CVS log for loncom/interface/lonconfigsettings.pm

Up to [LON-CAPA] / loncom / interface

Request diff between arbitrary revisions

Keyword substitution: kv
Default branch: MAIN

- For 2.11.4 (modified)
  Include changes in 1.72

- Bug 2689

- For 2.11.4 (modified)
  Include changes in 1.68, 1.69, 1.70, 1.71

- Remove some trailing white space.
  Np code changes

- Bugs 6754 and 6907
  - Return of grades to launcher CMS supported for resources or folders
    accessed via LTI-mediated deep link.
  - Support option: "Encrypt stored consumer secrets defined in domain"
  - Signing of LTI payloads for roster retrieval, passback of grades,
    and callback to logput launcher CMS session all now occur on
    primary library server for course's domain.

- Bug 6754
  Order of components in name for secret field when adding new external
  tool same as used when adding new link protection item (both use
  lonconfigsettings::ltisecret_js() for validation).

- Bug 6754
  - Support encryption of secrets set for External Tools in a domain.
  - Requires perl-Crypt-CBC
  - External Tools can be configured in a course via Course Settings by a user
    with 'opa' privilege in the course.

- For 2.11.4 (modified)
  Include changes in 1.67

- Bug 6971 Individual user preference for Time Zone.

- For 2.11.4 (modified)
  Include changes in rev. 1.66

- Bug 6972.
  Option in course to display every External Resource Item as link (and
  launch in a tab or window) instead of in iframe.

- For 2.11.4 (modified)
  Include changes in 1.65

- Bug 6907
  Link Protection configuration for each launch application can include
  the name of the parameter used in the launcher payload to contain a URL
  in the launcher course to return to after exit from the LON-CAPA session.

- For 2.11.4 (modified)
  Include changes in rev. 1.64

- Expire cache of course's link protection settings on other servers in a
  course's domain after making changes.

- For 2.11.4 (modified)
  Include changes in 1.61, 1.62, 1.63

- Bug 6907
  Uncheck "Visible input?" checkboxes on form submission.

- Bug 6907.
  - Assign unique name and id to "Visible input?" checkbox for each Link
    Protection item, and uncheck each one on page load on course's home server.
  - Uncheck "Visible input?" checkbox and set type to password for textbox
    for secret on form submission.

- Iterate over settable array for launch items which don't yet have a secret
  set.

- For 2.11.4 (modified)
  Include changes in 1.58 (modified)

- For 2.11.4 (modified)
  Include changes in 1.58, 1.59, 1.60

- Name changed from linkprotection to linkprot in courseprefs.pm rev. 1.102

- Bug 6907
  Link Protectors for deep-linking from launch from LTI Consumer can be
  configured at both a domain level and a course level.

- Bug 6907
  - Rename "LTI Provider" domain config item.
  - Add three additional sections: "Encryption of shared secrets",
    "Rules for shared secrets" and Link Protectors (domain).
  - Keys used in domain for a particular library server may only be set in
    a session on that server (and use Lond.pm and not lonc/lond).
  - Min and max length and character requirements can be set for secrets used
    for LTI-based link protection for deep-links.

- For 2.11.4 (modified)
  Include changes in 1.56, 1.57.

- Bug 6907
  - Domain default to determine whether LTI launch of deep-linked URL requires
    student to authenticate; can be overridden for specific course(s).
  - If domain config permits it, link protection setting in a course can
    specify whether to accept username included in LTI payload, and action
    to take if username is not for an enrolled student.
  - Second arg passed to ltiauth::invalid_request() is text string stating why
    LTI launch was invalid.

- Bug 6907
  - Extraction of LTI itemID based on consumer key in signed LTI payload, and
    verification with available secret moved from ltiauth.pm to Lond.pm.
  - Verification will now occur on course's home server or domain's primary
    library server, for course-defined LTI ID, and domain-defined LTI ID
    respectively.
  - Setting and modifying link protection key and secret now requires user
    session on course's home server.
  - Display of existing LTI key only available of course's home server.
  - Display of stored LTI secret eliminated so a Course Coordinator will
    need to record it offline or commit it to memory.

- For 2.11.4 (modified)
  Include changes in 1.39, 1.51

- For 2.11
  Backport 1.54, 1.55

- Extend "zero enrollment failsafe" mechanism so it can also (optionally)
  protect against unwanted drops if partial data retrieved from institutional
  source for specific institutional section.

- Remove extraneous single quotes.

