Authorization plugins moved from CommonConcepts to the new SimpleWindowsAuth package.
SimpleWindowsAuth implements a simple authorization system (Principals + Permissions) for Windows authentication.
GUI for the permissions is still in the core framework (Rhetos.csproj), it should be moved to SimpleWindowsAuth package.
New concept: RegisteredQueryableRepository for exposing queryable repositories of an entity that implements a given interface.
Improved ImplementsInterface concept to automatically implement reference properties as interfaces.
It helps to keep algorithm implementations out of DSL scripts by providing static typed querying of generated object model without referencing the generated assembly.
New DSL package AspNetFormsAuth: implemented a Principal-Role-Permission-Claim authorization system.
Build scripts updated to include SimpleWindowsAuth and AspNetFormsAuth package.
Added Rhetos.IService plugin initializer method with HttpApplication parameter.
IService.Initialize method is called only once.
IService.InitializeApplicationInstance method is called for each HttpApplication (Global.asax.cs) instance.
Minor refactoring.
Implemented authentication with SimpleMembershipProvider, using WebMatrix.WebData.WebSecurity.
In addition to this changes in source code, following changes must be done to enable the forms authentication:
- Add elements to system.web in web.config: authentication (forms), roleManager (enables) and memebership (SimpleMembershipProvider).
- IIS application authentication: disable windows, enable forms and anonymous.
Data-migration for old permissions (SimpleWindowsAuth). "/Login" service path.
Simplified implementation of Rhetos.Security.Service:
Now the security service calls ProcessingEngine directly instead of through Rhetos SOAP service.
Absolute URI is finally removed from Web.config.
No more need for the user impersonation.
Better error handling in the permissions GUI.
Data migration of permissions from SimpleWindowsAuth to AspNetFormsAuth.
Deleting old data-migration scripts' metadata for uninstalled package.
This is done to ensure that the data-migration (initialization) scripts will be executed next time if the package is installed again.
AspNetFormsAuth login logging.
SimpleWindowsAuth:DefaultAutofacConfiguration removed from Web.config.
SimpleWindowsAuth (plugin) web API configuration removed from web.config.
SimpleWindowsAuth permissions GUI moved from Rhetos framework to the plugin package.
Minor improvements in build scripts.
IHomePageSnippet. Link to SimpleWindowsAuth permissions GUI on Rhetos homepage.
Minor changes in build scripts and notes.
AspNetFormsAuth: Simple login web form.
Root page redirects to the login form when user is not authenticated, other URIs will return 401.
Minor improvements in error handling.
Improved documentation and error handling.
AspNetFormsAuth: account management service and AdminSetup utility.
Added AdminSetup.exe - utility for setting up the administrator account for forms authentication.
Added Logout, SetPassword and ChangeMyPassword methods on authentication service.
Initializing 'admin' user and 'SecurityAdministrator' role at deployment.
Simple Logout.html form.
IEntity interface made writable to allow initialization of entities in entity-saving helper functions.
SystemRequired bugfix: using new ReloadBeforeValidationsInfo to load values initialized in database to avoid false errors.