[ARVADOS] updated: 1.3.0-2712-gde11b137d

[Git user]

Summary of changes:
 apps/workbench/test/integration/projects_test.rb   |   2 +-
 doc/admin/upgrading.html.textile.liquid            |  37 +++++-
 doc/api/permission-model.html.textile.liquid       |  94 ++++++++++-----
 services/api/app/models/arvados_model.rb           |   5 +-
 services/api/app/models/group.rb                   |  41 +++++++
 services/api/app/models/link.rb                    |  40 ++++++-
 .../migrate/20200602141328_fix_roles_projects.rb   |  17 +++
 services/api/db/structure.sql                      |   3 +-
 services/api/lib/current_api_client.rb             |  17 ++-
 services/api/lib/fix_roles_projects.rb             |  73 ++++++++++++
 services/api/lib/update_permissions.rb             |  15 ++-
 services/api/test/fixtures/collections.yml         |   3 +-
 services/api/test/fixtures/groups.yml              |  35 +++---
 services/api/test/fixtures/links.yml               |  28 ++---
 .../test/functional/application_controller_test.rb |   5 +-
 .../api/test/functional/arvados/v1/filters_test.rb |  10 +-
 .../arvados/v1/groups_controller_test.rb           |  27 +++--
 .../arvados/v1/repositories_controller_test.rb     |   4 +-
 .../functional/arvados/v1/users_controller_test.rb |   4 +-
 services/api/test/integration/groups_test.rb       |   3 +-
 services/api/test/integration/permissions_test.rb  |  15 ++-
 services/api/test/performance/permission_test.rb   |   2 +-
 services/api/test/unit/arvados_model_test.rb       |   6 +-
 services/api/test/unit/group_test.rb               | 127 +++++++++++++++++----
 services/api/test/unit/owner_test.rb               |  32 +++++-
 services/api/test/unit/permission_test.rb          |  39 ++++---
 services/fuse/tests/test_mount.py                  |   2 +-
 tools/sync-groups/sync-groups.go                   |  15 ++-
 tools/sync-groups/sync-groups_test.go              |   2 +-
 29 files changed, 545 insertions(+), 158 deletions(-)
 create mode 100644 services/api/db/migrate/20200602141328_fix_roles_projects.rb
 create mode 100644 services/api/lib/fix_roles_projects.rb

       via  de11b137d4469e9d54e078ac0dd5664bdb90e486 (commit)
       via  333b2a51d0410e69c1c0f47a12d96f95999d307e (commit)
       via  95e79c507c74ee2364a01b82c771495b91a6de0d (commit)
       via  65e39827a56cab30d7c9fe526c5cfc23e5e930e8 (commit)
       via  5502559ac286dcf807261cec86b983f061788908 (commit)
       via  60022ad25ba8d143578d9f20eda93744688909d2 (commit)
       via  2439015112bcf7de6cdfc8170bea9a464db5e616 (commit)
       via  27f3423ab974547d8ff666e7d9f9af7aec933765 (commit)
       via  24b1ca4bf401b6701055ad0df4160a9fc1aacd7b (commit)
       via  98c6516b3dd61db66c8f92345b45df33c4530a67 (commit)
       via  aa31e2b5647e86db79c6fd86bb98a922953afb13 (commit)
       via  2627f837f2564de2708947dda87f1b4985580adb (commit)
       via  17745128f72eeaef62ea2d367ec316502107f272 (commit)
       via  aebf03862c0e5303cc4bb926585b8892ba7d0e4f (commit)
      from  9706aef4d1d8181074057910749be8eba0ef52f5 (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.


commit de11b137d4469e9d54e078ac0dd5664bdb90e486
Merge: 9706aef4d 333b2a51d
Author: Peter Amstutz <peter.amstutz at curii.com>
Date:   Fri Jun 19 11:38:18 2020 -0400

    Merge branch '16007-validate-group-class' refs #16007
    
    Arvados-DCO-1.1-Signed-off-by: Peter Amstutz <peter.amstutz at curii.com>


commit 333b2a51d0410e69c1c0f47a12d96f95999d307e
Author: Peter Amstutz <peter.amstutz at curii.com>
Date:   Fri Jun 19 11:37:57 2020 -0400

    16007: Fix typo
    
    Arvados-DCO-1.1-Signed-off-by: Peter Amstutz <peter.amstutz at curii.com>

diff --git a/doc/admin/upgrading.html.textile.liquid b/doc/admin/upgrading.html.textile.liquid
index 547a3419f..9cddce5fe 100644
--- a/doc/admin/upgrading.html.textile.liquid
+++ b/doc/admin/upgrading.html.textile.liquid
@@ -55,7 +55,7 @@ Some constraints on the permission system have been added, in particular @role@
 # The @group_class@ field must be either @role@ or @project at . Invalid group_class are migrated to @role at .
 # A @role@ cannot own things. Anything owned by a role is migrated to a @can_manage@ link and reassigned to the system user.
 # Only @role@ and @user@ can have outgoing permission links. Permission links originating from projects are deleted by the migration.
-# A @role@ is always owned by the system_user. When a group is created, it creates a @can_manage@ link for the object that would have been assigned to @owner_uuid at .  Migration adds @can_manage@ links and reassigns roles to the system user.  This also has the effect of requiring that all @role@ groups have unique names on the system.  If there is a name collision during migration, roles will renamed to ensure they are unique.
+# A @role@ is always owned by the system_user. When a group is created, it creates a @can_manage@ link for the object that would have been assigned to @owner_uuid at .  Migration adds @can_manage@ links and reassigns roles to the system user.  This also has the effect of requiring that all @role@ groups have unique names on the system.  If there is a name collision during migration, roles will be renamed to ensure they are unique.
 # A permission link can have the permission level (@name@) updated but not @head_uuid@, @tail_uuid@ or @link_class at .
 
 The @arvados-sync-groups@ tool has been updated to reflect these constraints, so it is important to use the version of @arvados-sync-groups@ that matches the API server version.

-----------------------------------------------------------------------


hooks/post-receive
--