View · Index

ACS Kernel

Package Specification Summary for Package: acs-kernel

Summary: Routines and data models providing the foundation for OpenACS-based Web services.
Description: The OpenACS kernel contains the core datamodel create and drop scripts for such things as objects, groups, parties and the supporting PL/SQL and PL/pgSQL procedures.
Maturity: Mature and Standard
This package depends on: None
Packages that depend on acs-kernel: accounts-ledger acs-admin acs-api-browser acs-authentication acs-automated-testing acs-bootstrap-installer acs-content acs-content-repository acs-core-docs acs-datetime acs-developer-support acs-events acs-interface acs-lang acs-ldap-authentication acs-mail acs-mail-lite acs-messaging acs-object-management acs-reference acs-service-contract acs-subsite acs-tcl acs-templating address-book adserver ajaxhelper assessment attachments bookmarks bookshelf bug-tracker categories chat clickthrough cms cms-news-demo cop-base cop-ui curriculum-central directory dotfolio dotlrn download dynamic-types ec-serial-numbers ecommerce edit-this-page email-handler faq file-manager file-storage forums gatekeeper general-comments glossary imsld invoices layout-manager mail-tracking monitoring new-portal news notes notifications oacs-dav openacs-bootstrap3-theme openacs-bootstrap5-theme organizations package-builder page photo-album postal-address press ref-countries ref-currency ref-itu ref-language ref-timezones ref-us-states ref-us-zipcodes robot-detection rss-support schema-browser scorm-player simple-survey site-wide-search skin sloan-bboard spam static-pages telecom-number tsoap version-control webmail wiki workflow wp-slim xml-rpc xotcl-core xotcl-request-monitor xowiki
Package parameters:
IndexRedirectUrl
If non-blank, serve the given template rather than the default index template. Example: /dotlrn/index (default , type string, scope instance)
RestrictErrorsToAdminsP
Whether we show errors to administrators only (default 1, type string, scope instance)
SendErrorEmailP
Whether to send an email to the site owner describing details whenever an error ocurrs, or not. A value of 0 in this parameter indicates that no emails are going to be sent, on the other hand, a value of 1 indicates that an email is going to be sent when error ocurrs. (default 0, type number, scope instance)
UseBackgroundDeliveryP
Use background delivery for file downloads (default 0, type number, scope instance)
UseCanonicalLocation
Use Canonical Location (default 0, type number, scope instance)
Local Accounts: EmailAccountOwnerOnPasswordChangeP
Say 1 if you want us to send an email to the account owner when changing password for local accounts. (default 1, type number, scope instance)
Local Accounts: ScreenName
Can be 'none', 'solicit', or 'require'. If you say none, we will not ask users to provide a screen_name. If you say 'solicit', we will ask for one, but not require it. If you say 'require', we will not let users register or login without setting up a screen_name. (default solicit, type number, scope instance)
antispam: AllowedAttribute
A space separated list of allowed attribute names, e.g. title, src, etc.. You probably want to avoid onMouseOver and the like. Add a * to always allow all attributes. (default align alt border cellpadding cellspacing color face height href hspace id name size src style target title valign vspace width colspan rowspan class, type string, scope instance)
antispam: AllowedProtocol
A space separated list of protocols that are valid attributes of HTML tags in submitted content. Add a * to always all all protocols. (default http https ftp mailto, type string, scope instance)
antispam: AllowedTag
A space separated list of all the HTML tags that people may use. Add a * to always allow all tags. (default A ADDRESS ADP:ICON ADP:TOGGLE_BUTTON B BLOCKQUOTE BR CODE DIV DD DL DT EM FONT HR I LI OL P PRE SPAN STRIKE STRONG SUB SUP TABLE TBODY TD TR TT U UL EMAIL FIRST_NAMES LAST_NAME GROUP_NAME H1 H2 H3 H4 H5 H6, type string, scope instance)
antispam: AllowedURLAttribute
A space separated list of allowed attribute names, for which the attribute value should be interpreted as a URL. These attributes will then be checked for valid protocols, cf. the AllowedProtocol parameter. This is in addition to the attributes allowed by the AllowedAttribute parameter. (default HREF, type string, scope instance)
antispam: SpamUserNameRegexp
provide a regular expression to block certain user names (default , type number, scope instance)
apm: InfoFilePermissionsMode
The default UNIX permissions to assign to the .info file when it is created. (default 0775, type string, scope instance)
apm: SystemCommandPaths
Directories that contain system commands, such as tar, wget, and gunzip (default /usr/local/bin /usr/bin /bin /usr/sbin /sbin /usr/sbin, type string, scope instance)
caching: DBCacheSize
The size of the database API cache (default 200000, type number, scope instance)
caching: MaxSize
The size of the util_memoize cache(bytes) (default 200000, type number, scope instance)
deprecated: AdminOwner
Who signs the admin pages, e.g., a programmer who can fix/enhance them. DEPRECATED: please use HostAdministrator instead (default a-programmer@yourdomain.com, type string, scope instance)
deprecated: PrivacyControlEnabledP
Whether we control privacy. One example of a package that uses this is forums. It doesn't show any forum posting content unless this is set to 1. DEPRECATED: this functionality has been ported to dotlrn, which was the only upstream package using it. (default 0, type number, scope instance)
