CVS log for loncom/interface/loncommon.pm

Up to [LON-CAPA] / loncom / interface

Request diff between arbitrary revisions

Keyword substitution: kv
Default branch: MAIN

- WCAG 2 compliance

- Headers on main page had used &designparm($function.'.img',$domain) [function
  is one of student, coordinator, author or admin], when Remote Control was in
  use, prior to rev. 1.949 (main branch) and rev 1.1075.2.21 (2.11 branch).
- Scalar $img in &standard_css() in rev. 1.352, but never used in that routine.

- Correct spelling in a comment

- For 2.11.4 (modified)
  Include changes in 1.1075.2.172, 1.1075.2.173, 1.1075.2.174.

- Remote Control is on, eliminate loading of javascript for switchserver page
  because it will not be used.

- If "links_disabled" is included in args passed to &start_page(), apply to
  links in top nav shown when Remote Control is on.

- For 2.11
  Backport 1.1438, 1.1439, 1.1440 and one more case of (Remote Control is on)
  "BEGIN LON-CAPA Internal" should be balanced by an "END LON-CAPA Internal"

- "BEGIN LON-CAPA Internal" should be balanced by an "END LON-CAPA Internal"

- Typo

- Disable links in primary menu for switchserver page, because session will
  have been ended on server from which switch is to be made.
- Eliminate loading of javascript files for switchserver page because they
  will not be used.

- For 2.11.4 (modified)
  Include changes in 1.1075.2.169, 1.1075.2.170, 1.1075.2.171 (modified)

- For 2.11 Remote Control in use.
 - Authoring Space screen top row menu now consistent with other screens when
   Remote Control in use: Name (no drop-down on hover), Context, Help,
   "Switch to Inline Menu Mode"; no secondary
 - Functions in Authoring Space includes "Edit Metadata" if directory list
   and Options, if called in course context.

- For 2.11
  Changes in rev. 1.1075.2.21 mean $upperleft added in 1.1075.2.12 is no
  longer used.

- For 2.11
  Changes in rev. 1.1075.2.21 mean this code added in 1.1075.2.13 will
  never run.

- For 2.11.4 (modified)
  Include changes in 1.1437

- On Roles/Courses page for mobile users, div containing breadcrumbs needs
  a style of "overflow: visible" to override CSS for #LC_breadcrumbs id,
  so all options in "Roles options" drop-down (activated on hover) are seen.

- WCAG 2 compliance. Need to specify background color if foreground color is
  specified for success criterion 1.4.3.

- WCAG 2 compliance

- For 2.11.4 (modified)
  Include changes in 1.1414 omitted in 1.1075.2.161.2.22

- For 2.11.4 (modified)
  Include changes in 1.1434

- Use "Rules for shared secrets" defined in Domain Configuration for
  External Tools when Course Coordinator sets secret in tool definition.

- For 2.11.4 (modified)
  Include changes in 1.1406 (part), 1.1407, 1.1433

- Typo in comment.

- For 2.11.4 (modified)
  Include changes in 1.1429, 1.1430, 1.1431, 1.1432

- For 2.11
  Backport 1.1432

- Stop duplication of "LON-CAPA" in title tag for help pages.

- For 2.11
  Backport 1.1383 (part), 1.1389, 1.1390, 1.1392, 1.1396, 1.1398

- For 2.11
  Backport 1.1388, 1.1412

- Bug 6990. Ability to download tarball of Authoring Space's files/directories.
  - Support use of domain default and also override for individual author(s).
  - Check if there is sufficient disk space to create archive file
  - Each author may only have one archive request in process at a time
  - Remove archive file after download
  - Log archive creation and deletion actions in nohist_archivelog.db in
    author's data directory.

- Daxe editor can edit an html file created in course folder using Course
  Editor in either Main Content or Supplemental Content.

- Available editors in Course Authoring Space, or when editing an html file
  created in a course folder using the Course Editor is a domain default,
  which can be overridden in specific course(s) by a Domain Coordinator.

- For 2.11.4 (modified)
  Include change in 1.1428

- display style for LC_menus_content.shown needs to be block for jQuery
  call to height() for this element in Safari to provide appropriate value.

- For 2.11.4 (modified)
  Include changes in 1.1427

- Starting state of standard LON-CAPA menus (collapsed or expanded) when
  using Daxe Editor is one of domain's Authoring Space defaults which can
  be overridden by Author (or coauthor).
- "Authoring Space Configuration" in User Preferences (also accessed via:
  Settings > Editing Options when author or co-author role is selected)
  provides user with override when Daxe editor is a permitted editor.

- For 2.11.4 (modified)
  Include changes in 1.1414 (part), 1.1415.

- For 2.11.4 (modified)
  Include changes in 1.1230, 1.1231, 1.1416, 1.1417, 1.1418, 1.1419, 1.1420,
  1.1421, 1.1422, 1.1423, 1.1425

- Code used to create default.rights file for course authoring space
  moved from londocs.pm to loncommon.pm to facilitate reuse.
- Course Editor > Content Utilities > Enter Course Authoring Space
  will create required directories and default.rights file if absent.

- Add POD for two subroutines moved from lonwrapper.pm in rev. 1.1420.

- Shorter text in link to Authoring_Multilingual_Problems help item.

- Include file path with colored background in collapsible header used for
  Daxe Editor page. Buttons to access other available editors at far right.

- Support checking of available editors when saving in Daxe, when current
  role is a course role.
- Support localization.

- Available editors in Authoring Space: value set for specific author can
  override domain default.
- Daxe editor page includes "collapsed" standard inline LON-CAPA menus
  (primary, secondary, and Functions). Icons at top left to toggle
  expansion or collapse.

- Move javascript used for handling resize of page containing iframe from
  lonwrapper.pm to two new subroutines in loncommon.pm to facilitate reuse.

- Add pod for &nocodemirror() and &permitted_editors().

- Available editors in Authoring Space: value set for specific author can
  override domain default.

- Support domain default or user override for activation or deactivation
  of CodeMirror.

