Re: Migration to latest

[Vishwas Babu A J]

Hi Guys,

>>Only 5.7 and 8.0 still available at the community edition.

I am not sure if this is an issue. Ext. support for MySQL 5.6 is scheduled to 
end on Feb 2021, so we would also likely drop support for MySQL 5.6 in the very 
near future. 

>> Aws Aurora Serverless only supports 5.6
Ah, I see. I would guess the wouldn’t be too far away.  As a workaround, Aurora 
MySQL 2.* database engine is compatible with MySQL 5.7 and available in most 
regions.

Regards,
Vishwas



> On May 16, 2020, at 12:04 PM, Sergio Junior  wrote:
> 
> Michael,
> 
> Its specified here:
> https://flywaydb.org/documentation/database/mysql 
> 
> 
> Only 5.7 and 8.0 still available at the community edition.
> 
> Aws Aurora Serverless only supports 5.6
> 
> 
> On Sat, May 16, 2020, 11:35 Michael Vorburger  > wrote:
> On Sat, May 16, 2020 at 2:19 AM Sergio Junior  > wrote:
> Also, i can make a script if you need.
> 
> A SQL script to rename the table would have that problem that Awasum noticed 
> - it's a "chicken and egg" - we can't easily use Flyway to run a migration 
> script to fix a problem with Flyway... ;-) 
> 
> Just making it the new version of Flyway use its old table name via that 
> property which Petri discovered (thanks!) seemed the most "pragmatic" 
> solution, to me. 
> 
> I've just done this in https://github.com/apache/fineract/pull/897 
> , and can confirm it does fix 
> https://issues.apache.org/jira/browse/FINERACT-979 
>  (I've locally reproduced 
> the problem, and seen it solved with that PR).
> 
> We had 2 scenarios. 
> From Mifos X to fineract (gotta check, we used a docker version from March, 
> dont know exactly which one) i had to manually diff schema and data using 
> dbForge to make it work.
> 
> Then to fineract develop, need to rename schema_version tables to 
> Flyway_schema_history.
> Just the tenants db that i let Fineract create from scratch. 
> 
> On Fri, May 15, 2020, 21:14 Sergio Junior  > wrote:
> Michael,
> 
> Sharing more info with you, i had multiple problems with Flyway. 
> 
> We were using Aws aurora serverless and it's Mysql 5.6
> With the Drizzle driver, the error was unfriendly. Changing to the Mysql 
> driver, Flyway returned that the Community Version doesn't support 5.6 
> anymore, just the enterprise version.
> 
> Do you want to file a JIRA issue with details including the error message you 
> encountered re ^^^ this other point? https://flywaydb.org/download/ 
>  does not mention their Community Edition not 
> supporting MySQL 5.6 anymore. In fact, the project's Docker Compose set-up 
> uses 5.7, and Flyway seems to work fine.
>  
> I upgraded our Db (lost the serverless capability :( and then had to rename 
> tables manually. 
> 
> Imho, Flyway seems a bad option because they can keep removing mysql versions 
> from the community edition, forcing people to the enterprise. 
> 
> Im from the dotnet world, do not have much experience with java libs, but we 
> should have a better alternative. 
> 
> Thanks! 
> 
> 
> On Fri, May 15, 2020, 17:28 Awasum Yannick  > wrote:
> This will need a new migration script or file...I dont think Flyway will even 
> run automatically...Was just a thought
> 
> On Fri, May 15, 2020 at 9:27 PM Awasum Yannick  > wrote:
> can we just rename schema_version to flyway_schema_history ? How practical is 
> that? see : 
> https://blog.marceloaltmann.com/en-how-to-rename-table-in-mysql-pt-como-renomear-tabelas-no-mysql/
>  
> 
> 
> So we use updated naming convention by Flyway?
> 
> 
> 
> On Fri, May 15, 2020 at 9:02 PM Michael Vorburger  > wrote:
> Petri, that sounds like the kind of thing I was hoping someone looking into 
> it would find... not sure what "property" they are referring to here - is 
> this something we could put into... TenantDatabaseUpgradeService is guess 
> where this would go. Fancy putting a PR together, perhaps?
> 
> Sergio, would you be interested in contributing to the project by helping to 
> such a PR, if you still have or can build an "old" database?
> 
> On Fri, May 15, 2020 at 9:31 PM Petri Tuomola  > wrote:
> Hi
> 
> Looking at the Flyway documentation, I think a possible solution to this 
> would be to set the property flyway.table to point to “schema_version". 
> 
> That way existing installations would not be broken by the Flyway upgrade, as 
> Flyway would continue to use the same table name.
> 
> At least that’s the suggestion from the commit where this change was made to 
> Flyway:
> 
> " You are seeing this message because Flyway changed 
> 

