Access Control Plus Release Notes

ACP-2938 - ACP will only poll LDAP information from a single node per LDAP Authority.

ACP-2988 - ACP will no longer attempt to upload Account Information to GitMS/MSP every 5 seconds under rare conditions.

ACP-2896 - On the Connect to MultiSite settings page, if you try to set the GitMS or MSP Managing Node to "None", a warning will be generated but it will not actually have saved the setting.
Instead, the REST API can be used to set the Managing Node to none. To do this use the following curl commands:

# Set the Managing Node for MSP to "None":
curl -u admin:admin --header "Content-Type: application/json;charset=UTF-8" \
                    --data '{"property":[{"key":"acp.int.msp.managing_node","value":""}]}' \
                    -X PUT http://192.168.56.201:8083/api/settings/replicated

# Set the Managing Node for GitMS to "None":
curl -u admin:admin --header "Content-Type: application/json;charset=UTF-8" \
                    --data '{"property":[{"key":"acp.int.gitms.managing_node","value":""}]}' \
                    -X PUT http://192.168.56.201:8083/api/settings/replicated

ACP-2987 - ACP will attempt to deliver Auth files to GitMS/MSP inappropriately under rare conditions

ACP-2988 - As of ACP 1.9.1, setting the update frequency to less than 30 seconds will effectively have a value of 30 seconds due to other properties. In general, this value should be a minimum of 300 seconds in a production environment.

ACP-2528 - RHEL/CentOS 7 is now supported by ACP 1.9.0.

ACP-2654 - ACP can now be run using JRE/JDK 8.

ACP-62 - Administrative accounts polled via the Administrative Group will now be updated when their LDAP attributes change.

ACP-2551 - ACP now ships with Apache Collections 3.2.1 with its critical security fix.

ACP-467/ACP-468/ACP-479 - ACP now supports multiple SSH public keys per account. Multiples can be polled from LDAP and multiples can be set locally. Local SSH public keys can have aliases to make them easier to manage. See Adding Public SSH keys in the User Guide.

ACP-1536 - Disabled accounts are now visually distinct from non-disabled accounts in the ACP UI.

ACP-2272/ACP-2624 - Generated AuthZ file headers have improved readability.

ACP-2313 - Search facility now capable of including repository tag in search.

ACP-2338 - LDAP Accounts are now visually distinct from local accounts in the ACP UI. See Accounts

ACP-2342 - Resource sorting now includes refinements as part of the sort.

ACP-2536 - It is now possible to remove the "Associated LDAP query" from a team. The team’s membership must then be manually administrated.

ACP-2670 - Searching for resources is now easier to understand.

ACP-2702 - Better AuthZ file push management to GitMS and MSP.

ACP-621 - Accounts that are manually created from LDAP will now be updated when their LDAP attributes change.

ACP-1493 - SSH keys associated with LDAP Accounts will now be updated when they change in LDAP.

ACP-1823 - ACP’s logging now matches with companion GitMS/SVN MultiSite Plus products.

ACP-1940 - Audit Accounts are now stripped from all Teams upon upgrade (see restrictions for Audit Accounts).

ACP-2278 - ACP node names can now be re-used after a node-removal.

ACP-2359 - Can now change the IP address of multiple ACP nodes at the same time. Requires use of utility jar. See More information.

ACP-2378/ACP-2525 - LDAP Accounts are updated when their LDAP attributes change even if not a member of a Team associated with an LDAP query.

ACP-2399 - A team leader can now set an account to be a sub-team leader.

ACP-2403 - LDAP Authority passwords stored in ACP backups are now encrypted.

ACP-2404 - All plaintext LDAP Authority passwords are now encrypted as part of backup.

ACP-2406 - Email passwords are now encrypted in ACP backups.

ACP-2427 - ACP installer no longer depends on "rsync".

ACP-2437 - ACP upgrade from 1.5.1.1 now properly records FLUME_MAX_MEMORY in main.conf file.

ACP-2463 - Java NPE fixed on LDAP poll.

ACP-2464 - Performance tuning on LDAP poll.

ACP-2469 - Fixed API documentation for adding accounts.

ACP-2471 - XML for ACP REST API eliminate duplicate global components.

ACP-2505 - Better handling of the Pending area of the Batch Updates Settings page.

ACP-2519 - We have enabled the account that ACP is installed as to use the "service" command to start and stop ACP properly.

ACP-2523 - Wildcard refinements are now honored during searches.

ACP-2526 - ACP nodes that have been sidelined will now have that state shown on the Setting page. Please contact Support should you find one of your ACP nodes has been sidelined.

ACP-2632 - When the managing node on the "Connect to MultiSite" Settings page is set to "None" then a warning is provided that polling is now off.

ACP-2533 - ACP log files are now properly rotated. The log files have been renamed from "scm-access-control.log.<dateStamp>" to "acp.log" when active and, when rotated, to "acp.log.<dateStamp>".

ACP-2547/ACP-2713 - ACP licensing now only counts accounts that are members of teams require licenses. LDAP accounts that no longer are members of teams (e.g. they are no longer polled into a team via a query) will no longer be automatically disabled.

ACP-2570 - GFR now properly validates “svnserve” location.

ACP-2573 - Inappropriate "Priority Conflicts" have been eliminated.

ACP-2678 - It is no longer possible to create an LDAP account without associating it with an LDAP authority.

ACP-2579 - Git rules are now properly formatted and displayed when mixed with Subversion rules.

ACP-2605 - Fixed a PANIC due to a missing task.

ACP-2607 - ACP now properly counts applicable rules when "Apply Rule to all current and future team members." is selected.

ACP-2613 - GFR now properly rotates its logs. If you have been rotating these logs using some other mechanism then you should stop.

ACP-2619 - Negative priorities are now properly displayed in the UI.

ACP-2628 - ACP now properly generates proper ordering of "*" and "" sections in Subversion AuthZ file.

ACP-2629 - ACP will no longer poll GitMS or MSP if the corresponding Hostname/IP Address has not been filled in.

ACP-2685/ACP-2706 - One possible cause for inappropriate marking of "Repository is Removed" has been eliminated. Final fix will be in MSP 1.6.5 and MSP 1.9.3 due out later this fall.

ACP-2690 - ACP will no longer hang if a log file was removed prematurely.

ACP-2739 - New REST API to enable modification of the associated LDAP authority to a non-local account.

ACP-2744 - Fixed API doc’s resource element description.

ACP-2753 - Team Leader can now set permissions for Sub-Team Team Leader.

ACP-2885 - Currently it’s possible, in very rare circumstances, to receive an incorrect error notification after creating a new team rule. E.g.

ACP-2903 - There is a know issue for Team Leaders: with sufficient permissions it may look like they can add SSH public keys for team members other than themselves. They cannot, any attempt will silently fail. Also, if they want to modify their own SSH public keys they need to use the "self-service" page. Otherwise, again, the addition silently fails.

ACP-2911 - There is a quirk in the ACP UI where a rule priority conflict warning which would appear on the top menu bar, will not clear if all rules are removed. In production this is unlikely to appear, given that you can’t run without rules.

ACP-2888 - See changes to the REST API

RHEL 6.6

CentOS 6.6

RHEL 7.1

CentOS 7.1

SUSE 11.3

JDK 7

Firefox 36 or later

Google Chrome 56 or later

Internet Explorer

Safari

Opera