GitLab

Allow project enrollment and ownership only for users that are accepted,
not just email_verified.

Also change base quota only for accepted users.

Make available in the API only resources with api_visible=True.

Remove custom manager that implemented select_for_update(), since this
is already implemented in Django 1.4.

Enrolling a user in a project now returns 409 if the project does
not exist, rather than 404.

Enrolling a user sets its membership state directly to ACCEPTED, also
in case of REQUESTED.

Prefetch data in bulk queries in order to avoid continuously querying
the database.

Define function `reinstate' to re-activate a terminated project. If its
name is taken by another active project, it fails.

We need to make sure that the name to be approved is unique
among all non-terminated projects. We thus acquire a global
lock before approving.

Introduce model ProjectLog as well as fields in ProjectApplication
in order to record all actions.

Record user who performed the action and optional reason.

Replace IOError and PermissionDenied with project-specific exceptions.

Identify a membership by its id only.

Replace ProjectMembershipHistory with ProjectMembershipLog, which
records every state transition. Never delete any ProjectMembership
entry; set it instead to an appropriate state.

Submit a project modification by specifying a project id rather than
an application

Applications now point to a project (rather than an extra model Chain).
A Project is created upon submitting an application; it always points to
a single `reference' application.

Model Chain is kept as a sequence to generate project ids.

BASE_URL contains the prefix which is also included in paths returned from
django's reverse utility. Thereby joining BASE_URL with a reverse result
generates urls with duplicate BASE_PREFIX. Replaced BASE_URL with BASE_HOST in
such cases.

https://service.deployment.vendor.tld/service-base/api-prefix/hard/path
|___________________________________| |__________| |________| |_______|
             BASE_HOST                  BASE_PATH    PREFIX    Hardcoded
|_________________________________________________|
             SERVICE_BASE_URL

- Introduce <SERVICE>_BASE_URL setting, and <API>_PREFIX constants
  for all services. Extract BASE_HOST, BASE_PATH from the setting.

- Use settings and constants to construct top-level patterns
  (base-path/api-prefix) in services' urls.py

- Refactor/extend proxy() to be compatible with the above.

- Change URLs passed around (ui, e-mails) to be compatible.
  (needs more work)

Notes:

This configuration REQUIRES that any rewriting and proxying on the
front-end must eventually result in the application server (gunicorn)
getting the original path of the request, otherwise the view-generated
URLs will be different.

Changes:
- set top-level urlpatterns from <SERVICE>_BASE_URL
- rename setting: APP_INSTALL_URL to CYCLADES_BASE_URL
- rename setting: ASTAKOS_URL to ASTAKOS_BASE_URL everywhere
- introduce setting: PITHOS_BASE_URL
- update shipped .confs, quick install admin guide, upgrade guide
- fix urls/views/reverse()/other that were broken
- (more not listed)

Email subjects are parameterized by site name and application-
specific data. Other than that they should be constants rather
than settings.

Remove unused GROUP_CREATION_SUBJECT.

Import astakos settings module instead of importing specific settings

Keep UserSetting model; to be removed in a future version.

Lock project's chain for every operation affecting either a project or
an application. Subsequently, lock user when needing to sync or to issue
commission to update pending_app quota.

In views, replace locking qh_add_pending_app with check_pending_app_quota,
which will only query quota, so that to respect the above mentioned order.

Order by id when locking multiple users.

Also add a missing import in quotas.py

Use synnefo_branding.util.render_to_string accross synnefo apps to be able to
use branding variables within the templates.