- For 2.11
  Backport 1.48, 1.49, 1.50, 1.52, 1.53

- For SAML authentication (Shibboleth) config for each of domain's nodes
  to set /adm/log-in as landing page for user toggle between SSO or non-SSO.

- Bug 6959 Automated update can be configured to skip checking for changes
  in user information for users deemed inactive.

- Bug 6907 Content in a course can be set to be deep-link only.
  Extra arg for &courseprefs::process_changes() in lonconfigsettings.pm call.

- Bug 6907 Content in a course can be set to be deep-link only.
  - deeplink parameter has 5 components:
    state, others, listing, scope, protect and menus.
  - deeplink protection for launch from non-LON-CAPA LTI-enabled systems
    uses /adm/launch/tiny/$dom/$uniqueID, and key and secret used by launcher
    can be set in a course (by CC), or for domain (by DC).

- Ensure "Display" button is below three column list of settings in Chrome.

Bug 6914
 - Update domain config UI to support settings documented in
   Domain_Configuration_WAF_Proxy.tex

- For 2.11.3 (modified)
  Include changes in 1.39 (modified) and 1.41

- Bug 6935

- For 2.11.2 (modified)
  Include part of changes in 1.34

- For 2.11.2 (modified)
  Include changes in 1.39 (modified) and 1.41

- For 2.11
  Backport 1.37, 1.45

- For 2.11
  Backport 1.34, 1.35, 1.36

- Bug 6754. LON-CAPA as LTI Provider.
  Domain configuration to support session expiration in LON-CAPA,
  after user logs out of LTI Consumer which originally launched session,
  (if Consumer supports logoutServiceUrl; e.g. custom_logout_url in Canvas).

- For 2.11.2 (modified).
  - Include changes in 1.45

- Uploaded bubblesheet data can consist of comma separated values.
  - Data will be converted to one of formats specified in bubblesheet
    format file, prior to saving in scantron_orig_* file.
  - Domain configuration for bubblesheet data format allows order of
     columns in csv data to be specified.
  - &get_scantronformat_file and &get_scantron_config moved from grades.pm
    to lonnet.pm to facilitate re-use.

- Bug 6754 LON-CAPA as LTI Provider
  - Support requests to /adm/service/passback and /adm/service/roster in
    which OAuth data in request header.
  - Support LTI Basic Outcomes Service (1.1) in which grade (a decimal) is
    included in XML in the request body (with oauth_body_hash in the header).
  - LTI Provider domain configuration to set grade passback using either
    Outcomes Service (1.1) -- the default -- or Outcomes extension (1.0).

- Bug 6754 LON-CAPA as LTI Provider
  - Domain defaults for each Consumer
    - display standard LON-CAPA menus? (top line and/or second line)
    - menu include: fullname, role, context, logout, and/or grades?
  - Course Coordinator can override in course via "Course Settings".

- Bug 6754 LON-CAPA as LTI Provider
  - Creation of new LON-CAPA user account available from an LTI Consumer.
  - Creation of new LON-CAPA course available from an LTI Consumer.
  - Self-enrollment in a LON-CAPA course available from an LTI Consumer.

- Bug 6754 LON-CAPA as LTI Consumer
  Domain configuration for information sent to Tool Provider on launch
  includes choice of: username, or username:domain in LON-CAPA,
  when "User" is included in the data to be sent (as lis_person_sourcedid).

- Bug 6754 LTI Integration: LON-CAPA as LTI Provider
  - Work in progress

- LON-CAPA as LTI Consumer.
  - Domain configuration to specify how long after launch the two items can
    be used -- days for passback of grades; seconds for retrieval of roster.

- For 2.11.2 (modified).
  - Include changes in 1.34 (part), 1.37, 1.38.

- concatenate additional onload items.

- Domain configuration to override domain's helpdesk settings for e-mail
  recipients, and optionally added text, based on requester's affiliation
  (e.g., faculty, staff or student).

- Use 2.12 feature pre-release, in modified 2.11.2.
  Self-creation of user accounts using e-mail verification with settings
  dependent on requester's (self-reported) institutional status.
  Changes in rev. 1.34, 1.35, 1.36

- Self-creation of user accounts using e-mail verification.
  - Options set by domain coordinator for account requests verified by e-mail
    for: processing, restrictions on permitted e-mail addresses, and choice
    of username can be set to different values, depending on requester's
    (self-reported) institutional status.
  - Setting which status types can be self-reported by requesters using
    e-mail verification moved from
    "Default authentication/language/timezone/portal/types" panel to
    "Users self-creating accounts" panel.
  - Web form used to request account prompts user for appropriate responses
    depending on self-reported status, and e-mail and username constraints.