Re: [ANNOUNCE] New committer: Yemdjih Kaze Nasser

[Vishwas Babu A J]

Welcome Nasser :)


Regards,
Vishwas



> On May 11, 2020, at 12:41 AM, Yemdjih Kaze Nasser  
> wrote:
> 
> Thank you all. I'm glad to be part of this community.
> I had alot of support from incredible mentors who where always available to 
> provide insightful feedbacks for each of my contributions
> 
> Looking for forward to taking the community even further.
> 
> On Mon, 11 May 2020 at 08:37, Manthan Surkar  > wrote:
> Congrats Nasser.
> Looking forward to working with you this summer!
> 
> -thanks
> Manthan
> 
> On Mon, 11 May 2020, 12:59 pm Percy Enoabane,  > wrote:
> Congrats Nasser well deserved. 
> 
> On Mon, May 11, 2020, 08:25 collins chuwa  > wrote:
> Congratulations Nasser. 
> 
> On Mon, 11 May 2020 at 8:07 AM Awasum Yannick  > wrote:
> Congratulations Nasser. You have improved our project significantly. Keep up 
> the good work and thank you very much.
> 
> I have never seen anyone learn and contribute this fast after joining a new 
> project. You are a wizard 
> 
> On Mon, May 11, 2020, 07:51 Juhan Aasaru  > wrote:
> The Project Management Committee (PMC) for Apache Fineract
> has invited Yemdjih Kaze Nasser to become a committer and we are pleased 
> to announce that he has accepted.
> 
> He has been involved in the community for over half a year and 
> has submitted several significant pieces of work to Fineract 1.x.
> He is also leading the development efforts in migrating Fineract-CN to
> Spring Boot 2, which would enable upgrading Java version later.
> Thank you for that!
> 
> Being a committer enables easier contribution to the
> project since there is no need to go via the patch
> submission process (for example one can create branches and push code
> into github.com/apache/fineract*  
> repositories).
> This should enable better productivity.
> 
> Please join me in welcoming Yemdjih Kaze Nasser as a new Committer on 
> Fineract.
> 
> Regards
> Juhan Aasaru
> PMC Member, Apache Fineract
> -- 
> Thanks
> Collins C. Wandji
> No: +237672965154

Re: General questions on using Fineract for new project

[Vishwas Babu A J]

Vinayak,

Can you please elaborate on the business use case you are trying to support ?

While the approach you describe is certainly feasible, you would likely run 
into a number of issues with reconciliation depending on how the other loan 
management systems are used.

Based on the kind of financial institutions whose data is tracked in the other 
LMS and the process they follow you might run into issues ranging from exotic 
products whose calculations you might not be able to match a 100% in Mifos to 
cascading effects around editing/ adding backdated transactions causing 
mismatches around appropriation of payments across different systems. IMO, if 
all you are trying to do is to get a consolidated view of loan portfolios 
across different systems and running an accounting process on top of them, 
skipping the need to reprocesses all transactions again in what is effectively 
a  “Data warehouse” should simplify the process.

Regards,
Vishwas



> On Apr 16, 2020, at 4:01 PM, Vinayak Javaly  wrote:
> 
> Hello all.  I hope this email finds you all well.
> 
> I'm looking for general advice.
> 
> I'm building a new system that will aggregate loan information from several 
> different Loan Management Systems.  Some of these systems may be from other 
> LMS vendors (e.g. Mambu, LendFoundry).  I'm planning to use Fineract as the 
> core LMS in my new system.  Here's my planned workflow:
> Each LMS will periodically send loan product, loan, repayment, etc. info in a 
> standardized format
> Our system will receive each LMS' data and input it into Fineract
> We're planning on performing the loan accounting for these loans in Fineract, 
> AND have a periodic reconciliation process with the source LMS'
> My questions:
> Is this a good idea?  Does this seem feasible?
> Do you see any major or minor issues with this plan?
> Thank you in advance.
> 
> Stay safe.
> 
> Vinayak

Re: From Persistent Systems for new CBS

[Vishwas Babu A J]

Pratap,

The answer would largely depend on your use case and expected time to market.