- Support domain default or user override for activation or deactivation
  of CodeMirror.

- Bug 5273 Co-authors in "group authoring" accounts can manage co-authors

- Authoring Space defaults defaults which domain coordinator can override.
  - Available Editors, WebDAV access, Disk Quota for Authoring Space
    can be set for specific users by DC via "Add/modify user"
- Bug 5273 Co-authors in "group authoring" accounts can manage co-authors
  - Existing co-author(s) can be assigned rights to add/revoke co-author
    roles. Can be set by DC via "Add/modify user" or by author via "People"
- Co-authors and Assistant co-authors can view a list of co-authors for
  the Authoring Space. Availability set by Author or Co-author "manager".
  Listing can be set to "opt-in".

- For 2.11.4 (modified)
  Include changes in  1.1412,  1.1413

- Bug 6979 Work in progress.
  Reduce width of "View As" form in Functions menu by removing dropdown
  list for domain, and only displaying textbox for either username or ID
  (radio buttons to toggle between the two). Default domain is course's
  domain.

- Bug 2689

- For 2.11
  Backport 1.1411

- For 2.11.4 (modified)
  Include changes in 1.1411

- Bug 5219
  Dashes in text pasted into textbox(es) for numericalresponse item(s)
  replaced with standard ascii minus, i.e., -

- For 2.11.4 (modified)
  Include changes in 1.1404

- For 2.11.4 (modified)
  Include changes in 1.1305, 1.1306, 1.1310, 1.1311, 1.1312, 1.1313, 1.1314,
  1.1316, 1.1318, 1.1371, 1.1405

- Fix typo in rev. 1.1408.

- call to LONCAPA::ltiutils::lti_provider_scope() was moved from lonmenu.pm
  to loncommon.pm in rev. 1.490 and rev. 1.1316 respectively (4/27/2018).

- Support case where assignment of roles in a different domain is queued
  pending acceptance of the role by the role recipient.
  - A user can also choose to decline the role.
  - Domain configuration can be set for domain roles, co-author roles,
    course roles and community roles.

- Remove "Actions for current directory" drop-down list from box created by
  &CSTR_pageheader() when listing contents of a directory in Authoring Space
  and replace with icons/links in Functions menu below standard inline menus.
- Reverse part of changes in lonpubdir.pm 1.176 and loncommon.pm 1.1406

- Move "Quick search" box to be left-most of three boxes above directory
  listing
- Move "Actions for current directory" into row above, between select box
  for recently accessed diretories, and disk spce utilization display.

- Bug 6754
  - Can select from tool definitions set in course's domain or in course
    itself when using External > "External Tool" in Course Editor.
  - DC's configuration for allowed use of esternal tools within course types
    (can be overridden for specific course(s)) determines which External Tool
    types (if any) may be added to a course.
  - Signing of LTI payload used to launch an external tool now carried out
    on course's home server.

- Bug 6979
  - Shortcut to student's view of problem etc. from 'View As' item in Functions
  menu above problem.
  - Part of code in &submission() subroutine in grades.pm moved to separate
  subroutine -- &show_last_submission() which can be called by &view_as_user(),
  which in turn is called from lonhomework.pm

- Accommodate argument changes in &selectbox() and &prettyinput() in lonmeta.pm
  rev. 1.255.

- "In course" authoring.
  Improved handling of case where no suitable resources authored in course
  exist when (a) using "Import from Course Resources" in Course Editor, and
  (b) using Choose File >  "Use a course file" to select published file as src
  in img tag in colorful editor.

- For 2.11.4 (modified)
  Include changes in 1.1401

- Bug 6975
  If timestamp/name prefix was present in title for resource in supplemental
  content for which hidden parameter was set or unset, parse it before
  displaying in change log.

- For 2.11.4 (modified)
  Include change in 1.1390

- For 2.11.4 (modified)
  Inclde change in 1.1398

- For 2.11.4 (modified)
  Include changes in 1.1389, 1.1391, 1.1392, 1.1393, 1.1394, 1.1395

- For 2.11.4 (modified)
  Include changes in 1.1384

- Use ajax to dynamically update drop-down lists of directories and files
  available in course author space.

- When commit_customrole() or commit_standardrole() are called in list
  context, both the result of assignrole() calls (e.g., ok) and a more verbose
  logging-type message will be returned.

- Args change in lonnet::assignrole() call in rev. 1.652 (for bug 5176) when
  switching section existing student role was missing an empty arg, leading
  to incorrect logging for context of the role expiration as "selfenroll".

- coding style

- For 2.11.4 (modified)
  Include changes in rev. 1.1396

- Cache user's aboutme page availability to speed up display of discussion posts.

- Bug 6975
  - &get_supplemental() routine moved from lonnet.pm to loncommon.pm
  - use LONCAPA::map() moved out of conditional block in loncommon.pm
  - $keeporder arg for update_content_constraints() no longer needed

- For supplemental content folderpath will contain ::1::: or ::::: suffix
  appendend to (escaped) foldername in Editor context. Suffixes will be absent
  when not in Editor context.

- Bug 6975
  - &validate_folderpath() moved from londocs.pm to loncommon.pm to facilitate
    reuse.
  - append ::1::: to escaped folder name for each folder/foldername pair in
    folderpath when using Course Editor to edit Supplemental Content
  - support case where custom role can access Course Editor, but adv priv
    not set at system level for current role, and content is hidden.

- Archive file can uploaded to top level of Main or Supplemental Content,
  and contents can be extracted.

- Bug 6975
  Folders and Resources in Supplemental Content area can be hidden using
  Course Editor.

- Hint to browsers to not autofill password fields.

- Copy global arrays from LONCAPA::map to scoped arrays before recursion.

- For 2.11.4 (modified)
  Include changes in 1.1387, 1.1388

- In course context, switch server to resource's home server opens new tab
  when editing published resource, and ca role is loaded,  when user's domain
  (by default) disallows session hosting of domain's users in resource's domain.
- New arg (skip_enc_check) in redirect args , used by loncommon::headtag()
  it true, omit application of check_encrypt().
- New seventh item ($shownsymb) in args for lonhtmlcommon::jump_to_editres()

- Bug 6971 Individual user preference for Time Zone.

