Back" button to Directory portlet.
   * [LPS-3050] - correcting logging for ArrayDispatcherDestination and IteratorDispatcherDestination
   * [LPS-3051] - OrganizationPermission should take an Organization object as a parameter
   * [LPS-3060] - Add ratings to wiki pages
   * [LPS-3067] - Plugins can choose to disable auto upgrade of ServiceBuilder  generated tables
   * [LPS-3068] - No way to access WCM configuration screen
   * [LPS-3071] - Consolidate permission algorithm 6 to just one table
   * [LPS-3076] - Add service method to get roles by type and subtype
   * [LPS-3080] - Migration code for legacy permissions to Bitwise
   * [LPS-3086] - Allow upgrade Table code to specify custom select SQL
   * [LPS-3090] - Custom SecurityManager for debugging purposes
   * [LPS-3093] - Usability improvements for user management
   * [LPS-3100] - BaseFilter should allow subclasses to throw ServletException in the init method
   * [LPS-3111] - Upgrade scripts should call runSQL when possible
   * [LPS-3112] - Speed up SQL call for MBThread by adding index
   * [LPS-3113] - Alter CalEvent remindBy to int to speed up queries
   * [LPS-3118] - Allow Message Boards Moderators to have a Rank
   * [LPS-3128] - Add ResourceActionsUtil.getResourceActions() and getResourceCommunityDefaultActions() helper methods
   * [LPS-3129] - Improve speed of ExpandoTableLocalServiceUtil.deleteTable()
   * [LPS-3131] - Accessor for getting ExpandoValue without traversing all ExpandoTables
   * [LPS-3138] - ServiceBase should have easy access to clearCache for models and to run native sql
   * [LPS-3143] - Remove unnecessary joins in using Expando to drastically speed up performance
   * [LPS-3148] - Logout test needed for simple testing.
   * [LPS-3150] - Add property to print out full thread dump on shutdown
   * [LPS-3167] - Ant tasks to automate database upgrade tests
   * [LPS-3170] - Remove unnecessary index from Expando
   * [LPS-3171] - Remove unnecessary index from Social
   * [LPS-3174] - Add build property to copy extra jdbc drivers from a certain dir on deploy
   * [LPS-3180] - Deprecate usage of MBMessageFlag to keep track of which messages a user has read since UI never uses it
   * [LPS-3195] - Improve the functionality of Web Content through the Atom Publishing Protocol
   * [LPS-3197] - Make returning to the main entries view from a single entry cleaner
   * [LPS-3199] - Allow for the use of image maps in tinymce
   * [LPS-3200] - Make events processor more robust
   * [LPS-3208] - Direct link to define the permissions of a role
   * [LPS-3212] - Usability improvements for role management
   * [LPS-3222] - Add framework to implement SOS-88
   * [LPS-3254] - Automated tests for SQL Server 2005
   * [LPS-3262] - Tests should default to Tomcat 6.0 instead of Tomcat 5.5 since it is now the recommended one by Apache
   * [LPS-3266] - Test environment needs location of legacy zip files
   * [LPS-3271] - Allow Communities to be tagged.
   * [LPS-3272] - Allow Organizations to be tagged.
   * [LPS-3293] - Allow DBUtil to receive connection for executing sql.
   * [LPS-3295] - Make Tuple serializable
   * [LPS-3299] - Change attribute name for id in html tag "a"
   * [LPS-3309] - Automated tests for PostgreSQL
   * [LPS-3325] - Show User's twitter account if specified in WOL.
   * [LPS-3334] - Synchronous Messaging
   * [LPS-3335] - Broadcast an event upon completion of staging
   * [LPS-3340] - Support Object[] and Object[][] as return type for remote services
   * [LPS-3341] - Add support for two dimensional primitive arrays as JSON service method argument
   * [LPS-3354] - HttpUtil should allow authenticated posts
   * [LPS-3356] - Validator.equals should take in Object instead of just String
   * [LPS-3360] - Improving Chat Portlet
   * [LPS-3371] - Message boards should have a permalink
   * [LPS-3373] - Configure an optional query string for a Layout
   * [LPS-3401] - Poller Processor should split up into two modes, send and receive
   * [LPS-3402] - Make Announcements Portlet components easily hookable.
   * [LPS-3403] - Give Activity Interpreters additional commands in the body
   * [LPS-3422] - Consolidating Dynamic Selects Javascript service calls to one location
   * [LPS-3650] - CLONE -Transparent company logo with white elements displays 'invisible' in control panel theme in community settings