If your CBS needs to have a full fledged loans module, deposit module including 
current accounts / savings accounts / recurring & fixed deposits and you expect 
to go live in couple of months, you should go with Fineract 1.x

If your CBS is going to be used primarily for high transactional wallets and 
you expect to have 20 million customer accounts on a single tenant, you would 
ideally build on top of Fineract CN.

Regards,
Vishwas



> On Apr 17, 2020, at 1:46 AM, Pratap Madgulkar 
>  wrote:
> 
> Hi Fineract Dev,
>  
> If we want to start building new CBS around Fineract is Fineract 1.2 
> monolithic application serves the purpose?
>  
> Fineract – CN is not having any release candidate till date . So we are 
> thinking not to build with open issues.
>  
> Please guide.
>  
> Regards, 
> -
> Pratap Madgulkar
> Technical Project Manger
> 
> +91 89567 12149
> pratap_madgul...@persistent.com 
> Connect with me on Twitter  | LinkedIn 
> 
>  
>  
>  
> See Beyond, Rise Above
>  
> DISCLAIMER
> ==
> This e-mail may contain privileged and confidential information which is the 
> property of Persistent Systems Ltd. It is intended only for the use of the 
> individual or entity to which it is addressed. If you are not the intended 
> recipient, you are not authorized to read, retain, copy, print, distribute or 
> use this message. If you have received this communication in error, please 
> notify the sender and delete all copies of this message. Persistent Systems 
> Ltd. does not accept any liability for virus infected mails.

Re: Integration - Retry/Repeated/concurrent calls

[Vishwas Babu A J]

Sergio,

A quick clarification:

https://github.com/apache/fineract/pull/515 
<https://github.com/apache/fineract/pull/515> allows setting a globally unique 
client generated identifier for a command. This allows the client to later 
query for the status of the execution of the command associated with this guid 
if the response is lost in transit etc. At the server side, the guid is assumed 
to be unique.

By adding a unique constraint to the command source table, we can enforce the 
uniqueness of the client generated identifier at the server side, thereby 
ensuring duplicate requests are not served. However, this approach would likely 
result in a write penalty for very large installations.

Alternatives could be to check the presence of this key in an in memory key 
value store, something along the lines of setnx in Redis (assuming duplicates 
requests are sent in a fixed time interval). We could maybe handle this from an 
infrastructure level too, by carrying out this check at the API gateway,

Regards,
Vishwas



> On Mar 25, 2020, at 6:54 PM, Vishwas Babu  wrote:
> 
> >>Question, before this PR, no one have this kind of problem before?
> I am sure people would have faced this issue and figured out solutions like 
> this PR.
> 
> >>A simple retry or double click at any of the apps would cause issues, right?
> It might not have been so obvious as clients like the Mifos community-app 
> (most common UI used with Fineract) handle double clicks at their end. 
> However, your point is valid
> 
> Regards,
> Vishwas
> 
> 
> On Wed, 25 Mar 2020 at 07:19, Sergio Junior  <mailto:readyh...@gmail.com>> wrote:
> Vishwas,
> 
> I really appreciate your response, missed that PR because it was closed, i 
> will take a look.
> 
> Question, before this PR, no one have this kind of problem before? A simple 
> retry or double click at any of the apps would cause issues, right?
> 
> Thanks!
> 
> Em qua., 25 de mar. de 2020 às 01:24, Vishwas Babu A J 
> mailto:vishwasbab...@gmail.com>> escreveu:
> Hello Sergio,
> 
> Here is a pr https://github.com/apache/fineract/pull/515 
> <https://github.com/apache/fineract/pull/515> which aimed to address this 
> problem by relying on the client to optionally supply a unique id with each 
> request. Maybe you can build on the same (it was missing test cases and api 
> doc updates) and get it merged ?
> 
> Regards,
> Vishwas
> 
> 
> 
>> On Mar 24, 2020, at 7:39 PM, Sergio Junior > <mailto:readyh...@gmail.com>> wrote:
>> 
>> Hello everyone,
>> 
>> Im integrating a system with Fineract, and doing some tests with the Savings 
>> API (Deposit/Withdrawal functions), nothing is considered “Unique”, so if 
>> for any reason my system interpret a call as failed (maybe a reverse proxy 
>> fault, tcp issues etc) and perform a retry, Fineract will Credit (or Debit) 
>> a transaction multiple times, no field is considered an Identifier and i 
>> couldnt find any resource to notify the API that a transaction is a retry or 
>> a new one.
>> 
>> Whats the idea for such scenario, to maintain consistency and avoid 
>> duplicates?
>> 
>> Thanks!
> 
> 
> 
> -- 
> Atenciosamente,
> Sergio Luiz Miziara Junior
> Tel.: (011) 8727.6447

Re: Integration - Retry/Repeated/concurrent calls

[Vishwas Babu A J]

Hello Sergio,

Here is a pr https://github.com/apache/fineract/pull/515 
 which aimed to address this 
problem by relying on the client to optionally supply a unique id with each 
request. Maybe you can build on the same (it was missing test cases and api doc 
updates) and get it merged ?