- For 2.11.4 (modified)
  Include changes in 1.1386

- Dual SSO and non-SSO login from /adm/login
  - Display of domain configuration for each server split into two tables
    so input textboxes can be longer.
  - "Pop-up if iframe" (Y/N) item added.  If Y, when login page is in an
    iframe, SSO log-in dialog will be displayed in a new window, i.e.,
    not within the iframe, e.g., to satisfy sameorigin requirement in
    x-frame-options in header sent by SSO server.

- For 2.11.4 (modified)
  Include changes in 1.1385

- Bug 6907
  "Exit Tool" button available to logout a session launched via deep link
  and escape iframe and redirect (for LTI-protected link).

- Include printout icon in "Tools" above listing of course contents unless
  course is empty. Options include:
  - Print items not in a folder (if any exist)
  - Print items in a selected folder
  Privileged users can also print selected folder for selected users or CODEs.
- When displaying list of resources to select exclude any /adm/navmaps items
  themselves.

- For 2.11.4 (modified)
  Include changes in 1.1383

- Reverse a change in rev. 1.685 (duplicate 'use Apache::lonnet').
- Need 'use Apache::lonnavmaps()' to support printout.pl use in deep-linked
  context.

- For 2.11.4 (modified)
  Include changes in rev. 1.1313 (part), 1.1314 (part), 1.1378, 1.1379,
  1.1380, 1.1381, 1.1382.

- Bug 6907
  Link to LON-CAPA bug reporting system needs to open in a new tab/window
  when context is LTI Provider, or deep-linked, and display is embedded in
  another web page.

 - Bug 6907
  - When context is LTI Provider, or deep-linked, and display is embedded in
    another web page, set target to _parent for inline menu links, and help
    item when displayng search results within LON-CAPA's own frames.
  - Tenth arg for lonhtmlcommon::breadcrumbs() now $links_target instead of
    $crstype. $crstype had been added in 1.371, but ceased being used in 1.379.

- Bug 6907
  When context is LTI Provider, or deep-linked, and display is embedded in
  another web page, set target to _parent for inline menu links, and help
  item when displayng search results within LON-CAPA's own frames.

- Bug 6907
  Authoring Space header menu items need target="_parent" when using "Advanced
  Edit" to edit maps, if context is deep-linked, and deeplink parameter
  includes "Embedded " flag.

- Bug 6907 option to stop deep-linked items escaping iframe context.
  Seventh component (target) added to the deeplink parameter.
  Launch of deep-link (i.e. a tiny URL) sets $env{'request.deeplink.target'}.

- For 2.11.4 (modified)
  Include changes in 1.1376, 1.1377

- Bug 6907
  - Min and max length and character requirements can be set for secrets used
    for LTI-based link protection for deep-links.

- Move &passwd_validation_js() to loncommon.pm to facilitate re-use.

- For 2.11.4 (modified)
  Include changes in 1.1304, 1.1075.2.164, and part of 1.1359 and part of
  1.1372 omitted from rev. 1.1075.2.161.2.1

- For 2.11
  - Backport part of 1.1321 and part of 1.1372 omitted in earlier backports.

- For 2.11.4 (modified)
  Include changes in 1.1375

- For 2.11
  Backport 1.1375

- Bug 6955
  Domain Coordinator receives 'evb' (Evade communication blocking) privilege.

- For 2.11.4 (modified)
  Include changes in 1.1374

- For 2.11
  Backport 1.1374

- Domain config for alt attributes for banner, main logo, and domain logo
  used on log-in page.
- Add id attributes to img tags.

- For 2.11.4 (modified)
  Include changes in: 1.1219 (part), 1.1282, 1.1283, 1.1309, 1.1342, 1.1344,
  1.1346 (part), 1.1359, 1.1360, 1.1362, 1.1363, 1.1364, 1.1368, 1.1370

- Typo in rev. 1.1075.2.133 (backport of 1.1274).

- For 2.11
  Backport 1.1373

- Bug 6955 IP-based blocking.
  - Course search, Stored links, and Resource Annotations added to functions
    which can be blocked by client IP. (User with evb priv in course exempt).

- Fix typos in rev. 1.1075.2.158 backport of rev. 1.1357.

- For 2.11
  Backport 1.1281, 1.1310 (part) 1.1323, 1.1345, 1.1346 (part), 1.1351, 1.1355,
           1.1356, 1.1357, 1.1358, 1.1366, 1.1367, 1.1369, 1.1372 (part)

- Bug 6955 IP-based blocking. Pass user'sIP address as third arg to
  loncommon::blockcheck() and second to loncommon::blocking_status().

- Bug 6754
  - Storing mapping of Consumer course identifier to LON-CAPA courseID
    honors rules for allowable course types, and also general Y/N option for
    any type.
  - When a course is created due to launch from LTI Consumer, course's
    environment.db contains internal.lti set to 1, and extended course type
    is identified as "lti".

- Bug 6907
  If session was initiated via launch from a deep-link use menu in effect for
  the launch URL if current resource is a map and navmap object unavailable,
  or if resource should have a symb, but symb is unknown.

- Menu links on page displaying progress indicator while course role loads
  set to be unclickable until course is loaded.
- "Continue" link shown on page once course is loaded.

- Bug 6907
  Configuration for a numbered menu collection includes option to hide
  footer shown below a resource, and/or hide Discussion or Feedback links.

- Captcha on public-facing web forms.
  - textbox user entry for original Captcha on same line as instructions.
  - validation for reCaptcha 2 moved to immediately above form submission
    button, as there re-validation is required after 2 minutes.

- For SAML authentication (Shibboleth) config for each of domain's nodes
  to set /adm/log-in as landing page for user toggle between SSO or non-SSO.

- For 2.11 Reverse temporary change made in 1.1075.2.156
  This is now the same as rev. 1.1075.2.155.