** New Feature
   * [LPS-9] - Reintroduce instance specific properties and make it configurable
   * [LPS-185] - Journal Articles Portlet should also provide option to display all approved articles of a particular structure
   * [LPS-420] - Add the ability to deploy portlets as Google Gadgets
   * [LPS-449] - Support for exporting portlets to Netvibes
   * [LPS-496] - Portal does not alllow setting header as defined by Portlet spec 2.0
   * [LPS-2125] - When entering an invalid page in the wiki, an option should be present to create the page
   * [LPS-2181] - Added translation to Slovak
   * [LPS-2337] - Add support to flag content as inappropriate (report abuse)
   * [LPS-2361] - Sharded Portal Instances
   * [LPS-2382] - Simple and standardized mechanism to seamlessly replace the entities returned by a given service with a custom implementation
   * [LPS-2390] - Allow users to configure Mail server from Admin
   * [LPS-2450] - Asset Publisher should have the SCOPE function
   * [LPS-2876] - Preview for Announcements/Alerts
   * [LPS-2914] - Support for Theme Preview Page that would be used by the Dreamweaver Theme Plugin
   * [LPS-3082] - Support detection of JSR 301 bridge implementations as JSF portlets
   * [LPS-3091] - Add function to create new filename from FileUtil
   * [LPS-3133] - Ability to skip addition of resources under data migration scenarios
   * [LPS-3181] - Add ability to detect at runtime whether a database supports case sensitive text search
   * [LPS-3244] - Add ability to create community templates
   * [LPS-3248] - Support for updating indexes for Oracle
   * [LPS-3267] - ConfigurationAction needs access to resource lifecycle
   * [LPS-3279] - Poller processor that can be used by individual portlets
   * [LPS-3289] - Support for updating indexes for PostgreSQL
   * [LPS-3290] - Poller Javascript allows multiple portlets to use 1 connection
   * [LPS-2897] - Issue with the Announcemnet portlet, Unable to manage the entry if there is more than 20 entries

Bugs Fixed in Update 3

This section lists the bugs fixed in Web Space Server 10.0 Update 3.


Error in synchronize-glassfish.xml (6827031)

Description:

An error occurs while executing /export/webspace-for-gfv2/var/webspace/war-workspace/synchronize.xml.


ANT_HOME is required to be set for cluster install (6827066)

Description:

During a cluster install, ANT_HOME must be set if the deploy war option is set to false.


Plugin Installer stops working if a java.lang.Error is thrown during portlet deployment (6823580)

Description:

The plug-in installer in Web Space Server stops working if a java.lang.Error is thrown while deploying a portlet.


Wrong asadmin password does not cause install script to exit gracefully (6827587)

Description:

Need to stop GlassFish if asadmin fails because of a wrong administrator password.


Samples do not get installed on eval bundle U2 (6827069)

Description:

Samples do not get installed on Update 2 evaluation bundle.

Bugs Fixed in Update 2

This section lists the bugs fixed in Web Space Server 10.0 Update 2. For a list of bugs fixed in the Liferay 5.2.2 release, see http://issues.liferay.com/browse/LPS/fixforversion/10364.


Sync with Liferay 5.2.2 for Web Space 10.0 SP2 (Bug ID: 6819785)

Description:

This is a placeholder bug for syncing the Web Space Server 10.0 SP2 branch with Liferay 5.2.2.


[LPS 2057] My Places shows duplicate links to an organization if logged user belongs to two or more (Bug ID: 6819798)

Description:

My Places shows duplicate links to an organization if the logged user belongs to two or more child organizations.


The lost password procedure fails when screen name is used (Bug ID: 6822261)

Description:

The lost password procedure fails when the screen name is used as the login name.


[LPS-2134] SharepointFilter throwing NPE when user agent header is null (Bug ID: 6823366)

Description:

SharepointFilter throwing NPE when user agent header is null.


OpenSSO add-on fails to create tables if mysql database has utf-8 character set (Bug ID: 6816179)

Description:

The OpenSSO add-on fails to create tables if the MySQL database uses the utf-8 character set. This is because the tables for the OpenSSO add-on have a key size of 256 characters, but utf-8 fields can be a maximum of 255 characters. The fields that have a length 256 are therefore trimmed to 255.


Community Portlet Mapper fails to display the list of groups (Bug ID: 6820455)

Description:

When the Community Mapper portlet is used, the auto-search JavaScript fails to display the results with errors.


