Resolwe

Latest version: v42.2.0

Safety actively analyzes 697846 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 29 of 31

3.1.0

Not secure
==================

Added
-----
- ``resolwe/base`` Docker image based on Ubuntu 17.04
- Support different dependency kinds between data objects

Fixed
-----
- Serialize ``current_user_permissions`` field in a way that is
compatible with DRF 3.6.4+
- API requests on single object endpoints are allowed to all users if
object has appropriate public permissions


==================

3.0.1

Not secure
==================

Fixed
-----
- Correctly relabel SELinux contexts on user/group files


==================

3.0.0

Not secure
==================

Added
-----
- Add filtering by id on ``descriptor_schma`` API endpoint
- Support assigning descriptor schema by id (if set value is of type
int) on ``Collection``, ``Data`` and ``Entity`` endpoints
- ``assertAlmostEqualGeneric`` test case helper, which enables recursive
comparison for almost equality of floats in nested containers

Changed
-------
- **BACKWARD INCOMPATIBLE:** Run Docker containers as non-root user

Fixed
-----
- Use per-process upload dir in tests to avoid race conditions

==================

2.0.0

Not secure
==================

Added
-----
- ``descriptor`` jinja filter to get the descriptor (or part of it) in
processes
- Ubuntu 14.04/16.04 based Docker images for Resolwe
- Add ``list_docker_images`` management command that lists all Docker
images required by registered processes in either plain text or YAML
- Data status is set to ``ERROR`` and error message is appended to
``process_error`` if value of ``basic:storage:`` field is set to a
file with invalid JSON

Changed
-------
- **BACKWARD INCOMPATIBLE:** Quote all unsafe strings when evaluating
expressions in Bash execution engine
- **BACKWARD INCOMPATIBILE:** Rename ``permissions`` attribute on API
endpoints to ``current_user_permissions``
- API ``permissions`` endpoint raises error if no owner is assigned to
the object after applied changes
- ``owner`` permission cannot be assigned to a group
- Objects with public permissions are included in list API views for
logged-in users
- Owner permission is assigned to the contributor of the processes and
descriptor schemas in the ``register`` management command
- The base image Dockerfile is renamed to Dockerfile.fedora-26

Fixed
-----
- Add ``basic:url:link`` field to the JSON schema
- Return more descriptive error if non-existing permission is sent to
the ``permissions`` endpoint
- Handle errors occurred while processing Elasticsearch indices and log
them
- Return 400 error with a descriptive message if permissions on API are
assigned to a non-existing user/group


==================

1.5.1

Not secure
==================

Changed
-------
- Add more descriptive message if user has no permission to add
``Data`` object to the collection when the object is created

Fixed
-----
- Set contributor of ``Data`` object to public user if it is created by
not authenticated user
- Remove remaining references to calling ``pip`` with
``--process-dependency-links`` argument


==================

1.5.0

Not secure
==================

Added
-----
- Add Resolwe test framework
- Add ``with_custom_executor`` and ``with_resolwe_host`` test decorators
- Add ``isort`` linter to check order of imports
- Support basic test case based on Django's ``TransactionTestCase``
- Support ES test case based on Django's ``TransactionTestCase``
- Support process test case based on Resolwe's ``TransactionTestCase``
- Add ability to set a custom command for the Docker executor via the
``FLOW_DOCKER_COMMAND`` setting.
- ``get_url`` jinja filter
- When running ``register`` management command, permissions are
automatically granted based on the permissions of previous latest
version of the process or descriptor schema.
- Set ``parent`` relation in spawned ``Data`` objects and workflows
- Relations between entities
- Resolwe toolkit Docker images
- Archive file process
- File upload processes
- Resolwe process tests
- Add ``SET_ENV`` setting to set environment variables in executor
- Support ordering by version for descriptor schema
- Add ``NullExecutor``
- If ``choices`` are defined in JSON schema, value of field is
validated with them
- Add cpu core, memory and network resource limits
- Add scheduling class for processes (``interactive``, ``batch``), which
replaces the previously unused process priority field
- Add ``share_content`` flag to the collection and entity permissions
endpoint to also share the content of the coresponding object
- Add ``delete_content`` flag to the collection and entity destroy
method on API to also delete the content of the coresponding object

Changed
-------
- Support running tests in parallel
- Split ``flow.models`` module to multiple files
- Remove ability to set a custom executor command for any executor via
the ``FLOW_EXECUTOR['COMMAND']`` setting.
- Rename ``RESOLWE_API_HOST`` setting and environment variable in
executor to ``RESOLWE_HOST_URL``
- Remove ``keep_failed`` function in tests.
- Rename ``keep_all`` function to ``keep_data``.
- Manager is automatically run when new ``Data`` object is created
- Outputs of ``Data`` objects with status ``Error`` are not validated
- Superusers are no longer included in response in ``permissions``
endpoint of resources
- Remove ``public_processes`` field from the ``Collection`` model as it
is never used
- Public users can create new ``Data`` objects with processes and
descriptor schemas on which they have appropriate permissions
- Add custom ``ResolweSlugField`` and use it instead of
``django-autoslug``

Fixed
-----
- **SECURITY:** Prevent normal users from creating new ``Processes``
over API
- Configure parallel tests
- Isolate Elasticsearch indices for parallel tests
- Fix Docker container name for parallel tests
- Generate temporary names for upload files in tests
- Fix permissions in Elasticsearch tests
- Do not purge data in tests
- Remove primary keys before using cached schemas' in process tests
- Set appropriate SELinux labels when mounting tools in Docker
containers
- ``Data`` objects created by the workflow inherit its permissions
- If user doesn't have permissions on the latest versions of processes
and descriptor schemas, older ones are used or error is returned
- Support ``data:`` and ``list:data:`` types
- Set ``Data`` object status to error if worker cannot update the object
in the database
- ``Data`` objects returned in ``CollectionViewset`` and
``EntityViewset`` are filtered by permissions of the user in request
- Public permissions are taken into account in elastic app
- Treat ``None`` field value as if the field is missing
- Copy parent's permissions to spawned ``Data`` objects


==================

Page 29 of 31

© 2025 Safety CLI Cybersecurity Inc. All Rights Reserved.