Regards,
Vishwas



> On Mar 24, 2020, at 7:39 PM, Sergio Junior  wrote:
> 
> Hello everyone,
> 
> Im integrating a system with Fineract, and doing some tests with the Savings 
> API (Deposit/Withdrawal functions), nothing is considered “Unique”, so if for 
> any reason my system interpret a call as failed (maybe a reverse proxy fault, 
> tcp issues etc) and perform a retry, Fineract will Credit (or Debit) a 
> transaction multiple times, no field is considered an Identifier and i 
> couldnt find any resource to notify the API that a transaction is a retry or 
> a new one.
> 
> Whats the idea for such scenario, to maintain consistency and avoid 
> duplicates?
> 
> Thanks!

Re: Record api traffic (Fineract 1.x)

[Vishwas Babu A J]

Niklas,

I am not entirely sure what you mean, Fineract works only on HTTPS . If you 
want it to work on HTTP, you would have to remove all requires-channel="https" 
attributes from 
https://github.com/apache/fineract/blob/develop/fineract-provider/src/main/resources/META-INF/spring/securityContext.xml#L37

Regards,
Vishwas

On 2019/10/10 14:37:13, Niklas Uhrberg  wrote: 
> Hello!
> 
> I have done some activities running Fineract 1.x and the community app 
> locally on my workstation.
> 
> Now I would like to record a set of activities in order to create a quicker 
> way to jumpstart a simple setup . Say a loan product , a few clients with 
> their loans.
> 
> (In the same way there are Postman scrips for Fineract CN)
> 
> I have not done this before and my initial findings made me try running the 
> Community App -> Finract communication over HTTP (instead of HTTPS) . E.g. 
> Postman will require HTTP in proxy mode.
> 
> I have not been able to pull this off.
> Have anyone of you done this kind of operation and can show the way to go 
> about this?
> 
> Once I configure docker-compose to with the port mapping 8080:8080 I can at 
> least point my browser to fineract-provider, but the login screen (in the 
> community app) says:
> "Couldn't connect to server. Make sure you are using correct settings."
> 
> I use the URL : 
> http://localhost/?baseApiUrl=http://localhost:8080&tenantIdentifier=default#/
> 
> (And I have indeed verifed that I can login using the standard: 
> http://localhost/?baseApiUrl=https://localhost:8443&tenantIdentifier=default )
> 
> Best regards Niklas
> 
> 
> 
> [cid:image78d5a6.PNG@47014c70.41b3d67d]
> Niklas Uhrberg
> Konsult
> IT Development | Loans & Credit
> 
> 
> 
> 
> Resurs Bank AB
> 
> 
> 
> 
> Växel:  +46 42 38 20 00
> E-post: niklas.uhrb...@resurs.se
> Webb:   www.resursbank.se
> 
> 
> 
> 

Re: What is Principal Threshold (%) for Last Instalment?

[Vishwas Babu A J]

Hi Jun,

This parameter is used to provide control over the adjustments made on the last 
installment when the EMI of a loan is set (instead of the tenure). For example, 
if we set *Principal Threshold (%) for Last
Installment"  as 10%, whenever the principal portion of the last installment is 
lesser than 10% percent of the fixed EMI , the last installment is removed and 
the amount is added to the last but one installment instead (thereby avoiding 
installments with very small amounts) 

See https://mifosforge.jira.com/browse/MIFOSX-1844 for details of the 
requirements around this setting

