FWD » Core Development » Base Language

10/24/2019

03:30 PM Feature #3810: SECURITY-POLICY and other security features

Branch 3810d was merged into the trunk revision 11338. Igor Skornyakov

01:12 PM Feature #3810: SECURITY-POLICY and other security features

Constantin Asofiei wrote:
> Does the #3810-387 testcase work properly now?
Yes, it does.
> Is #3810-399 fixed, i... Igor Skornyakov

01:05 PM Feature #3810: SECURITY-POLICY and other security features

Igor Skornyakov wrote:
> The branch 3810d is ready for the code review.
Does the #3810-387 testcase work properly n... Constantin Asofiei

10/22/2019

03:29 PM Feature #4366: support TLS 1.2 and other updated secure socket protocols

@LowLevelSocketImpl.createSslSocket()@ uses @SSLContext.getInstance("SSL")@ to create the SSL environment. This supp... Greg Shah

03:25 PM Feature #4366 (Closed): support TLS 1.2 and other updated secure socket protocols

Greg Shah

10/17/2019

03:45 PM Feature #3810: SECURITY-POLICY and other security features

I understand that the issue described in #3810-399 is not in the scope of this task.
The branch 3810d is ready for... Igor Skornyakov

10:37 AM Feature #3810: SECURITY-POLICY and other security features

Igor Skornyakov wrote:
> Well, it seems that it is a configuration issue. However, I do not understand how to config... Igor Skornyakov

08:38 AM Feature #3810: SECURITY-POLICY and other security features

Igor Skornyakov wrote:
> Igor Skornyakov wrote:
> > I've noticed an incompatibility between 4GL and FWD. For the co... Igor Skornyakov

08:17 AM Feature #3810: SECURITY-POLICY and other security features

Igor Skornyakov wrote:
> I've noticed an incompatibility between 4GL and FWD. For the connected databases, 4GL assig... Igor Skornyakov

06:31 AM Feature #3810: SECURITY-POLICY and other security features

Igor Skornyakov wrote:
> I've suddenly started to get the following exception while retrieving data from the @_User@... Igor Skornyakov

05:52 AM Feature #3810: SECURITY-POLICY and other security features

Igor Skornyakov wrote:
> I've noticed an incompatibility between 4GL and FWD. For the connected databases, 4GL assig... Marian Edu

05:31 AM Feature #3810: SECURITY-POLICY and other security features

I've suddenly started to get the following exception while retrieving data from the @_User@ table:... Igor Skornyakov

10/16/2019

06:06 PM Feature #3810: SECURITY-POLICY and other security features

I've noticed an incompatibility between 4GL and FWD. For the connected databases, 4GL assigns USERID (it is an OS use... Igor Skornyakov

01:44 AM Feature #3867: direct java class access from 4GL code

Fixed in 4069a rev 11428. Constantin Asofiei

10/15/2019

06:21 PM Feature #3867: direct java class access from 4GL code

I have a fix for this, will commit after regression testing. Constantin Asofiei

05:29 PM Feature #3867: direct java class access from 4GL code

There is a regression related to @jobject.fromJava@ in 4069a. Working on a fix. Constantin Asofiei

05:51 PM Feature #3810: SECURITY-POLICY and other security features

The @SET-CLIENT@/@SET-DB-CLIENT@ is re-worked as described in #3810-391.
Committed to 3810d revision 11349.
Set... Igor Skornyakov

10:07 AM Bug #4355: exception member of the CATCH block can be referenced after the block catching it

4GL allows a case like:... Constantin Asofiei

10:05 AM Bug #4355 (Closed): exception member of the CATCH block can be referenced after the block catchin...

Constantin Asofiei

10:03 AM Feature #4354 (Closed): add GET-CLASS() function support

Constantin Asofiei

09:43 AM Feature #4353: finish issues in progress.lang classes related to 4GL reflection

There are some leftover TODOs related to 4GL reflection (aka dynamic invocation). This is mainly related to paramete... Constantin Asofiei

09:42 AM Feature #4353 (Rejected): finish issues in progress.lang classes related to 4GL reflection

Constantin Asofiei

09:40 AM Feature #4352: finish progress.lang.apperror and progress.lang.syserror

@apperror@ vs @syserror@ - these weren't tested comprehensively, the support is pretty good, but when combined with @... Constantin Asofiei

09:39 AM Feature #4352 (Rejected): finish progress.lang.apperror and progress.lang.syserror

Constantin Asofiei

09:38 AM Feature #4351: instance vs static dual behavior for class-defined resources

In 4GL, a @DEFINE STREAM@ appearing as a class member, will allow that stream name to be accessed from both static an... Constantin Asofiei

09:37 AM Feature #4351 (New): instance vs static dual behavior for class-defined resources

Constantin Asofiei

09:36 AM Feature #4350: method overload when they differ by a temp-table, dataset, buffer or object or ext...