Passwords are echoed in clear text for all ant based installers in Webspace (Bug ID: 6772997)

Description:

Web Space Server interacts with many Ant-based installers, such as fam, gateway, sharepoint, switchdatabase, which require passwords for GlassFish admin, MySQL root, and users. When typing these passwords at a console, the characters are echoed in clear text which is a security risk. Ideally the characters should be hidden or be displayed as asterisks (*).


Need to support installation and synchronization on multiple domains (Bug ID: 6807018)

Description:

Web Space Server RR: Need to support installation and synchronization on multiple domains using different databases.


Show-user-warning does not explicitly warn about setting required ANT_HOME and PATH vars (Bug ID: 6810642)

Description:

The show-user-warning message, “Ant must be 1.7 or greater. JAVA_HOME must be set to JDK 1.5 or greater. GlassFish must be running,” which can appear during Web Space Server installation, needs to be updated to include the warning for ANT_HOME and PATH variables.


Can't deploy Web Space Server on GlassFish with non-default admin username (Bug ID: 6812932)

Description:

The default admin username for Web Space Server on GlassFish is admin, and it is not possible to deploy Web Space Server using a non-default admin username. It is desirable to ask for the admin user instead of hardcoding the name "admin."


JSR-88 configuration should be moved to portal-ext.properties file (Bug ID: 6813936)

Description:

If a customer has deployed the administration server to listen to a port other than 4848 it should be easy to change the corresponding value for the JSR-88 configuration. This is true for other parameters such as username and password.


Build 22: Running ant -f install-sailfin.xml fails (Bug ID: 6816609)

Description:

Running ant -f install-sailfin.xml fails in build 22 because of a typographic error in the install script.


JDBC URL for MySQL needs update (Bug ID: 6818148)

Description:

Need to add "emulateLocators=true" to JDBC URL for a JDBC configured with Lucene and MySQL.


Need to update sun-web.xml of Web Space Server for GlassFish cluster (Bug ID: 6818152)

Description:

When Web Space Server is deployed in a cluster environment, it has been noticed that the session is invalidated intermittently and hence the user is logged out of the server. An additional property is required to be added to sun-web.xml as a workaround for GlassFish.


Fast load for css, images, javascript should be set to true for non-eval bundles (Bug ID: 6823899)

Description:

Fast load properties for CSS, images, and JavaScript need to be manually set to true in the portal-sun.properties file (in enterprise.jar).


The CDDL license in portal-ext.properties has HTML comment (Bug ID: 6821819)

Description:

The comment for the CDDL license header in the default portal-ext.properties file needs to be changed from the HTML comment to the properties comment.


Any click after using Search for organizations gives a blank page (Bug ID: 6821498)

Description:

Any click after using Search for organizations gives a blank page. Such errors occur only in Linux.


Need to sync stale liferay-portlet.xml - 10.0 Update 2 (Bug ID: 6823326)

Description:

Must update liferay-portlet.xml after every sync.


saw-web in Web Space Server has extra xml files (Bug ID: 6823339)

Description:

saw-web in Web Space Server has extra xml files; the build.xml file in saw-web needs to exclude all the *.xml files, and include only the custom-spring.xml.


[LPS-2024] Announcements can't be subscribed as Email or SMS (Bug ID: 6819815)

Description:

Announcements cannot be subscribed to as Email or SMS.


[LPS-2242] Search portlet displays unauthorized documents (Bug ID: 6823313)

Description:

Search portlet on a guest user page displays all the documents in the guest community.


[LPS-2592] Allow searching by groupId (Bug ID: 6823318)

Description:

Search portlet on a guest user page displays documents that are not authorized to be viewed by the guest user. In global search mode, users cannot find documents even if view permission is granted to their Community role.


Users can see prohibited thread on message board via found comment of search result (Bug ID: 6819096)

Description:

Create a thread with guest view permission removed. Despite the search bug, it can be found in the search result, but clicking on the link will show an "access not allowed" message. However, after any comment on the page without editing the permission (default to view permission for guest), the search result of the comment will display the thread, including the main item, which a guest is not supposed to see.


Invalid entry in input.properties will cause circular dependency (Bug ID: 6824571)

Description:

Invalid entry in input.properties when installing the evaluation bundle causes a circular dependency and the build fails.

Bugs Fixed and Other Notes for Service Pack 1

This section lists the bugs fixed in Web Space Server 10.0 Service Pack 1 (SP1). In addition, this section also lists several other notes regarding SP1.

Fixed Bugs

This section lists the bugs fixed in Web Space Server 10.0 SP1.


