Age | Commit message (Collapse) | Author | Files | Lines |
|
Change-Id: I776183cd545fe749e1e401ea3e238154e1cceb5a
Issue-ID: POLICY-2514
Signed-off-by: uj426b <uj426b@att.com>
|
|
And point to latest parent, common and models.
Issue-ID: POLICY-2510
Change-Id: Ib0cab4b57fb6efb8388d89bedcf2d34164edc0e7
Signed-off-by: Pamela Dragosh <pdragosh@research.att.com>
|
|
Issue-ID: POLICY-2378
Change-Id: Ic374190da660b3c258998ecf131fa57dcb1cb834
Signed-off-by: Pamela Dragosh <pdragosh@research.att.com>
|
|
I'm not going to bother with the other non-pom changes.
Until we really need to.
Issue-ID: POLICY-2378
Change-Id: Ib06ae950cd37d75fb34f49fd5cb207deca998c11
Signed-off-by: Pamela Dragosh <pdragosh@research.att.com>
|
|
The docker stage job is not succeeded, nor is the sonar
job. Logging doesn't produce anything useful, so the best
bet is to fix the order of the tests and hope that fixes the
problem.
Regardless must bump the patch to release it again.
Issue-ID: POLICY-2378
Change-Id: I01ff47c8deb124e9fd6ffcb37407dc580ecd6b03
Signed-off-by: Pamela Dragosh <pdragosh@research.att.com>
|
|
Update powermockignore annotation to fix junit failure
Issue-ID: POLICY-1590
Change-Id: Iadd0855565c05d02af034a5ad02ea7b8e386fadc
Signed-off-by: Peyton Puckett <peyton.puckett@att.com>
|
|
Issue-ID: POLICY-1590
Change-Id: I9f5a05112d943d7f3b6b0e807bf6ae4f2b993e55
Signed-off-by: Peyton Puckett <peyton.puckett@att.com>
Signed-off-by: Peyton Puckett <pp5762@att.com>
|
|
Issue-ID: POLICY-1590
Change-Id: I0bbc6f7310705c20924812efc5be2b0f91cf71a2
Signed-off-by: HOCKLA <ah999m@att.com>
|
|
Issue-ID: POLICY-1590
Change-Id: I4da8324a065ac9babe16368e69b76a4cbe9504ef
Signed-off-by: HOCKLA <ah999m@att.com>
|
|
Also added default branch to .gitreview to facilitate branching in
the future.
Switched internal properties to use snapshot versions of other
repos per review comment.
Change-Id: I23d71e67051d88cfaa07adc15e2d143289269027
Issue-ID: POLICY-2045
Signed-off-by: Jim Hahn <jrh3@att.com>
|
|
Portal released 2.6.0
Issue-ID: POLICY-2045
Change-Id: I36537fca916be71a76e36f87ede0757397883b4b
Signed-off-by: Pamela Dragosh <pdragosh@research.att.com>
|
|
- Modified poms to upgrade epsdk dependency from 2.4.0 to
2.6.0-SNAPSHOT
- Work in progress, still needs to be tested in the lab
Change-Id: I5c7df08ed84ef12824d4fdc2ef6f578d6dce7488
Issue-ID: POLICY-1539
Signed-off-by: Michael Mokry <michael.mokry@att.com>
|
|
- Modified springframework dependencies version in poms to 4.3.24.RELEASE in ONAP-SDK-APP and POLICY-SDK-APP
Change-Id: I149ed2454e7a899b929f179bf46b80190b3bc80c
Issue-ID: POLICY-1539
Signed-off-by: Michael Mokry <michael.mokry@att.com>
|
|
Remove explicit version for snakeyaml maven dependency and inherit it
from integration parent artifact.
Upgrade snakeyaml to latest 1.24 version.
Issue-ID: POLICY-1603
Signed-off-by: Bruno Sakoto <bruno.sakoto@bell.ca>
Change-Id: I93978f963dc37260e0fc4d153c92c7da8db0005d
|
|
Change-Id: I77e7483bcecbc19d9a5a93087fd4c674aa898b52
Issue-ID: POLICY-1965
Signed-off-by: Jim Hahn <jrh3@att.com>
|
|
For El Alto, it is now required to pull coverage of Javascript
code.
Issue-ID: POLICY-1928
Change-Id: If1c0c2ba795b7a8f5faf69ab32ffbb953c411f78
Signed-off-by: Pamela Dragosh <pdragosh@research.att.com>
|
|
Released 1.5.0
Fixed compilation issue related with version upgrade of
policy/common.
Issue-ID: POLICY-1737
Change-Id: Ib2f56e8ffcb4b399dbe4a5453b70da10b0f87985
Signed-off-by: Pamela Dragosh <pdragosh@research.att.com>
Signed-off-by: Jim Hahn <jrh3@att.com>
|
|
Fixed license date.
