snoopdave opened a new pull request, #170:
URL: https://github.com/apache/roller/pull/170
The setup page is reachable without a login so a freshly installed site can
be
bootstrapped before any user exists. This change makes that page a read-only
bootstrap view and moves the frontpage-weblog selection into a separate
global-administrator action.
## What changed
- While the site has zero users, show only a minimal public bootstrap page —
no weblog lists, counts, or mutating action.
- Make the initial frontpage selection a separate POST action requiring
global
administrator permission, allowed only while no frontpage weblog has been
set.
- Route later changes through `GlobalConfig`.
- Centralize canonical-handle resolution and enabled-weblog validation in one
service used by both write paths; reject blank, missing, nonexistent, and
disabled weblogs and treat a missing aggregation checkbox as false.
- Persist both properties together and invalidate local site-wide page/feed
caches, including the site-wide last-modified value.
- Fail closed when `users.firstUserAdmin=false` until a global administrator
is
provisioned.
## Tests
- Anonymous zero-user page; anonymous and non-admin access after users exist;
disabled admin and global-admin callers.
- Both first-user-admin settings; initial, concurrent, and already-configured
writes; the retired `setup!save` action no longer resolves.
- Invalid weblog handles, null aggregation, successful reads, and local cache
invalidation through both write paths.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