Regards,
Vishwas

On 2019/10/03 05:54:54, Jun King Miñon  wrote: 
> Hi Everyone,
> 
> I am checking the User Manual about *Principal Threshold (%) for Last
> Instalment **under Loan Product creation (Settings) *however could not find
> a clear picture on what it is for or when will it be used.
> 
> I looked into https://issues.apache.org/jira/browse/FINERACT-302 but this
> does not give a clear answer as well. Is there someone who has used this
> parameter before?
> 
> Any help would be highly appreciated. Thank you very much. Cheers!
> 
> 
> Regards,
> 
> Jun King P. Miñon
> Consultant Software Engineer
> Core Banking Solutions
> 
> -- 
> 
> 
> 
> PEARLPAY INC.
> 
> 
> 2nd Floor, 22 The Jupiter Center, Jupiter Street, 
> Makati, 1209 Metro Manila, Philippines
> 
> 
> 
> https://www.pearlpay.com 
> 
> https://www.linkedin.com/company/pearlpay 
> 
> 
> https://www.facebook.com/PearlPayOFFICIAL 
> 
> 
> This email and any files 
> transmitted with it are confidential and intended solely for the use of the 
> individual or entity to whom they are addressed. If you have received this 
> email in error please notify the system manager. This message contains 
> confidential information and is intended only for the individual named. If 
> you are not the named addressee you should not disseminate, distribute or 
> copy this e-mail. Please notify the sender immediately by e-mail if you 
> have received this e-mail by mistake and delete this e-mail from your 
> system. If you are not the intended recipient you are notified that 
> disclosing, copying, distributing or taking any action in reliance on the 
> contents of this information is strictly prohibited.  WARNING: Computer 
> viruses can be transmitted via email. The recipient should check this email 
> and any attachments for the presence of viruses. The company accepts no 
> liability for any damage caused by any virus transmitted by this email. 
> E-mail transmission cannot be guaranteed to be secure or error-free as 
> information could be intercepted, corrupted, lost, destroyed, arrive late 
> or incomplete, or contain viruses. The sender therefore does not accept 
> liability for any errors or omissions in the contents of this message, 
> which arise as a result of e-mail transmission.  Our company accepts no 
> liability for the content of this email, or for the consequences of any 
> actions taken on the basis of the information provided, unless that 
> information is subsequently confirmed in writing. If you are not the 
> intended recipient you are notified that disclosing, copying, distributing 
> or taking any action in reliance on the contents of this information is 
> strictly prohibited. Any views or opinions presented in this email are 
> solely those of the author and do not necessarily represent those of the 
> company. Employees of the company are expressly required not to make 
> defamatory statements and not to infringe or authorize any infringement of 
> copyright or any other legal right by email communications. Any such 
> communication is contrary to company policy and outside the scope of the 
> employment of the individual concerned. The company will not accept any 
> liability in respect of such communication, and the employee responsible 
> will be personally liable for any damages or other liability arising.
> 
> 

Re: About support for revolving credit in Fineract

[Vishwas Babu A J]

That is correct. You would need to make changes similar to those at 
https://cwiki.apache.org/confluence/display/FINERACT/Line+of+Credit to support 
this functionality in Fineract

On 2019/10/21 14:39:06, Niklas Uhrberg  wrote: 
> Hello, this question is more about the functionality offered by Fineract (1.x 
> or CN) than a technical question.
> 
> Reading the documentation and looking at the Community App interface I 
> conclude that there is no support for credit card type of credit a.k.a. 
> revolving credit. In this type of credit product there is usually no fixed 
> repayment plan e.t.c.
> 
> I want to be certain that I don't conclude in error here.
> 
> Best regards Niklas
> 
> 
> 
> [cid:image5a20fc.PNG@c9f095bb.45a3dd82]
> Niklas Uhrberg
> Konsult
> IT Development | Loans & Credit
> 
> 
> 
> 
> Resurs Bank AB
> 
> 
> 
> 
> Växel:  +46 42 38 20 00
> E-post: niklas.uhrb...@resurs.se
> Webb:   www.resursbank.se
> 
> 
> 
> 

Re: Should we archive MariaDB and Data-jpa repositories ?

[Vishwas Babu A J]