- For 2.11
  Temporarily reverse changes included in rev. 1.1075.2.154 (1.1361 backport)

- For 2.11
  Backport 1.1365

- Bug 6953
  Run MathJax typesetting again after Previous Tries modal window opened.

- Bug 6907 Content in a course can be set to be deep-link only.
  Enforce link protection for lti-based or key-based access control.

- Bug 6907 Content in a course can be set to be deep-link only.
  - deeplink parameter has 5 components:
    state, others, listing, scope, protect and menus.
  - deeplink protection for launch from non-LON-CAPA LTI-enabled systems
    uses /adm/launch/tiny/$dom/$uniqueID, and key and secret used by launcher
    can be set in a course (by CC), or for domain (by DC).

- Bug 6907 Content in a course can be set to be deep-link only.
  If initial access is via a deep-link (/tiny/$domain/$uniqueid), and
  target folder/resource is deep-link only, access to resources, menus,
  and items listed in Course Contents controlled by deeplink parameter value.

- For 2.11.3 (modified)
  Include changes in rev. 1.1361

- For 2.11
  Backport 1.1361

- Support customization in localenroll.pm to eliminate ambiguity in extraction
  of institutional section from institutional course section for automated
  enrollment.

- Access &EXT() routine in lonnet.pm explicitly.

- Bug 6907
  - Display of menu items in course context determined by menu collection
    in effect (if set).

- Args in lonnet::spareserver() call consistent with lonnet.pm rev. 1.1451

- Display progress indicator after selecting role in a course while course
  session is established.

- Sanity checking

- No keys in environment.db beginning 'internal.' are copied when cloning.

- For 2.11.3 (modified)
  Include changes in rev. 1.1354

- For 2.11
  Backport 1.1354

- Remove trailing whitespace from phrase to localize.

- For 2.11.3 (modified)
  Include changes in 1.1322, 1.1324

- For 2.11
  Backport 1.1322, 1.1324

- For 2.11.3 (modified)
  Include changes in 1.1352, 1.1353

- For 2.11
  Backport 1.1352, 1.1353

- For users from a different institution if current server's offload
  targets are all set to switch on next access, set the offload target
  to the least loaded server in the user's domain.

- Switching user sessions for users from other institutions on next access
  - Check if domain config for offload of users from other institutions
    is in effect when finding a server to which to offload a user session.
  - If current server's offload targets all set to switch on next access
    set the offload target to the least loaded server in the user's domain.

- For 2.11.3 (modified)
  Include changes in 1.1351

- For 2.11.3 (modified)
  Include changes (modified) in 1.1350

- For 2.11
  Backport 1.1350 (modified)

- Blocking of user actions in a course during an exam can include access to
  "About Me" pages belonging to users in the course (course personnel with
  evb priv are exempt).

- Retrieval of requestor's IP address centralized in lonnet::get_requestor_ip()
- Domain configuration to allow domain's LON-CAPA nodes to operate behind a
  WAF/Reverse Proxy using aliased hostname (CNAME).
- Web requests from other nodes bypass the WAF as their requests are made
  directly to the server hostname (A record); same for internal LON-CAPA
  connections for lonc -> lond.

- For 2.11.3 (modified)
  Include changes in 1.1349

- For 2.11
  Backport 1.1349

- Move &css_links() from grades.pm to loncommon.pm to facilitate reuse.

- For 2.11.3 (modified)
  Include changes in 1.1348

- For 2.11
  Backport 1.1348

- Bug 6518 Content blocking during quiz/exam.
  - For resources not in a course directly, but instead referenced by resources
    which are, symb to check to determine whether access should be blocked and
    why is symb of resource containing the dependency.
  - No $env{'request.enc'} in effect for dependent files.

- For 2.11.3 (modified)
  Include changes in 1.1346

- For 2.11.3 (modified)
  Include changes in 1.1347

- For 2.11
  Backport 1.1347

- Bug 6518.
  More comprehensive access to symb for a requested URL to determine when
  access should be blocked and why, if content blocking in use.

- Blocking of user actions in a course during an exam can include Content
  Search (course personnel with evb priv are exempt).

- For 2.11.3 (modified)
  Include changes in 1.1282, 1.1283, 1.1345

- Blocking of user actions during an exam can include a student's access to
  course grades via the "Grades" menu item, and to a "detailed score sheet"
  if grading is set to use the Spreadsheet.

- For 2.11.3 (modified)
  Include changes in 1.1342, 1.1344

- For 2.11.3 (modified)
  Include changes in 1.1339, 1.1340, 1.1341

- For 2.11.2 modified
  Include changes in 1.1342, 1.1344

- Bug 6400
  Options for transfer or creation of tiny URLs when cloning.

- Provide 'Reply To' address set in lonmsg.pm when calling mime_email() in
  loncommon.pm
- Update documentation for mime_email().

- For 2.11.2 (modified)
  Include changes in 1.1342

- When cloning a course containing external tool(s) update course label and
  course title in all instances of tool(s), if values for them in cloned course
  contained default values: institutional code and course description.

- For 2.11.2 (modified)
  Include changes in 1.1309 missed in 1.1075.2.127.2.7

- For 2.11.2 (modified)
  Include changes in 1.1282

- For 2.11.2 (modified)
  Include changes in 1.1341

- For 2.11
  Backport 1.1341

- "Open all assessments" option during course creation now allows the start
  date to be chosen (default is current time) for the course-level opendate.

- For 2.11
  Backport 1.1340

- Add domain configuration to offload users from other institutions, on next
  access (after recording any submission to a problem).
- Switching user session to a different server can jump to the same resource
  currently being viewed when encrypturl is in effect.

- For 2.11
  Backport 1.1339

- For 2.11.2 (modified)
  Include changes in rev. 1.1339

- For 2.11.2 (modified)
  Include changes in rev. 1.1339

- Bug 6922. Revisit changes made in rev. 1.1252

- "use LWP::UserAgent" not required, because "use LONCAPA::LWPReq" is present.