- Fix typos.

- Self-creation of user accounts using e-mail verification.
  - User can be prompted to choose affiliation (e.g., instructor, student,
    other etc.).
  - User can be given option to choose a username, while e-mail address
    still used for verification. A required e-mail domain can be set.
  - Domain Coordinator can display user-selected status and user's e-mail
    address when choosing to approve queued account requests.

- For 2.11
  - Backport 1.33

- vpa priv allows Course Settings to be viewed, but not modified.
- users with vpa priv in a course receive "View parameter settings
  (due dates, etc) for resources and the course" item in the Main Menu,
  and a Settings item in the inline menu.

- For 2.11
  Backport 1.31

- Use Server Name Indication (SNI) and SSL when replicating content from
  /raw/.
- Domain status screen has link to show status of LON-CAPA SSL certificates.
- "SSL" domain config for (a) "internal" LON-CAPA SSL connection to servers/VMs
  in other domain, (b) Replication of domain's resources to other domains.
- Replication can use name-based virtual hosts with SSL, with verification of
  client certificate (cert: /home/httpd/lonCerts/lonhostnamecert.pem, signed
  by LON-CAPA CA, with Common Name of internal-<server hostname>, same IP address
  as server hostname).

fixed bug 6782, and escaped most localized messages used in Javascript blocks to make sure bugs like that do not happen again

- For 2.11
  - Backport 1.30.

- General course settings: users allowed to clone course.
  - Show if domain default is set.
  - Adding any course-specific setting will cause domain default to
    be ignored.
  - For official courses, where localenroll::instcode_defaults()
    has been customized, can also allow cloning by specific
    partial institutional codes (e.g., department + number: such as
    phy184 for example).

- For 2.11
  - Backport 1.29.

- Institutional ststus types can now be defined via domain configuration
  web interface by Domain Coordinator -- will supercede use of customized
  localenroll::inst_usertypes().

- Self-creation of account with e-mail address as username:
  - Domain configuration to set which status types (faculty, staff , student
    etc.) can apply to "non-institutional" usernames.
  - Processing of username requests can be either automatic or queued for
    approval depending on status type (self-reported).

- For 2.11
  - Backport 1.28.

- Bug 6646
  - Domain Configuration for self-creation of accounts moved to its own
    separate panel (keep storage of settings in existing locations in
    configuration.db , i.e., usercreation and usermodification.
  - Additional option for self-created accounts which use an e-mail address
    as username -- queue for approval by Domain Coordinator.
  - Can specify which DC(s) should be notified if user account requests are
    added to the queue.
  - Can specify what information the user needs to provide in addition to
    an e-mail address when requesting creation of an account.

- For 2.11
  - Backport 1.27.

- Setting domain configuration for items included in domdefaults, which is
  cached for 24hrs in memcache.
  - &devalidate_remote_domconfs() takes second arg -- $cachekeys -- a reference
    to a hash of items to devalidate on the domain's servers.
    - two possible hash keys: domainconfig or domdefaults
  - Update of domdefaults as a result of processing changes in domain configuration
    cause lonnet::do_cache_new() to be called on current server, and also
    domdefaults to be added to the $cachekeys hash.
  - Seventh arg in domainprefs::process_changes() is now a ref to a hash instead
    of a ref to a scalar.
  - lonconfigsettings::make_changes() now returns a ref to a HASH, where keys
    (if any) are items to devalidate on the domain's servers.
  - Retrieval of domdefaults when displaying domain configuration screen or
    processing changes includes directive to ignore_cache and read from
    configuration.db file on domain's primary library server.

- For 2.11
  - Backport 1.24 (part), 1.26.

- Where modification to domain configuration results in devalidation
  of a domain's cached domconfig on the current server:
  -  call new routine: &devalidate_remote_domconfs()
     to devalidate the same cached information on the domain's other servers.
     - uses lonnet::remote_devalidate_cache().

- div tags opened with lonparmset::startSettingsScreen() need
  to be closed with matching lonparmset::endSettingsScreen().

- lonparmset::startSettingsScreen() takes third arg - course type
  (Course or Community).

- For 2.11
  - Backport 1.22, 1.23.

Consistent layout: actionbox

Enable use of colorchooser jquery plugin for domain peferences color selection

- For 2.11.
  "Course Settings" and "Content and Problem Settings" tabs are a 3.0 feature.