Hello All,

Adding some context regarding the review comments made on the approach taken 
for the MySQL to PostgreSQL migration during a code walkthrough with Ed and 
Isaac.
In the context of each microservice (take accounting for example) , the changes 
required are encapsulated in 
https://github.com/apache/fineract-cn-accounting/commit/9c23639f71981e3dc74a6351df35d9af624ff0d6.
 At a high level , these changes are limited to
1) Updating dependencies to the DB specific library (i.e the equivalent of 
https://github.com/apache/fineract-cn-mariadb) in the gradle build and the 
connection settings2) Updating a bunch of imports related to classes used from 
the DB specific library (essentially replacing each occurrence of 
*.mariadb.config.EnableMariaDB with *.postgresql.config.EnablePostgreSQL,  
MariaDBInitializer with PostgreSQLInitializer etc)3) Tweaking Flyway SQL 
scripts to work on the particular database engine
I would have preferred if
(a) Before doing (2) , we had refactored 
https://github.com/apache/fineract-cn-mariadb to be the reference 
implementation (generalize symbols likeMariaDBInitializer -> RDBMSInitializer 
etc) and then have https://github.com/apache/fineract-cn-postgresql implement 
the same specification.(b) Setup build profiles on each microservice to pick up 
the right DB dependency (1) and set the root context for SQL scripts picked by 
Flyway (3)
The goal being that at the end of the exercise, we would have a POC to run with 
both the existing MySQL and the new PostgreSQL libraries based on the build 
profile selected. 
Going forward, the community would only ship and maintain PostgreSQL as the 
default RDBMs. However, those interested in supporting alternate databases 
could quickly have an initial version running on the database of their choice 
without the need to tweak any code other than gradle property files. They could 
also supply alternate DB connectors (implementing the fineract-cn-mariadb RI) 
and flyway scripts which could be hosted on our / related community 
repositories.

The business need behind this being the preferred approach was as follows:
As long as we are thinking of small MFI's, co-operatives , banks in smaller 
countries etc who are comfortable working on SaaS models etc, any database 
works. However, given the complexity of Fineract CN , I would assume that it 
would eventually be targeted towards mid size / larger banks who tend to be 
very opinionated on their tech stack. 
For example, in the company I worked for-> We came across reputed financial 
institutes who were simply unwilling to use MySQL forks as their OLTP database 
even if we met all the required performance benchmarks -> Over the years, we 
have built up a lot of expertise in fine-tuning MySQL replacement databases for 
high concurrency scenarios. Think Percona for banks having challenging 
performance benchmarks for 4 million active clients etc, skills which do not 
easily translate to tuning PostgreSQL for similar loads.
This being said, I don't really have any issue with any library being archived. 
Mainly because talk is cheap and I currently cannot commit the time to 
addressing these review comments.

On 2019/10/21 08:58:28, Isaac Kamga  wrote: 
> Thanks for your input Michael and Juhan,
> 
> I agree with you that adding more complexity to Fineract CN would slow down
> development even further so sticking to one RDBMs is better.
> 
> Cheers,
> Isaac Kamga.
> 
> On Sun, Oct 20, 2019 at 11:16 PM Juhan Aasaru  wrote:
> 
> > Hi!
> >
> > I agree with Michael on this.
> > We have very limited resources - let's spend them on work that gives back
> > the most value.
> >
> > Also we should keep in mind that if we add complexity to the system the
> > slower the development speed is going to be.
> > And more complexity sets the bar higher for any newcomer to come in and
> > start contributing.
> >
> > fineract-cn-data-jpa is not used by any library so I think we should
> > archive this as well.
> >
> > Also archiving repository doesn't mean it is deleted. If we change our
> > mind later then we can always unarchive it
> > at any point.
> >
> > Juhan
> >
> > Kontakt Michael Vorburger () kirjutas kuupäeval P, 20.
> > oktoober 2019 kell 14:31:
> >
> >> On Sun, 20 Oct 2019, 03:03 Isaac Kamga,  wrote:
> >>
> >>> Happy weekend fineracters,
> >>>
> >>> After migrating our RDBMS from MariaDB to PostgreSQL, Michael (CC'ed
> >>> here) suggested we stick to one RDBMS in this discussion [1]
> >>>
> >>
> >> so my PoV on this is just that in any universe where resources are
> >> limited (such as ours, excluding possible parallel universes), focusing
> >> energies e.g. on a single FLOSS DB makes sense.
> >>
> >> I'm sure both MySQL (MariaDB really, but that's another discussion..) and
> >> Postgres are both great, with the proper tuning - which I would focus on
> >> doing for one of them, not twice.
> >>
> >> which is different from the suggestion from Ed Cable and Vishwas Babu
> >>> about using a different RD

Re: [CVE-2016-4977] Apache Fineract remote code execution vulnerabilities fixed in v1.3.0

[Vishwas Babu A J]

> Apparently your announcement was not accepted to the annou...@apache.org
> list

It was, see 
http://mail-archives.us.apache.org/mod_mbox/www-announce/201910.mbox/%3CCACqpLwJGBRp9cpyhVwxvc0SSrTbUoDxAr%2BYnywXjj%3DBRFhiyPw%40mail.gmail.com%3E