Change-Id: I711fb4e91afdb3813bc04b16265f584d80ac8e5d
Issue-ID: POLICY-1747
Signed-off-by: Jim Hahn <jrh3@att.com>
|
|
Released 1.4.1
Issue-ID: POLICY-1700
Change-Id: Ied6d06664155ff6e44ede90f1c081ec5bd2ef679
Signed-off-by: Pamela Dragosh <pdragosh@research.att.com>
|
|
Issue-ID: POLICY-1630
Change-Id: Iefcaaf1811535e22904367b8d11346a02f5851c1
Signed-off-by: liamfallon <liam.fallon@est.tech>
|
|
Per Catherine, Dublin will not require javascript for sonar
coverage statistics. We'll add this back in for El Alto if
we determine this repo still needs development.
If LF turns off javascript in the Sonar application then I'll
change this back. But I need to determine if policy/engine has
55% coverage for tomorrow M2.
Issue-ID: POLICY-1536
Change-Id: Ie091e231e1150da3217e10eb28fdbcd7e2ed8320
Signed-off-by: Pamela Dragosh <pdragosh@research.att.com>
|
|
The lib folder no longer exists so excluding the lib.bower
to ensure that isn't included in.
Issue-ID: POLICY-1536
Change-Id: I2cf0ecd156b710e5bed98b9ee3dd3184d620a1b0
Signed-off-by: Pamela Dragosh <pdragosh@research.att.com>
|
|
Issue-ID: POLICY-1232
Change-Id: I81e2b700debd4acca52f8ed9bbf8b54d75ceca83
Signed-off-by: liamfallon <liam.fallon@ericsson.com>
|
|
Issue-ID: POLICY-1213
Change-Id: I6666585a176b9e981976777018e4b7616e47ffc7
Signed-off-by: ramverma <ram.krishna.verma@ericsson.com>
|
|
Still a couple more places to remove it due to security
violations. Unused dependency.
Issue-ID: POLICY-1214
Change-Id: Ie9a4755fa912a863be58f6ddec104702e68287d4
Signed-off-by: Pamela Dragosh <pdragosh@research.att.com>
|
|
Added exclusions to epsdk dependencies and added dependencies for
springframework jars that were needed to the ONAP-SDK-APP
Change-Id: I037ffa76d3d32b2db5ea2c439f40e8a86e1665f5
Issue-ID: POLICY-1154
Signed-off-by: Michael Mokry <michael.mokry@att.com>
|
|
The former version was frozen in github. It looks like they
moved to another website and the changes were transparent codewise.
So let's see what the CLM results are for this. I believe this
does remove the security vulnerability.
Issue-ID: POLICY-1127
Change-Id: Ib659eddc2808131c8dded3782fcf1d382060fc29
Signed-off-by: Pamela Dragosh <pdragosh@research.att.com>
|
|
|
|
Upgraded SDK version.
Added SQL script with encrypt key.
Added a function to save role on reading from session in
PolicyController.java
Addressed Check Style warnings in PolicyController.java
Issue-ID: POLICY-1088
Change-Id: I446b6c1a0db2a989ad3f4e982e5cdba845f81045
Signed-off-by: rb7147 <rb7147@att.com>
|
|
Resolves a security issue around information disclosure. The
recommendation is to upgrade to this version for the fix.
Issue-ID: POLICY-1063
Change-Id: Idebb19d2c530b716a25aa91832c053e6b2d0ffce
Signed-off-by: Pamela Dragosh <pdragosh@research.att.com>
|
|
Fixes 2 security issues and brings the common property
value to the root pom.xml for easier management.
Issue-ID: POLICY-1063
Change-Id: I56e3318bdfae2d205c61a5ad7af70a79bd70dada
Signed-off-by: Pamela Dragosh <pdragosh@research.att.com>
|
|
Change from oparent to policy/parent which inherit from
the latest oparent. The latest oparent has dependencyManagement
recommendations from the ONAP Security sub committee that
the policy team is adhering as part of the effort to consolidate
security work across projects.
Change-Id: I1a43fc5a04dbc8c4cb2b7bedbca67ad3e9dd120b
Issue-ID: INT-619
Signed-off-by: Pamela Dragosh <pdragosh@research.att.com>
|
|
While creating a decision Bl Guard Policy we are allowing to add
Blacklist entries through file upload for bulk from GUI.
Issue-ID: POLICY-901
Change-Id: I4031fd4a96937b9facc330cecf72777d701d4678
Signed-off-by: rb7147 <rb7147@att.com>
|
|
Upgraded version in pom to 2.3.1
Added SQL scripts from Portal to Upgrade Portal related db tables
Added SQL downgrade script and license header
Sorted SQL commands in upgrade script by function_cd per Jim
Change-Id: Id6bef295956b6ec5b13d8fbd0006bbfe98c1c0ac
Issue-ID: POLICY-918
Signed-off-by: Mike Mokry <mm117s@att.com>
|
|
Some of the projects are being built with logback version, 1.1.3, which
does not support the SizeAndTimeBasedRollingPolicy appender. Updated
the offending pom.xml to force it to use logback 1.2.3 instead.