- For 2.11.3 (modified)
  Include changes in 1.1336, 1.1337

- For 2.11
  Backport 1.1336, 1.1337

- Parameter setting via table mode for users with both student and non-student
  roles.
- Pop-up launched via "Select User" link shows appropriate table(s) of users.

- Fix typo, and remove unwanted white space between <a> and </a>

- For 2.11.3 (modified)
  Include changes in 1.1075.2.142

- For 2.11. Modify changes included in rev. 1.1075.2.135
  Use LWP::UserAgent instead of LONCAPA::LWPReq (which is not in 2.11)

- For 2.11.3 (modified)
  Include changes in 1.1219 (part), 1.1309

- For 2.11
  Backport 1.1335

- Bug 6921.
  CSS to provide word wrap in display of message body in a LON-CAPA message.

- For 2.11
  - Backport 1.1334

- Bug 6750
 When "Show Problem Status" in effect = no, and submission outside
 permitted range, orange background for: Submission not graded ... feedback

- For 2.11
  Backport 1.1297

- For 2.11
  Backport 1.1333

- Domain Configuration for passwords for internally-authenticated users.
  - Default minimum password length of 7 set in a single location.
  - Value for min length set in domain's configuration may not be less than
    the default.
  - javascript function:  warnIntPass() warns aboit invalid values for
    min and max length, expiration time, and number saved for domain
    config for passwords.

- For 2.11
  Backport 1.1327, 1.1331, 1.1332

- For 2.11
  Backport 1.1295, 1.1320

- For 2.11
  Backport 1.1328, 1.1329, 1.1330

- For 2.11
  Backport 1.1286

- For 2.11
  Backport 1.1274

- For 2.11
  Backport 1.1321

- Rules for length and/or characters in a LON-CAPA password (internal auth)
  checked when new user accounts are created or auth is changed via file upload.

- Response to incorrect Captcha on account creation page is to display a page
  containing a link back to the form, instead of a call to &invalid_state().
- Rules for length and/or characters in a LON-CAPA password (internal auth)
  checked server-side when a user self-creates a user account.
  - rule-checking code moved from lonpreferences.pm to loncommon.pm to
    facilitate reuse.

- Bug 6910
  - consistent naming in memcache
  - remove trailing white space.

- Bug 6910
 - Change regexp used to check for valid external URL (assumes ascii-only DNS
  hostname, and either http or https).
 - Cache result of frameability check for 60 minutes, when rendering page
  containing external resource URL, unless CC is using "Preview".

- Bug 6910
Gracefully handle display (and preview) for External Resources for which
Content-Security-Policy or X-Frame-Options prevent display in iframe in LC.

- Forgot Password utility
  - Support configurable: link lifetime, case sensitivity (for username and
    e-mail address), information required, e-mail types, and custom text.
  - Bug 6648: captcha can be enabled for public-facing web form.

- When &update_content_constraints() is called in Course Editor context,
  contents of LONCAPA::map globals need to be saved before recursing
  supplemental maps, and then restored.

- For 2.11.2 (modified)
  Use 2.12 feature: deny from specified IPs/Hosts as well as existing allow
  from for (a) slots with IP access control, (b) Client IP/Name (acc) param.

  Domain's configuration must be set to prohibit hosting of sessions for
  for user's domains outside own domain, and modification must be in place
  on all nodes in domain.

  lonparmset.pm: 1.548 (part), 1.549 (part), 1.551, 1.589, 1.590, 1.591
  loncommon.pm: 1.1219 (part)
  parameter.html: 1.73, 1.74, 1.75
  newslot.helper 1.34

- For 2.11.2 (modified)
  - Typo in rev. 1.1075.2.127.2.7 (included changes in 1.1309).

- For 2.11.2 (modified)
  Include changes in 1.1309

- For 2.11.2 (modified)
  Include changes in 1.1325

- For 2.11
  - Backport 1.1325

- datatoken validation needs to support csv upload in domain or author context.

- Scanning of lonnet.perm.log by loncron
  - Information about which nodes have unsent update transactions is logged.
  - Specific nodes can be excluded from unsend count (for delayed updates)
    via domain configuration.
  - Weight for unsend count (before adding to "warnings") is configurable.

- Log failure to generate CAPTCHA image, using Authen::Captcha.

- Nightly loncron: threshold for sending mail, and weighting for notices,
  warnings and errors in "totalcount" are configurable in node's default domain.
- Whether to copy status mail to core dev. group (and threshold) configurable.

- Ensure catalog_maxdepth form element has an appropriate (integer) value.

- For 2.11
  Backport 1.1301, 1.1302

- For 2.11
  Backport 1.1228

- For 2.11
  Backport 1.1297 (part), 1.1298, 1.1290, 1.1291, 1.1292, 1.1293, 1.1294,
  1.1298, 1.1299, 1.1300, 1.1303 1.1317

- Use 'secure' attribute for session cookie on servers using Apache/SSL.

- Use correct db name.

- Bug 6754 LON-CAPA as LTI Provider
  - For session launched by LTI Consumer, presence/contents of top line &
    second line menus determined by domain and/or course configuration.

- For 2.11.2 (modified)
  Include changes in 1.1317

- Use three-argument open() to separate file mode from the filename.

- Bug 6754 LON-CAPA as LTI Provider
  - No Contents item in inline menu for course if original LTI launch of
    LON-CAPA was for a resource or map.
  - No Role switcher in inline menu for session launched via LTI (role
    switching should occur in the LTI Consumer).

- Exclude .rights file from list of "course author" files available for
  import via "Import from Course Resources" item in Course Editor.
- Fix typo.

- Bug 6754 LON-CAPA as LTI Provider
  - If original LTI launch of LON-CAPA was for display in iframe linked
    LON-CAPA items are displayed within the same iframe.

- Bug 6754 LON-CAPA as LTI Provider
 - If original LTI launch of LON-CAPA specified display in an iframe, display
   Authoring Space directory in same iframe, when accessed via Edit in
   Functions menu.