Modal windows

Tab for Course Preferences shows up

Cleaning up accordion

- No "Course Settings" and "Content and Problem Settings" tabs
  when module is used in domain context (for Domain Configuration -- DC roles).

For 3.0: Settings

- Backport 1.16.

- Backport 1.15.

- Typo.

- jQuery Accordion style not in 2.10.

- Following the switch to 2.10, domains may prefer that their users do not have sessions hosted on older versions of LON-CAPA.
- Domain Coordinators can control:
  (a) where their users may have sessions hosted (by domain and/or LON-CAPA version).
  (b) which other domains will have user sessions hosted on servers in the domain.

- Backport 1.14.

- Eliminate duplicate declarations.

- Put "check all" and "uncheck all" buttons inside a <div>.

- Backport 1.12.

- Eliminate option to choose one or two column display of configuration settings for Domain configuration.
  - Use centred single column div for both domain config and course config).
- Use three columns for names of settings to choose for display on next page.

- Backport 1.11.

Inserted confirm-success-boxes due to consistent screen layout.

Additional style for elements within an accordion, and adds jQuery
javascript to support advanced elements.  If any <tr> elements are found
inside an accordion container with the class "advanced", they are hidden
by default and a "Show advanced options" checkbox is created.  Toggling
this causes these additional options to fade in/out as desired.

course prefs --> jQuery accordion.  in order to not disrupt domain prefs,
etc. for now, some style information is changed dynamically through
jQuery CSS transformations.  also ignoring column display preferences for
now.  but this gets something into CVS...

- Accommodate Communities
  - Top Level Category: "Communities" defined in system
    (Domain control to hide/unhide).
    - Can only assign communities to this category (and its subcategories).
- Domain Coordinator definition of new top level categories:
   instcode and communities are reserved for system use
   (may not be used for names of additional top level categories).

- Accommodate Communities:
  - Wording variants: course -> community, Course -> Community,
                      Classlist -> Membership, Staff -> Facilitators,
                      Student -> Member, student -> member.
  - Role choices: co role instead of cc role for communities

- xhtml.

- Include "Parameter Manager" in breadcrumb trail, if course configuration accessed from there.
- Wording change: Functionality -> Settings.

Usability improvements for course configuration screen.

lonconfigsettings.pm
- Wording change in breadcrumbs: "Display/Edit Settings" replaces "Course Settings".
- Changes in args passed to courseprefs::process_changes().
- Added call to courseprefs::store_changes to save to environment.db
- Added call to courseprefs::display_disallowed().

courseprefs.pm
- Moved code to generate array of names of all course configuration settings to &get_allitems() routine to facilitate reuse.
- Text descriptions of config settings moved to hash within entry for each category.
- Hash ref $disallowed passed as additional arg to process_changes() to accumulate requested changes that are not permitted.
- &process_changes() routine used to populate %changes hash with settings that have changed (and their new values).
- &check_clone() used to check requested cloners have valid username/domain.
- &store_changes() used to populate %storehash with change settings so they can be written to environment.db and also generates output to show what has been changed.
- Ability to create (new) custom course setting added tp print_other().
- Replace use of &Apache::lonnet::privileged() with retrieval of &Apache::lonnet::get_domain_roles() for dc roles.
- &get_lang_choices() routine added to retrieve hash of supported languages.
- &cloners_javascript() added to provide update_cloners() javascript function which will toggle radio buttons appropriately for any domain, any user from specified domain etc.
- &update_env() to append certain course config changes to current %env, and also update nohist_courseids.db
- &display_disallowed() to display information about requested setting changes which did not occur because they were disallowed.
- course environment settings are deleted from environment.db if they are changed to undef.
- Work in progess - logging (and logging interface) still needed.

- &display_settings() takes additional (optional) arg - $allitems.
- $allitems is passed as additional arg in call to &courseprefs::print_config_box().

- domainprefs.pm
 - Current values are passed to &process_changes() as a reference to a hash.

- lonconfigsettings
 - &print_header() takes an additional (optional) fourth arg - $jscript.
 - in course context: courseprefs::process_changes() used to process changes.
                      courseprefs::print_config_box(): sixth arg: $values hash ref.

Re-use of configuration interface for domain settings.
- Move &print_header(), &print_footer(), &color_pick_js(), and &javascript_set_colnums from domainprefs.pm to lonconfigsettings.pm.
- Move code from domainprefs.pm to new routines in lonconfigsettings.pm
  - &make_changes()
  - &display_settings()
  - &display_choices()