Merge branch '5.0-trunk'

Author: sunnavy

Dockerfile

@@ -1,4 +1,4 @@
-FROM bpssysadmin/rt-base-debian:RT-5.0.6-bullseye-20240506
+FROM bpssysadmin/rt-base-debian:RT-5.0.8-bullseye-20241112
 
 LABEL maintainer="Best Practical Solutions <contact@bestpractical.com>"
 

MANIFEST

@@ -62,6 +62,7 @@ etc/upgrade/4.9.0/content
 etc/upgrade/4.9.1/content
 etc/upgrade/5.0.2/content
 etc/upgrade/5.0.4/content
+etc/upgrade/5.0.8/content
 etc/upgrade/process_articles_initialdata
 etc/upgrade/remove_files
 etc/upgrade/rtir-2.4-upgrade.pl.in

META.yml

@@ -33,7 +33,7 @@ requires:
   perl: 5.10.1
 resources:
   license: http://opensource.org/licenses/gpl-license.php
-version: 5.0.6
-x_module_install_rtx_version: '0.43'
+version: 5.0.8
+x_module_install_rtx_version: '0.44'
 x_requires_rt: 5.0.0
 x_rt_too_new: 5.2.0

README.md

@@ -201,7 +201,7 @@ To report a bug, send email to [rtir-bugs@bestpractical.com](mailto:rtir-bugs@be
 
 COPYRIGHT:
 
-This software is Copyright (c) 1996-2024 Best Practical Solutions, LLC
+This software is Copyright (c) 1996-2025 Best Practical Solutions, LLC
                                          <sales@bestpractical.com>
 
 (Except where explicitly superseded by other copyright notices)

bin/add_constituency.in

@@ -4,7 +4,7 @@
 #
 # COPYRIGHT:
 #
-# This software is Copyright (c) 1996-2024 Best Practical Solutions, LLC
+# This software is Copyright (c) 1996-2025 Best Practical Solutions, LLC
 #                                          <sales@bestpractical.com>
 #
 # (Except where explicitly superseded by other copyright notices)

etc/RTIR_Config.pm

@@ -438,6 +438,16 @@ Set( $RTIR_StrictConstituencyLinking,  1  );
 
 =over 4
 
+=item C<$WebStrictBrowserCache>
+
+As part of normal operation, browsers typically store some browsing
+history, enabling the Back button to work. Browsers also often
+cache pages in the browsing history to improve performance.
+
+Enable this option if you are using RTIR with highly sensitive
+information and want to signal the browser to not store any history
+or cache any data. The default is disabled.
+
 =item C<$MaxInlineBody>
 
 By default, RT only displays text attachments inline up to

etc/initialdata

@@ -683,6 +683,7 @@ for my $cf (@CustomFields) {
     {
         Name => 'Incidents Processes',
         Description => 'Processes to be followed in the event of an incident',
+        ApplyTo => [],
     }
 );
 

etc/upgrade/2.5.1/update_saved_searches.pl.in

@@ -4,7 +4,7 @@
 #
 # COPYRIGHT:
 #
-# This software is Copyright (c) 1996-2024 Best Practical Solutions, LLC
+# This software is Copyright (c) 1996-2025 Best Practical Solutions, LLC
 #                                          <sales@bestpractical.com>
 #
 # (Except where explicitly superseded by other copyright notices)

etc/upgrade/5.0.2/content

@@ -6,8 +6,8 @@ our @ScripConditions;
 our @CustomFields = (
     {   Name        => 'CVE ID',
         Type        => 'FreeformMultiple',
-        Queue       => [ 'Incidents', 'Incident Reports', 'Investigations', 'Countermeasures' ],
         Disabled    => 0,
+        LookupType  => 'RT::Queue-RT::Ticket',
         Description => 'CVE ID for RTIR queues',
         LinkValueTo => 'https://nvd.nist.gov/vuln/detail/__CustomField__#vulnCurrentDescriptionTitle',
     },
@@ -207,6 +207,28 @@ our @Final = (
             }
         }
     },
+    sub {
+        # Apply new CVE ID CF to existing RTIR queues based on lifecycle
+        my $cve_id_obj = RT::CustomField->new(RT->SystemUser);
+        my ($ok, $msg) = $cve_id_obj->LoadByName( Name => 'CVE ID' );
+
+        if ( $cve_id_obj->IsGlobal ) {
+            my $empty_queue = RT::Queue->new( RT->SystemUser );
+            my ($ok, $msg) = $cve_id_obj->RemoveFromObject( $empty_queue );
+        }
+
+        if ( $ok && $cve_id_obj->Id ) {
+            my $queues = RT::Queues->new(RT->SystemUser);
+            $queues->Limit( FIELD => 'Lifecycle', VALUE => [ 'incident_reports', 'incidents', 'investigations', 'countermeasures' ], OPERATOR => 'IN' );
+            while ( my $queue = $queues->Next ) {
+                my ($ok, $msg) = $cve_id_obj->AddToObject( $queue );
+                RT->Logger->error("Unable to apply CVE ID to queue " . $queue->Name . " $msg") unless $ok;
+            }
+        }
+        else {
+            RT->Logger->error("Unable to load custom field CVE ID: $msg");
+        }
+    },
 );
 
 1;

etc/upgrade/5.0.8/content

@@ -0,0 +1,10 @@
+our @Final = sub {
+    require RT::Class;
+    my $incident_processes = RT::Class->new(RT->SystemUser);
+    $incident_processes->Load('Incidents Processes');
+    if ( $incident_processes && $incident_processes->IsApplied( 0 ) ) {
+        my $empty_queue = RT::Queue->new( RT->SystemUser );
+        my ($ok, $msg) = $incident_processes->RemoveFromObject( $empty_queue );
+        warn "Could not remove 'Incidents Processes' from Global: $msg" unless $ok;
+    }
+};