On 2019/10/16 08:19:54, Myrle Krantz  wrote: 
> Hey Vishwas,
> 
> Apparently your announcement was not accepted to the annou...@apache.org
> list.  If you've received an explanation for why, I'd be curious to know
> what it is.  I assume you are working on formulating a mail that is
> accepted?
> 
> If you need help with anything, let me know.
> 
> Also if you want examples of successful announcements, you can use:
> https://lists.apache.org/list.html?annou...@apache.org  Go to advanced
> search and look for mails with CVE in the subject line.
> 
> Best Regards,
> Myrle
> 
> 
> On Wed, Oct 16, 2019 at 8:26 AM Vishwas Babu (Apache) <
> vishwasb...@apache.org> wrote:
> 
> > Hello,
> >
> > The Apache Fineract project would like to hereby disclose that our 1.3.0
> >
> > release includes a fix for CVE-2016-4977 : A known vulnerability in spring
> >
> > security upstream dependencies allowed malicious users to trigger remote 
> > code
> >
> > execution. See https://nvd.nist.gov/vuln/detail/CVE-2016-4977 for details of
> >
> > the upstream CVE.
> >
> > We would like to thank Roberto (extranewb...@gmail.com) for reporting
> >
> > this issue and the Apache Security team for their assistance.
> >
> > Additional details at 
> > https://cwiki.apache.org/confluence/display/FINERACT/Apache+Fineract+Security+Report.
> >
> > Regards,
> > Vishwas
> >
> >
> 

Board report for the month of October 2019

[Vishwas Babu A J]

Hello All,

The board report for the previous quarter (Jul-Sep) has been shared at
https://cwiki.apache.org/confluence/display/FINERACT/2019-10+October+Report . 
Please feel free to edit the wiki as needed if you find anything amiss.

Regards,
Vishwas

Re: Problem finishing Postman-based provisioning scripts for fineract-cn

[Vishwas Babu A J]

Hi Juhan,

> 3. I create scheduler user imhotep (and change password to 26500BC) but
> what else should I do with this user? Feed it to some application? Why is
> this role and user created in demo server?

Details at 
https://cwiki.apache.org/confluence/display/FINERACT/Fineract+CN+demo-server


> 5. I have no idea how connect a user with a specific customer (to simulate
> customer logging in one one's own behalf). How should that work?

AFAIK, you cannot do the same on the current micro-services. The Mifos 
initiative has another project (Customer Self Service API Gateway) which allows 
customer self service by maintaining separate credentials for each customer. 
After the customer has been authenticated and authorized at the gateway, it 
interfaces with Fineract-CN using a system / back-office user credential .

Next week, I am planning to spend time on going through the deposits 
micro-service while filling out the checklist at 
https://cwiki.apache.org/confluence/display/FINERACT/Digital+wallet, so will 
find the answers to the questions you have raised in case someone has not 
already replied to the same.

