The Isis team is pleased to announce the release of: * Apache Isis Core version 1.7.0 * Wicket Viewer 1.7.0 * SimpleApp Archetype 1.7.0 * ToDoApp Archetype 1.7.0
New features in this release include: - ISIS-809: @ViewModel annotation, no longer requiring explicit implementation of the IViewModel interface. - ISIS-916: ability to override framework-provided services, such as MementoService or BookmarkService. - ISIS-917: (beta): pluggable representations for the RO viewer There are also some security fixes: - ISIS-883: Bookmarkable action URLs can be submitted by a user without permissions to bring up action dialog (thereafter that user can invoke). - ISIS-884: ErrorPage vulnerable to XSS attacks. - ISIS-895: HomePage should honour authorization rules. Full release notes are available at [1,2,3,4] on the Isis website. Isis modules that in 1.6.0 were released as part of Isis core have now moved to Isis addons [5]. Meanwhile the profilestore component (previously in core, but unused in the Wicket viewer) has been retired. Migration should be straightforward, see [6]. Significant updates in Isis add-ons: - isis-module-security module [7], for administering authentication and authorization - all modules re-released against for 1.7.0. You can access this release directly from the Maven central repo [8], or download the release and build it from source [9]. Enjoy! --The Isis team [1] http://isis.apache.org/core/release-notes/isis-1.x.0.html [2] http://isis.apache.org/components/viewers/wicket/release-notes/isis-viewer-wicket-1.x.0.html [3] http://isis.apache.org/getting-started/release-notes/todoapp-archetype-1.x.0.html [4] http://isis.apache.org/getting-started/release-notes/simpleapp-archetype-1.x.0.html [5] http://isis.apache.org/core/release-notes/migrating-to-1.7.0.html [6] https://github.com/isisaddons/isis-module-security [1] http://www.isisaddons.org [8] http://search.maven.org [9] http://isis.apache.org/download.html