Need to sync with Liferay 5.2.1 (Bug ID: 6810345)

Description:

Need to synchronize with version 25766 of Liferay 5.2.x branch, which corresponds to Liferay 5.2.1.

Solution:

After applying the SP1 patch, the version file under <webspace_install_dir>\var\webspace shows:

Version=10.0

Build=1.14

Revisions=1357-25766-26479


Tunnel-Web authentication of users do not work when Web Space Server is configured with OpenSSO (Bug ID: 6778779)

Description:

Anything that uses tunnel-web user authentication does not work when Web Space Server is configured to use OpenSSO. For example, when OpenSSO is installed, users cannot load/store documents using the OpenOffice plugin.

Solution:

After applying the SP1 patch, perform the following steps to verify tunnel-web authentication:

  1. Access http://<machine-name>:8080/tunnel-web/secure/axis

  2. Provide the user name and password set using OpenSSO.

  3. You can verify the web services after successful authentication.


On adding a workflow definition file, you can view it only when you click the “Search Definition” button (Bug ID: 6798724)

Description:

When a workflow definition file is added using the Workflow portlet, the file gets added, but the portlet does not display it by default, and the user must click the Search Definition button to view the workflow definition file.

Solution:

On applying the SP1 patch, the Workflow portlet displays all the workflow definition files which are configured for display. The issue got resolved when new Portlet Container jars were added to fix CR 6808979.


Incorrect logging during event propagation (Bug ID: 6799513)

Description:

Two portlets communicating with each other results in event generation. Consider a scenario involving two portlets, P1 and P2:

  1. P1 sends an event to P2.

  2. P2 process the event, and sends an event back to P1 in the event processing phase of P2.

After the event propagation from P1->P2 and P2->P1, the log states “Maximum event generation: 3 reached. No more events will be sent.

Solution:

Apply the SP1 patch to address the issue of incorrect logging during event propagation. The issue got resolved when new Portlet Container jars were added to fix CR 6808979.


Multi-Lingual Version of GlassFish V2 needs to be shipped (Bug ID: 6798987)

Description:

The multilingual version of GlassFish v2 needs to be bundled along with Web Space Server to allow localized customers to use the Admin console and other features of GlassFish in their language.

Solution:

Web Space Server evaluation bundles that include GlassFish are not supported. You can install core Web Space Server on a multilingual version of GlassFish v2.


Web-form portlet does not work on Sun Portlet Container (Bug ID: 6808979)

Description:

When you build and deploy web-form-portlet on Liferay with Sun Portlet Container, it throws an exception.

Solution:

Apply the SP1 patch. The fix in Liferay is accepted and ported to Liferay 5.2.x branch, and synchronized with Web Space Server.


A guest user can view the portlets on the public page of another user, even when the guest user has no view permissions for the same (Bug ID: 6808452)

Description:

A guest user (an user who do not have a login account) can view the portlets on the public page of another user, even when the guest user has no view permissions for the same.

Solution:

Apply SP1 patch. The issue is fixed in Liferay, and ported to Web Space Server.


Core installer doesn't take Oracle hostname, port and database name inputs (Bug ID: 6808623)

Description:

When Web Space Server is installed on Oracle 10g, the database host, database port, and database names are hard-coded. Users will not have the flexibility of choosing a host name, port number, and database names.

Solution:

Apply the SP1 patch on a Web Space Server instance installed on Oracle 10g.


OpenSSO add-on install-gfv2.xml will create duplicate web.xml entries if template files are not renamed (Bug ID: 6812514)

Description:

The OpenSSO Add-On should be installed only after renaming *.template to *.properties files (Example, AMConfig.properties.template -> AMConfig.properties), and ensuring the AMConfig.properties and portal-ext.properties files are present.

Solution:

You can install the OpenSSO Add-On without this additional step after installing the SP1 patch.


HSQL data goes into domain/config directory (Bug ID: 6805773)

Description:

If var/webspace/data is the directory for all data, then the HSQL data should also go there for consistency.

Solution:

After applying the SP1 patch, HSQL data goes into the var/webspace/data/hsql directory.


bin/pkg bootstrap wrapper missing from install bundle (Bug ID: 6803670)

Description:

The Web Space Server 10.0 download bundle for MacOS that includes GlassFish v2.1 does not include the "bin/pkg" wrapper script. This wrapper script is useful because it enables the CLI (Command Line Interface) to easily bootstrap the pkg(5) client environment without also downloading the Update Tool GUI and its dependencies.

