Authorization plugins moved from CommonConcepts to the new SimpleWindowsAuth package.
SimpleWindowsAuth implements a simple authorization system (Principals + Permissions) for Windows authentication.
GUI for the permissions is still in the core framework (Rhetos.csproj), it should be moved to SimpleWindowsAuth package.
New concept: RegisteredQueryableRepository for exposing queryable repositories of an entity that implements a given interface.
Improved ImplementsInterface concept to automatically implement reference properties as interfaces.
It helps to keep algorithm implementations out of DSL scripts by providing static typed querying of generated object model without referencing the generated assembly.
New DSL package AspNetFormsAuth: implemented a Principal-Role-Permission-Claim authorization system.
Build scripts updated to include SimpleWindowsAuth and AspNetFormsAuth package.
Bugfix: DenyUserEdit conflict with default generated values.
DenyUserEdit throws exception when user set creation time value to null, because the DenyUserEdit validation is executed before CreationTime has set the value.
Added Rhetos.IService plugin initializer method with HttpApplication parameter.
IService.Initialize method is called only once.
IService.InitializeApplicationInstance method is called for each HttpApplication (Global.asax.cs) instance.
Minor refactoring.
Implemented authentication with SimpleMembershipProvider, using WebMatrix.WebData.WebSecurity.
In addition to this changes in source code, following changes must be done to enable the forms authentication:
- Add elements to system.web in web.config: authentication (forms), roleManager (enables) and memebership (SimpleMembershipProvider).
- IIS application authentication: disable windows, enable forms and anonymous.
Data-migration for old permissions (SimpleWindowsAuth). "/Login" service path.
New plugin type ICommandObserver.
Can be used for intercepting commands between client and server.
Simplified implementation of Rhetos.Security.Service:
Now the security service calls ProcessingEngine directly instead of through Rhetos SOAP service.
Absolute URI is finally removed from Web.config.
No more need for the user impersonation.
Better error handling in the permissions GUI.
Data migration of permissions from SimpleWindowsAuth to AspNetFormsAuth.
Deleting old data-migration scripts' metadata for uninstalled package.
This is done to ensure that the data-migration (initialization) scripts will be executed next time if the package is installed again.
AspNetFormsAuth login logging.
SimpleWindowsAuth:DefaultAutofacConfiguration removed from Web.config.
SimpleWindowsAuth (plugin) web API configuration removed from web.config.
SimpleWindowsAuth permissions GUI moved from Rhetos framework to the plugin package.
Minor improvements in build scripts.
IHomePageSnippet. Link to SimpleWindowsAuth permissions GUI on Rhetos homepage.
Minor changes in build scripts and notes.
AspNetFormsAuth: Simple login web form.
Root page redirects to the login form when user is not authenticated, other URIs will return 401.
Minor improvements in error handling.
Improved documentation and error handling.