- Bug 6754 LON-CAPA as LTI Provider
  - Original LTI launch of LON-CAPA is for a resource, a map, or an entire
    course, and display is for iframe, tab or window; retain this in %env.

- Bug 6754 LON-CAPA as LTI Provider
  - Creation of new LON-CAPA course available from an LTI Consumer.

- Bug 6754 LON-CAPA as LTI Provider
  - Creation of new LON-CAPA user account available from an LTI Consumer.
  - Creation of new LON-CAPA course available from an LTI Consumer.
  - Self-enrollment in a LON-CAPA course available from an LTI Consumer.

- Bug 6400 Tiny URL for deep-linking.
  Requires Short::URL and String::CRC32 modules from CPAN. Dependency on
  perl-Short-URL needs to be added to LONCAPA-prerequisites.

- Bug 6754 LON-CAPA as LTI Consumer
 - If a course has an External Tool (LTI) in Supplemental Content, then
   LON-CAPA 2.12 is needed.

- Bug 6754 LON-CAPA as LTI Consumer
  - If a course has an External Tool (LTI), then LON-CAPA 2.12 is needed.

- Bug 6754 LON-CAPA as LTI Consumer: External Tools in printouts.
  - Show name of tool instance in course (with points earned,
    if gradable and status is SHOW_ANSWER).

- Bug 6754 LON-CAPA as LTI Consumer
  Support for access control using slots, and also for time interval
  for external tools set to be "gradable".

- Option to suppress menu when displaying loncommon::simple_error_page()
  within a wrapped page.

- Fix typo in comment.

- For 2.11.2 (modified).
  - Include changes in 1.1299 and 1.1300, and one change in 1.1292 omitted
    in changes included in 1.1075.2.127.2.3.

- jquery-ui progressbar -- use indeterminate progressbar display if the
  maximum number of items to do is omitted from the call to Create_PrgWin().
- an optional HTML preamble can be included in the cal to Create_PrgWin()
  to display before the progressbar.

- Updating text in progress bar when there is no change in progress value
  requires explicit command because progressbar change action is only fired
  if value changes.

- Use File::Path::remove_tree() instead of File::Path::Tiny::rm, given that
  File::Path() is a core module in perl already used elsewhere in LON-CAPA.

- Sanity checking.

- For 2.11.2 (modified)
  - Include changes in 1.1290, 1.1291, 1.1292, 1.1293, 1.1294.

- For 2.11.2 (modified).
  - Include changes in 1.1297 and 1.1298.

- Use correct mailing type.

- Domain configuration to override domain's helpdesk settings for e-mail
  recipients, and optionally added text, based on requester's affiliation
  (e.g., faculty, staff or student).

- Remove trailing white space.

- If initialization of user session will remove an old session file,
  remove the secondary session file linked to it (Apache/SSL servers).

- Use 2.12 feature pre-release, in modified 2.11.2.
  Self-creation of user accounts using e-mail verification with settings
  dependent on requester's (self-reported) institutional status.
  - changes in rev. 1.1286

- Sanity checking
- Encode file path shown in HTML output, when displaying a warning.

- Routine is named clean_filename().

- Checking for overwriting of existing files when decompressing an
  archive file (zip, tar etc.) uploaded via the Course Editor
  - Replace system() calls with routines from File::Copy() and
    File::Path::Tiny().
  - Sanity checking.

- Correction to regular expression.

- Sanity checking

- Trust settings
  loncommon::domain_select() can take optional args -- refs to arrays of
  included domains, or excluded domains; used to populate drop-down list
  for domains in Advanced search interface.

- Trust Settings
  - lonnet::trusted_domains() returns array or array refs, for passing to
    loncommon::select_dom_form() or lonnet::will_trust().

- Trust Settings
  Check if action is permissible based on trust settings for:
  catalog, domroles, enroll, reqcrs, msg, othcoau, or coaurem for current context.

- Self-creation of user accounts using e-mail verification.
  - Options set by domain coordinator for account requests verified by e-mail
    for: processing, restrictions on permitted e-mail addresses, and choice
    of username can be set to different values, depending on requester's
    (self-reported) institutional status.
  - Setting which status types can be self-reported by requesters using
    e-mail verification moved from
    "Default authentication/language/timezone/portal/types" panel to
    "Users self-creating accounts" panel.
  - Web form used to request account prompts user for appropriate responses
    depending on self-reported status, and e-mail and username constraints.

- Bugs 4373 and 6131: recursive parameters.
 - User interface changes for table mode: columns for display/setting
   recursive parameters (map-level) eliminated, although levels retained.
 - Parameters set for Enclosing Map/Folder can be set to "Recursive" in
   pop-up menu.
 - If a parameter is currently recursive, the text: recursive is shown
   below the current value (clickable link); also shown in "Parameter
   in effect" table cell.

- Bug 6853
  - mapalias can be set in Course Editor.
  - mapalias not editable in parameter manager table view

- Fix blocking action name.

- Blocking communication/resource access (e.g., for exams) can include
  suppression of interruptions to a student's workflow due to:
  (a) Critical messages not moved to INBOX
  (b) Detection of changes to course structure, as a result of actions by
      a Course Coordinator.

- For blocking events triggered by activating timer, need to check if
  activity is among those for which blocking is in effect.

- For 2.11.2 (modified).
  Copy of check_ip_acc() from rev. 1.1219 included as check_slot_ip_acc()
  to support deny from specified IPs/Hosts as well as existing allow from
  ("deny from" checked first) when using slots with IP access control.

- Replace use of LWP::UserAgent with LONCAPA::LWPReq so replication of
  content from /raw/ can include verification of the requesting server's
  client certificate (Apache/SSL used).

- For 2.11
  - Backport 1.1279

- Option to search institutional directory not needed in user search
  when displaying user's access logs.

- For 2.11
  - Backport 1.1277, 1.1278

- Suppress offers from Chrome to translate the page, because the
  determination of language used in a LON-CAPA page is unreliable.

- Where domain is fixed in the user search form, no domain is not an option.