Change-Id: I3277b28133498f4ad9fbc3ed8b3e9e7e9519bbeb
Issue-ID: POLICY-785
Signed-off-by: Jim Hahn <jrh3@att.com>
|
|
Snapshot updated for Casablanca.
Change-Id: Ieb2c9a990c0f36f31c974038465e7d38aaa21e5d
Issue-ID: POLICY-875
Signed-off-by: liamfallon <liam.fallon@ericsson.com>
|
|
These reviews must be merged in order because of layering.
This review should be merged FOURTH.
Change-Id: Ifca8e33b79085a4032164b44dae3401f8179f5f6
Issue-ID: POLICY-844
Signed-off-by: liamfallon <liam.fallon@ericsson.com>
|
|
These reviews must be merged in order because of layering.
This review should be merged SECOND
Note: In order to get past the following layering problems, there
are temporary chages to the following POMs to temporarily use 1.2.1-SNAPSHOT
for those dependencies. They are
ONAP-PAP-REST/pom.xml
org.onap.policy.drools-applications.controlloop.common.policy-yaml
ONAP-PDP/pom.xml
org.onap.policy.drools-pdp.policy-endpoints
A separate review will be used to restore these dependencies to 1.2.2-SNAPSHOT
once the drools-pdp and drools-applications reviews are submitted and merged
PLD added version.properties
Issue-ID: POLICY-798
Change-Id: Id7e83f2ba12181c63cc8845b7eeccf2004d2bab9
Signed-off-by: liamfallon <liam.fallon@ericsson.com>
Signed-off-by: Pamela Dragosh <pdragosh@research.att.com>
Signed-off-by: liamfallon <liam.fallon@ericsson.com>
|
|
https://nvd.nist.gov/vuln/detail/CVE-2017-12626
Issue-ID: POLICY-722
Change-Id: I016d2d357858729b402ad010d47a31af053d2799
Signed-off-by: Pamela Dragosh <pdragosh@research.att.com>
|
|
Upgrade hibernator to clear clm issue.
https://nvd.nist.gov/vuln/detail/CVE-2017-7536
Issue-ID: POLICY-722
Change-Id: I1a4d9aa8ad3b477db0c91bd5a53a67932554213d
Signed-off-by: Pamela Dragosh <pdragosh@research.att.com>
|
|
Issue-ID: POLICY-736
Change-Id: If5c959aa1c0a123c7fd9eee281e39e1d646b6b03
Signed-off-by: Pamela Dragosh <pdragosh@research.att.com>
|
|
Issue-ID: POLICY-507
Change-Id: I493233f8e0e90eaf24e9c09c7433c6fb9fadb268
Signed-off-by: bobbymander <bobby.mander@att.com>
|
|
Some of these were ommitted from compile while others
were not completely ommitted.
Upgraded maven-compiler since it upgraded plexus-utils
Upgraded latest version of jackson-databind 2.9.5
Issue-ID: POLICY-507
Change-Id: If92ff4355329c48fbe76e0245d6c8344ebb8084d
Signed-off-by: Pamela Dragosh <pdragosh@research.att.com>
|
|
Issue-ID: POLICY-600
Change-Id: I870317bbd125c6016818ec435ea7a406123c66c1
Signed-off-by: bobbymander <bobby.mander@att.com>
|
|
v4.5.1 is being ommitted via maven depedency resolution.
So we will exclude to help clear the CLM issue being
flagged.
Issue-ID: POLICY-507
Change-Id: I5636da0a8109fa66cf00eb9205d89d7437517955
Signed-off-by: Pamela Dragosh <pdragosh@research.att.com>
|
|
Will not clear any CLM issue but this for uses a version that is
using the latest lucene-queryparser. It is noted in the CVE for
lucene-queryparser that elasticsearch is not affected by the
issue. We will upgrade to keep up with the latest code.
Issue-ID: POLICY-507
Change-Id: I8580dbc704c48245faf298304b8aec76c9e773c4
Signed-off-by: Pamela Dragosh <pdragosh@research.att.com>
|
|
Issue-ID: POLICY-645
Change-Id: Ie83b4c91c8186433e582cccadf5c3d32209a88f4
Signed-off-by: rb7147 <rb7147@att.com>
|
|
First submit for re-organizing pom.xml dependencies. H2 is ONLY
used for testing and should be loaded otherwise. We removed it
from policy/common so that is affecting these test.
Issue-ID: POLICY-626
Change-Id: Iba86e89f2cb26581b2b465091e829d6bdd66a37b
Signed-off-by: Pamela Dragosh <pdragosh@research.att.com>
|
|
Issue-ID: POLICY-620
Change-Id: Ib7cf286f62e945edcf5720ce2c53957b8456126d
Signed-off-by: rb7147 <rb7147@att.com>
|
|
A bit of consolidation too - which could use a lot more work. These
were simple security upgrades for fixes identified by LF weekly LCM job.
Added some missing license headers.
Issue-ID: POLICY-507
Change-Id: If285b0f95d30a1084c9363bf6a41b48d52fb3aff
Signed-off-by: Pamela Dragosh <pdragosh@research.att.com>
|