See #3751-492 for a comprehensive list of overload rules. We need support for method overload when they differ by a ... Constantin Asofiei

09:33 AM Feature #4350 (WIP): method overload when they differ by a temp-table, dataset, buffer or object ...

Constantin Asofiei

09:32 AM Feature #4349: add support for 4GL ENUM

We need to add conversion (I'm not sure, but 4069a may have some fixes related to this) and runtime support for OpenE... Constantin Asofiei

09:31 AM Feature #4349 (Closed): add support for 4GL ENUM

Constantin Asofiei

09:31 AM Bug #4348: investigate and fix extent issues in method/function return type

FWD doesn't treat correctly dynamic invocation of a OO method which returns an extent value, or a DYNAMIC-FUNCTION ca... Constantin Asofiei

09:29 AM Bug #4348 (New): investigate and fix extent issues in method/function return type

Constantin Asofiei

09:28 AM Feature #4347: add runtime support for STOP-AFTER block option

The STOP-AFTER option requires runtime - see the @BlockManager.stopAfter@ stubs. Constantin Asofiei

09:28 AM Feature #4347 (Closed): add runtime support for STOP-AFTER block option

Constantin Asofiei

09:02 AM Feature #3751: implement support for OO 4GL and structured error handling

Greg, these are they key missing features:
* enum support - #4349
* block option STOP-AFTER (needs runtime) - #4347... Constantin Asofiei

10/14/2019

04:35 PM Feature #3810: SECURITY-POLICY and other security features

It seems that I've finally understood what is wrong with my implementation of the @SECURITY-POLICY:SET-CLIENT@ suppor... Igor Skornyakov

09:28 AM Feature #3854: update appserver support with PASOE features

Constantin Asofiei wrote:
> A high-level plan on testing the PASOE behavior:
> * documentation how to configure and... Marian Edu

10/10/2019

05:31 PM Feature #3178: implement STREAM-HANDLE support

Greg Shah wrote:
> In 4069a, I'm changing the gap marking to partial for conversion and full for runtime. Is that O... Constantin Asofiei

02:40 PM Feature #3178: implement STREAM-HANDLE support

In 4069a, I'm changing the gap marking to partial for conversion and full for runtime. Is that OK? Greg Shah

10/09/2019

07:38 AM Feature #3810: SECURITY-POLICY and other security features

Constantin Asofiei wrote:
> Igor, did you manage to do any progress on the testcase?
Well, I'm working now on the... Igor Skornyakov

07:29 AM Feature #3810: SECURITY-POLICY and other security features

Igor, did you manage to do any progress on the testcase? Constantin Asofiei

10/07/2019

06:45 AM Feature #3810: SECURITY-POLICY and other security features

Constantin Asofiei wrote:
> Igor, please see @testcases/uast/security/client-principal-multiple-databases.p@. Pleas... Igor Skornyakov

06:38 AM Feature #3810: SECURITY-POLICY and other security features

Igor, please see @testcases/uast/security/client-principal-multiple-databases.p@. Please review it - the idea is tha... Constantin Asofiei

04:08 AM Feature #3810: SECURITY-POLICY and other security features

Constantin Asofiei wrote:
> Please rebase 3810d. Also, what is the state of this task?
3810d was reabsed to the ... Igor Skornyakov

03:16 AM Feature #3810: SECURITY-POLICY and other security features

Please rebase 3810d. Also, what is the state of this task? Constantin Asofiei

10/02/2019

11:50 AM Feature #3867: direct java class access from 4GL code

The FWD changes are in 4069a rev 11387
The test is in rev 1950. Constantin Asofiei

10:16 AM Feature #3867: direct java class access from 4GL code

This looks very good. Check in the sample to @testcases/uast/@ when you are ready. Greg Shah