- For 2.11
  - Backport 1.1273

- For 2.11
  - Backport 1.1276

- lonnet::rolesinit() adds 'user.rar' to %env when user logs in.
  $env{'user.rar'} is 1 if user has rar priv (can receive ad hoc roles),
  i.e., Domain Helpdesk or Domain Helpdesk Assistant, 0 otherwise.

- Modify comment in init_user_environment
- Coding style

- For servers using Apache/SSL, and LON-CAPA syllabus requested is configured
  to use an external http:// URL, links to display of syllabus page use http://
  to avoid mixed active content issue, unless editing the syllabus (in which
  case https:// is used).

- Checking domain defaults for usertools settings is not required when
  initializing the user environment for users in domain: "public".

- For 2.11
  - Backport 1.1272 (part).

- Suppress display of first item in breadcrumbs trail ("Menu") when user
  log-in/logout/role selection activity is displayed in pop-up window.

- For 2.11
  -Backport 1.1270, 1.1271

- Remove trailing white space.

- For 2.11
  - Backport 1.1269

- For 2.11
  - Backport 1.1268

- Helpdesk web form
  - Domain configuration to specify which form fields besides E-mail address,
    Subject, and Description should be shown (some can be required fields).
  - Domain configuration to send submitted form to specified e-mail address(es)
    for user from other domains -- if no recipient set in user's domain for help).
  - Domain configuration to automatically include a specified string in the e-mail
    sent -- either prepended to the subject, or to the body.
  - If form is visited by a logged-in user with a role selected in an official
    course, the user can change the course code in the linked select boxes,
    in order to ask about a different course.

- Ad hoc roles for helpdesk personnel.
  - Domain configuration for:
    - which user(s) with dh role in domain may use each ad hoc role.
      - set by institutional status, or by include specific people, or by
        exclude specific people.
    - assign role description (displayed on Roles page, and at top left of
      page, when role active).
    - assign role order (numerical).
  - Course configuration (available for editing by course owner, and viewing
    by co-owner(s).
    - can override domain defaults for which dh role users can use ad hoc role(s)
      in course.
    - can override domain defaults set for course-level privileges for ad hoc
      role(s).

- If log-in results in user session being hosted on load balancer, subsequent
  page requests in user's session are exempt from checking if they should be
  load balanced.

- For 2.11
  - Backport 1.1261, 1.1262, 1.1263, 1.1264, 1.1265, 1.1266, 1.1267

Support case where custom role can access Course Editor, but adv priv
not set at system level for current role.
- Display of hidden status for folder takes into account parameters set at
  Enclosing map/folder level for resource, and factors in whether resources
  within sub-folders made visible by "no" for hiddenresource parameter make
  higher-level folder(s) unhidden.
- Parameters: contents hidden and Parameters: URLs hidden shown between
  DOCS breadcrumbs and DOCS inline menu influenced by both <param> tags in
  a map, and hiddenresource or encrypturl parameter in resourcedata.db

- Display resources with URLs containing single quotes in a modal window
  in the Course Editor.

- 'cev' priv assignable to custom roles in course/community allows
  view-only access to Course Editor.
  - Intended for assignment to custom ad hoc course/community roles assignable
    to domain helpdesk personnel.

- Wording change in logged message.

- Coding style: push()

- Fix indent
- Remove trailing white space
- Line width less than 80 characters

- Fx output written to log file when creating courses using Autocreate.pl, in
  case where institutional sections used for enrollment did not pass
  classlist access check for course owner

- For 2.11
  - Fix typo in 1.1075.2.117.

- For 2.11
  - Backport 1.1259, 1.1260

- Documentation

- Input elements in authentication forms created by &authform_*() routines
  can have disabled attribute (to support udp priv for Domain Helpdesk).

- For 2.11
  - Backport 1.1258

- If the "buttonshide" parameter is set to "yes" for all resources in a
  composite page, icons on the right side of the standard course inline
  menu are now also hidden for the page itself.

- For 2.11
  - Backport 1.1254, 1.1255, 1.1256, 1.1257

- Role name shown at top left of inline menu in course context:
  - for ad hoc helpdesk role display "Helpdesk" and the name of the custom role.
  - for other custom roles just display the role name.

- vpa priv allows Course Settings to be viewed, but not modified.
- users with vpa priv in a course receive "View parameter settings
  (due dates, etc) for resources and the course" item in the Main Menu,
  and a Settings item in the inline menu.

- "User Access Log" item added to User Management Menu (Single Users) in
  domain context -- 'vac' priv assigned at domain level to domain coordinator
  and domain helpdesk.
- Can search for user in a domain, and view log-in, logout and role selection
  history, as recorded in user's activity.log file.

- Update documentation for select_form().

- For 2.11
  - Backport 1.1253

- For 2.11
  - Backport two changes in 1.1205 not included in rev. 1.1075.2.112
    and one change in 1.1107.

- For 2.11
  - Backport 1.1205, 1.1216, 1.1218

- Domain Configuration for LON-CAPA Directory searches for user information
  for users in a domain.
  - Can disable for all, or can disable only for other domains.
  - Default: enabled for all domains.

- For 2.11
  - Backport 1.1252

- For 2.11
  - Backport 1.1251.

- Current remote ip address.

- Courses created by process a course request will have comment.email set
  to username:domain of requester.
- XML file used for batch course creation can also include <setcomment> tag
  which when set to 1 will have the same result.

- For 2.11
  - Fix typo in 1.1075.2.107 backport of 1.1234.

- For 2.11
  - Backport 1.1242, 1.1243

- For 2.11
  - Backport 1.1234

- For 2.11
  - Backport 1.1233

- For 2.11
  - Backport 1.1201

- For 2.11
  - Backport 1.1250

- For 2.11
  - Backport 1.1244

- For 2.11
  - Backport 1.1241

- For 2.11
  - Backport 1.1238

- For 2.11
  - Backport 1.1235

- For 2.11
  - Backport 1.1226, 1.1227

- For 2.11
  - Backport 1.1222

- For resources already checked into a slot (now past its end time),
  check for use of unique time periods in used slot, when checking for other
  reservable (future) slots.

added code comments for ask_for_embedded_content

- Course "Authoring" Space
  "Import a File" and "Image" blocks in Colorful Editor include a "Choose File"
  link which allows selection of published files from "Course Authoring" Space,
  or upload of a new file (with auto-publication).