Solution:

Apply the SP1 patch.


OpenSSO exceptions are raised on every login after installing the OpenSSO add-on (Bug ID: 6812509)

Description:

After installing the OpenSSO Add-On, OpenSSO exceptions are encountered at every login.

Solution:

Install the add-on after installing the SP1 patch.


Scripts fail badly when Ant 1.6.5 (default Ant version for GlassFish) is used (Bug ID: 6812482)

Description:

Scripts fail badly when using an Ant version prior to 1.7.0. Users need to be reminded that the ANT_HOME environment variable must be set to the location of Ant 1.7.0 or higher version. If this variable is not explicitly set, the scripts will use the older, incompatible version of Ant included by default with GlassFish.

Solution:

After applying the SP1 patch, an error message is shown if the available Ant version is less than 1.7.0.

Issues Tracked on JIRA

The following are the Liferay issues tracked on JIRA. All the below issues are resolved by the SP1 patch.


Owner of a document cannot add discussion to it (LPS-1169)

Description:

If the following are the permissions for a document:

  • Owner - View, Update, Add Discussion

  • Some Other Role (other than the Owner) - View, Update, Add Discussion

Owner does not have “Add reply” links.


When you add answer options to a poll question in the Poll application, an additional answer option is added with the description of the poll question (LPS-1298)

Description:

Try the following steps:

  1. Log in and add the Polls application to your page.

  2. Add a Poll, and enter a poll question and a poll description.

  3. Add three poll answers.

You will notice that an additional poll answer is added taking the description of the poll question as one of the answers.


Success message is displayed for a failure operation (LPS-1380)

Description:

Try the following steps:

  1. Create a parent folder in the Image Gallery/Document Library.

  2. Edit the folder and select the option as "Merge with parent folder".

A message such as "Your request processed successfully" is displayed. Ideally, it should throw an exception, such as "You can't merge with the parent folder."


Random Bible Verse portlet may show cross references (LPS-1634)

Description:

Random Bible Verse portlet may show cross references.


Add Web Content to newly added portlet makes portlet vanish (LPS-1778)

Description:

Try the following steps:

  1. Perform a fresh Web Space Server installation.

  2. Add a new user with community admin rights on a “Guest” community.

  3. Log in as this user and add a new page to the “Guest” community.

  4. Add a Web Content Display portlet to this page.

  5. Press Add Web Content button for the newly added portlet.

  6. Fill in some text in the article and click Save.

Expected results: Return to the page with a web content portlet saying "The article is not approved,"

Actual results: The page is empty, the portlet is gone.


Export calendar events saves as .ics.html in Safari (LPS-1820)

Description:

Events on the Calendar application are exported in .ics format, but when exporting Events on Safari, they are saved as .ics.html files (with .html appended to the file extension).


Captcha image doesn't show up if using the portal/login_captcha url (LPS-1840)

Description:

Captcha image doesn't show up if you are using the portal/login_captcha url.


TunnelServlet needs to be more specific about which classes it'll execute (LPS-1842)

Description:

It is necessary to ensure that class names are Service HTTP classes.


Plugins dependency management (LPS-1855)

Description:

There are scenarios where one plugin should not load unless another plugin is already loaded. Modify liferay-plugin-package.properties to manage plugin dependency.


Newly added shopping fields are being automatically filled in with incorrect data (LPS-1856)

Description:

Newly added shopping fields are being automatically filled in with incorrect data.


Cookies set in processAction cannot be retrieved in render in Sun Portlet Container implementation (LPS-1865)

Description:

Try the following steps:

  1. Set a cookie using response.addProperty (cookie) in processAction.

  2. Retrieve the cookie using request.getCookies() in render.

Issue: The cookie set in processAction is not seen. This issue is seen in the Sun Portlet Container implementation.


Sprite generation on startup fails with large exception (LPS-1866)

Description:

Sprite generation on startup fails with a large exception.


Lucene exceptions occur during verification stage when starting with a clean index (LPS-1880)

Description:

When the verification stage is processing data that performs index updates, those updates can throw exceptions because the LuceneServlet initializes only after the main servlet has completely initialized.


Upgrade process for UpgradeDocumentLibrary fails for Oracle (LPS-1885)

Description:

The SQL within UpgradeDocumentLibrary fails due to an invalid query. Oracle expects a string for portletId within the SQL query of doUpgrade().

Open Sourcing of OpenOffice Plugins

OpenOffice plugin is open-sourced in the mirage.dev.java.net project.