Regards,
Vishwas



On 2019/09/23 14:22:54, Juhan Aasaru  wrote: 
> Hi!
> 
> I have improved Postman provisioning scripts located under
> https://github.com/apache/fineract-cn-docker-compose/. I would like to
> complete the provisioning scripts but as some logic is not working for me I
> need help. *Vishwas, Courage, Myrle, Awasum, Ebenezer, Isaac or anyone
> else, if you have time, plese look into this as provisioning is needed for
> everyone. *Also if anyone could explain what should be happening it would
> be easier to solve the issues or at least get the bugs logged in Jira.
> 
> When I started to imporve the initial scripts created by Vishwas I
> investigated the provisioning in Demo server and also I looked bash
> provisioning scripts that Courage has created earlier but I didn't find
> answers to these questions from there.
> 
> What currently works with Postman:
> * creating a tenant
> * creating an application
> * assigning an application to a tenant
> * creating roles (like admin and scheduler)
> * creating users with specific role
> * creating members/customers
> * creating ledgers and accounts (full chart of accounts)
> * creating and activating products
> 
> *What doesn't work (need your help!):*
> 
> When testing scripts I had following micro services running: provisioner,
> rhythm, identity, customer, accounting, deposit, portfolio, fims-web-app
> 
> 1. With rhythm I still get error relation "khepri_beats" does not exist -
> this is also registered as FINCN-177
>  by me. After I
> increased rhythm.beatCheckRate to 60 it takes more time for this error
> to occur in logs. I wonder if other errors could be caused by rhythym not
> functioning. Also at what point should this table be created?
> 
> 2. I cannot enable privileges (at steps 06.5 and 06.6 in Postman):
> 
> PUT http://{{identityUrl}}
> /identity/v1/applications/rhythm-v1/permissions/identity__v1__app_self/users/imhotep/enabled
> 
> PUT http://{{identityUrl}}
> /identity/v1/applications/rhythm-v1/permissions/portfolio__v1__khepri/users/imhotep/enabled
> 
> I get error:
> "message": "Application permission 'rhythm-v1.identity__v1__app_self'
> doesn't exist.",
> "path":
> "/identity/v1/applications/rhythm-v1/permissions/identity__v1__app_self/users/imhotep/enabled"
> 
> and
> 
> "message": "Application permission 'rhythm-v1.portfolio__v1__khepri'
> doesn't exist.",
> "path":
> "/identity/v1/applications/rhythm-v1/permissions/portfolio__v1__khepri/users/imhotep/enabled"
> should I do anything before issuing these commands? Is this needed at all?
> If I look into cassandra keyspace playground table
> isis_application_permissions then it is empty. Anyone knows when should the
> values be created there?
> 
> 3. I create scheduler user imhotep (and change password to 26500BC) but
> what else should I do with this user? Feed it to some application? Why is
> this role and user created in demo server?
> 
> 4. I cannot connect product with a customer (at step 11.1 in Postman)
> I post the following JSON to http://{{depositUrl}}/deposit/v1/instances
> 
> {
>   "productIdentifier": "savingsProduct001",
>   "beneficiaries": [
> "customer10"
>   ],
>   "customerIdentifier": "customer10"
> }
> I get 202 status code back but requesting user products after that:
> http://{{depositUrl}}/deposit/v1/instances?customer=customer10
> still returns an empty list. The same occurs when using fims-web-app to
> link customer with a product. Should I have any other micro services
> running besides the one named above?
> 
> 4. One more question regarding last one - what is the point of
> beneficiaries section? Could anyone please explain?
> 
> 5. I have no idea how connect a user with a specific customer (to simulate
> customer logging in one one's own behalf). How should that work?
> 
> I hope someone 

Re: Typical chart of accounts for fineract-cn-fims-web-app

[Vishwas Babu A J]

Hi Juhan,

The sample charts of accounts used by the demo server is at 
https://github.com/apache/fineract-cn-default-setup/blob/develop/accounting/src/main/resources/standardChartOfAccounts/ledgers.csv
 . I had been meaning to update my provisioning scripts with these details + 
provisioning of the portfolio micro-service, but haven't gotten around to the 
same yet :)

Regards,
Vishwas

On 2019/09/11 18:49:56, Juhan Aasaru  wrote: 
> Hi!
> 
> I want to create Postman scripts that provision a structure for fineract-cn
> playground tenant. I want to do this for demonstration purposes - as
> currently when you start up fims-web-app it is quite empty. Running postman
> scripts can be later automated [2] - so once we get a demo server up we
> could wipe the contents of it every now and then and re-create sample
> structure.
> 
> I took scripts from Vishwas repository [1] and developed them further but I
> ran into a problem that I have no idea how chart of accounts of a typical
> company using fineract looks like.
> 
> I wonder if anyone here could point me to some article/graph/etc that
> describes the typical setup in the language of different types of ledgers,
> subledgers, accounts, journal entries etc
> 
> Thanks!
> Juhan
> 
> 
> 
> [1] https://github.com/vishwasbabu/ProvisioningFineractCN
> 
> [2]
> https://learning.getpostman.com/docs/postman/collection_runs/command_line_integration_with_newman/
> 

Re: [Mifos-users] Mifos Install Files for Offline Ubuntu Installation

[Vishwas Babu A J]

Hi Moses,

You can download the install files directly from sourceforge at 
https://sourceforge.net/projects/mifos/files/latest/download 

Regards,
Vishwas



> On Jun 17, 2017, at 6:06 PM, Moses Billy  wrote:
> 
> Dear all,
> 
> I have an offline Ubuntu box. I would like to load on MIFOS however the Box 
> has no Internet access. 
> 
> However I can download  the install files from another source and transfer 
> using Flash Drive./ USB storage media
> 
> Could any one with Install files share on google drive so I can download. 
> 
> Thanks in advance.
> 
> Regards
> Moses
> 
> -- 
>  Ambition is so powerful a passion in the human breast, that however high we 
> reach we are never satisfied. Machiavelli, Niccolo 
>  
> No Life ever grows great until it is focused, dedicated, and desciplined. - 
> Henry Ermerson Fosdick
> 
> --
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! 
> http://sdm.link/slashdot___
> Mifos-users mailing list
> mifos-us...@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/mifos-users