- Replace duplicated check for course's ID with check for course's domain.

- Course Editor has "Standard Problem" item (Grading tab) for creation
  of new problem in user's Authoring Space, or in a Course "Authoring" Space.
- Course Editor has "Import from Course Resources" item (Import tab) to
  import published content from Course "Authoring" Space.
- Course "Authoring" Space
  - default.rights -- course-only access
  - quota is shared with content uploaded directly to course
  - content only browsable in course context
  - metadata not included in searchable meatdata MySQL table
CVs: ----------------------------------------------------------------------

- Improvements in &linked_select_forms() routine.
  - Support multiple calls to this routine when more than one pair of linked
    select boxes is in use in a web page.
  - Support special characters, e.g., - or white space in option names.

- Add Student/Employee ID as a user-supplied field when user self-creates
  an account with e-mail address as username.

- Improve display of roles page for mobile devices with small viewports.

- Improve display of log-in page for mobile devices with small viewports.

- Support for DateTime::Locale rev. 1.00 (Ubuntu 16 LTS) whilst supporting
  older versions used by other distros.

- Bug 6808. New course container -- "Placement" for Placement Tests.
  - Completion status shown to students in place of icons on right side
    of inline menu.

- Bug 6808. New course container -- "Placement" for Placement Tests.

- Eliminate javascript error when using "Select Community" link when DC is
  cloning when using "Create a single community".

- Bug 6808. New course container -- "Placement" for Placement Tests.
  Work in progress.

- Bug 4373.
  - Setting map-level parameters which apply recursively to subfolders is
    not permitted unless course's homeserver is running 2.12.
    (hiddenresource and encrypturl exempt, since they have always recursed).

- Eliminate jsMath.
  Use MathJax instead in cases where jsMath use is indicated in a resource,
  ina user's preferences, or in course preferences.

- Support version 2 of Google reCAPTCHA.

- Bug 5679

- For 2.11 Backport 1.232.

- Blocking of user actions during an exam can include changing a password
  via user preferences or using "Forgot password?" (internal auth).

using a div and CSS instead of br to better control spaces around foils, especially when a div or p is used before the response

added icons with CSS for sections with roles

- Usage restriction for a particular slot can be for one or more .sequences
  and/or .pages (in which case the slot may be used for all resources within
  those map(s)), or for one or more specific .problem(s).

- Bug 5349: Parameter management by users with a section-specific role ...
  - User can only modify parameters at a section level (for user's own section)
    a group level, or at a user-level (for students in own section).
  - When displaying the parameter log changes for students in other
    sections, and for other sections are not shown.
  - In overview mode, input elements for parameter-settings for "All students"
    are disabled; parameters set for other sections and students in other
    sections are not shown.

- Bug 5596
  - Message shown that initial retrieval of institutional data may take time.
  - Progress indicator displayed while enrollment in progress
  - Where institutional data are available for a user being added, that
    replaces data included in file upload.
  - Student/employee ID checking for both new users and existing users
    if rule(s) specified in localenroll.pm for domain, and enabled via:
    domain configuration > User Creation > Format rules to check for IDs.

- Bug 5596.
  Add a routine to lonnet.pm -- get_multiple_instusers() which makes one call
  to lond > lonsql > localenroll.pm to retrieve institutional data
  for multiple users when adding users via file upload, to minimize number
  of sleep() commands needed. Supports up to 1s per query, on localenroll.pm
  side if adding more than 100 new users.

- Add new routine to localenroll.pm -- &get_multusersinfo() -- to retrieve
    institutional data for users being added via user file upload.

  Note: if this routine does not exist in localenroll.pm, will fall-back
  to retrieving institutional data using a separate call to &get_userinfo()
  for each user.

- For 2.11
  Backport 1.1225.

- Fix bug introduced in rev. 1.1221.
  - Reinstate support for cloning of own course, where no cloning configuration
    was set in course's environment.db, when using course request form and
    course is created automatically.

Fixed perdoc formatting problem

New function to send email (with an attachment)

loncommon.pm contains &mime_email() to build and send emails using MIME::Lite.  The
functionality is based on the previous code in lonsupportreq.pm.  Now both
lonsupportreq.pm and lonmsg.pm call mime_email().

Files attached to LON-CAPA messages (normal or critical) will now be included in the
external email if the "Send copy to permanent e-mail address (if known)" option is
selected.  Attachments were previously only sent internally and stripped from the
external email.

This should resolve bug #6723.

fixed bug 6782, and escaped most localized messages used in Javascript blocks to make sure bugs like that do not happen again

- For 2.11
  - Backport 1.1221.

- Support checking of course cloning rights based on (a) domain defaults
  (where no course-specific rights set), or (b) course specific rights
  for official courses, based on institutional code category/ies set in
  courseprefs, e.g., department=phy etc.

- For 2.11
  Backport 1.1220

- Country names retrieved from DateTime::Locale::Catalog::Locales need to
  be UTF-8 encoded.

- Client IP/Name Access Control parameter.
  - Support deny from specified IPs/Hosts as well as existing allow from.
  - "deny from" checked first.

- For 2.11
  Backport 1.1217

Changes related to editors in authoring space.
- moved several menu related subroutines from structuretags to lonhomework
- typos, wording and German translation
- menu structure (xml editor): merged graphical and advanced sections into miscellaneous
- replaced the template menu by separate menus for each submenu
- adjusted styles and structure of the actionbar

- "Content Access Blocked" text needs to be displayed below the standard
  LON-CAPA inline menu.

Fix for a floating glitch in the editor actionbar.

- For 2.11
  Backport 1.1213, 1.1214, 1.1215.

- xhtml