10/01/2019

06:52 PM Feature #3867: direct java class access from 4GL code

Greg, I have a code like this:... Constantin Asofiei

09/30/2019

11:39 AM Feature #3867: direct java class access from 4GL code

> I think I need to emit a non-null check for cases where a Java var is used in 4GL APIs (like MathOps.plus),
Usin... Greg Shah

11:35 AM Feature #3867: direct java class access from 4GL code

I think the 4GL operators would require wrapping the Java type in the correct BDT. Then the 4GL operators will work ... Greg Shah

09:57 AM Feature #3867: direct java class access from 4GL code

And also about using @jobject.ref()@; for a call like @Math:sin(jrad)@, where @jrad@ is @java.lang.Double@, if this g... Constantin Asofiei

09:50 AM Feature #3867: direct java class access from 4GL code

Greg Shah wrote:
> * At this time we haven't considered that pure Java operators would be used. This means that we a... Constantin Asofiei

09/29/2019

12:43 PM Feature #3867: direct java class access from 4GL code

I think we can assume normal Java NPE behavior, with some caveats.
* We will need to allow Java exceptions in 4GL ... Greg Shah

11:49 AM Feature #3867: direct java class access from 4GL code

Can we assume normal Java behaviour (e.g. NPE throw) for cases where the variable is uninitialized, and it is used in... Constantin Asofiei

09/27/2019

04:34 PM Feature #3867: direct java class access from 4GL code

Yes, this opens up potential security (and reliability) issues. I think we are offering this under the credo: "with ... Greg Shah

03:02 PM Feature #3867: direct java class access from 4GL code

A limitation here is that any file system access, process launching, etc, is done from the FWD server process (and ma... Constantin Asofiei

09:50 AM Feature #3867: direct java class access from 4GL code

Greg Shah wrote:
> > The problem here is that any recursive call will be broken... we had this in the past, where we... Constantin Asofiei

09:35 AM Feature #3867: direct java class access from 4GL code

> The problem here is that any recursive call will be broken... we had this in the past, where we promoted local vars... Greg Shah

09:02 AM Feature #3867: direct java class access from 4GL code

Greg Shah wrote:
> > I can parse and convert (but not compile) your sample.
>
> Exciting! How extensive were the... Constantin Asofiei

08:41 AM Feature #3867: direct java class access from 4GL code

> I can parse and convert (but not compile) your sample.
Exciting! How extensive were the changes for that?
I ... Greg Shah

07:44 AM Feature #3867: direct java class access from 4GL code

Or the goal is to just access Java APIs (be it a Java method or a Java field, declared in some existing Java class), ... Constantin Asofiei

07:37 AM Feature #3867: direct java class access from 4GL code

Another question is using Java-style vars in 4GL constructs. Think something like this:... Constantin Asofiei

05:07 AM Feature #3867: direct java class access from 4GL code

Greg, I can parse and convert (but not compile) your sample. Some questions:
* should the Java objects be defined a... Constantin Asofiei

11:55 AM Feature #3810: SECURITY-POLICY and other security features

Created task branch 3810d from trunk revision 11330. Igor Skornyakov

09/26/2019

11:01 AM Feature #3867: direct java class access from 4GL code

The testcase in #3867-2 is checked in as @testcases/uast/direct_java_usage_simple.p@. Greg Shah

10:57 AM Feature #3867: direct java class access from 4GL code

+Status+
4069a revision 11370 is the first set of changes related to this task.
* The parser and the @SymbolRes... Greg Shah

05:31 AM Feature #3310: add support for the equivalent of the OpenEdge Web Services Adapter (and ProxyGen)...

Constantin Asofiei wrote:
> For Web Services, we need these questions answered, for both PASOE and WSA modes:
> * w... Marian Edu

04:37 AM Feature #3310: add support for the equivalent of the OpenEdge Web Services Adapter (and ProxyGen)...

Constantin Asofiei wrote:
> Marian, on xfer you have a @appserver/soap@ folder - please run the tests in SoapUI and ... Marian Edu

04:35 AM Feature #3310: add support for the equivalent of the OpenEdge Web Services Adapter (and ProxyGen)...

Constantin Asofiei wrote:
> Marian, the @.xpxg@ can have a @SubAppObject@ node (as a child of @AppObject@) - please ... Marian Edu

09/25/2019

07:52 AM Feature #3310: add support for the equivalent of the OpenEdge Web Services Adapter (and ProxyGen)...

Constantin Asofiei wrote:
> Marian, one more question: what happens if there are multiple wsdl generated via proxyge... Marian Edu