permissions: PermissionCacheP
Whether to cache permission_p calls. Use with extreme caution. Only direct permissions managed via the tcl api are properly handled and some packages modify permissions directly in the database and will not work properly when this is turned on. You must restart the server after changing this param. (default 0, type number, scope instance)
permissions: PermissionCacheTimeout
Number of seconds until the permissions cache times out. (default 300, type number, scope instance)
request-processor: BugTrackerInstance
Use this parameter to indicate the instance of the bug tracker where the errors will be automatically submitted. You must use a relative url indicating where is mounted the instance of the bug tracker. For instance, if you have your bug tracker instance mounted under "/bug", this parameter must be "/bug". Leave this parameter in blank if you do not want to use it. (default , type string, scope instance)
request-processor: DebugP
save debugging information for developer support? (default 0, type string, scope instance)
request-processor: ExcludedFiles
string match patterns for files which the request processor should never serve (default */CVS/* *~, type string, scope instance)
request-processor: ExtensionPrecedence
precedence for file extensions, e.g., 'tcl,adp,html' means 'serve a .tcl file if available, else an .adp file if available, else an .html file if available, else the first file available in alphabetical order. Comma-separated. (default adp,tcl,html,jpg,gif, type string, scope instance)
request-processor: ForceHostP
if a user provides a Host header which isn't this, redirect the user to this particular host. e.g., if yourservername.com and www.yourservername.com point to the same IP, set this to 1 so cookies will be properly set. (default 0, type string, scope instance)
request-processor: HttpCacheControlP
Whether we output http headers on every request for dynamic pages that prevent browsers and proxies from caching the page. (default 1, type number, scope instance)
request-processor: LogDebugP
log request-processor debug messages to the error log? very verbose. (default 0, type string, scope instance)
request-processor: PerformanceModeP
Setting this to 1 will tell the request processor to make the assumption that once a URL is mapped to a file, that mapping never changes. This obviously would cause problems on a development system, but will improve performance on a production server. (default 0, type number, scope instance)
request-processor: ResourcesExpireInterval
If the specified value is different to 0, the value is passed to ns_setexpires to provide an expire time for the content. Typically, this time is set in seconds but can be as well an integer with the suffix "d" for days, "h" for hours or "m" for minutes, such as e.g. 30d for 30 days. (default 0, type number, scope instance)
request-processor: ServeXQLFiles
Should we serve .xql files (database query files) to browsers? Say 0 to not serve them, 1 to serve them. Typically you do not want to serve these files. Change requires a server restart to take effect. (default 0, type number, scope instance)
request-processor: SystemURLSection
URL sections exempt from Host header checks and security/session handling. (can specify an arbitrary number). (default SYSTEM, type string, scope instance)
security: AllowPersistentLoginP
do we allow persistent logins? (default 1, type string, scope instance)
security: ApprovalExpirationDays
The number of days after which registration approval expires, which will cause the user to change state to 'needs_approval'. Set to 0 to disable expiration of approval. (default 0, type number, scope instance)
security: CSPEnabledP
Enable automated generation of W3C ontent Security Policies (CSP); it is highly recommended to activate it to mitigate XSS attacks (default 1, type number, scope instance)
security: CSPEnabledP
Enable automated generation of W3C ontent Security Policies (CSP) (default 1, type number, scope instance)
security: CookieDomain
Domain to pass to ad_set_cookie. Set this if you want to access multiple hostnames under the same domain. (default , type string, scope instance)
security: DefaultPersistentLoginP
On the login screen, should the default be to login the user permanently (1) or not (0). (default 1, type number, scope instance)
security: LoginExpirationTime
The expiration time for the login page. This is needed to protect against browser cached passwords. (default 600, type number, scope instance)
security: LoginPageExpirationTime
The expiration time in seconds for the login page. This is needed to protect against browser cached passwords - is not needed anymore for are recent browsers. (default 0, type number, scope instance)
security: LoginTimeout
The maximum number of seconds to let users stay logged in without requiring them to refresh their password. 0 for infinite. Change requires a server restart to take effect. (default 28800, type number, scope instance)
security: MaxUrlLength
The maximum length of a URL. Often attacks are tried with long URLs, therefore, catching this early improves security. For typical OpenACS installations, a URL length of 500 is more than enough. (default 2000, type number, scope instance)
security: PasswordExpirationDays
How long can a password be used before it expires and must be changed. Specify 0 to disable password expiration. (default 0, type number, scope instance)
security: PasswordHashAlgorithm
Define the algorithm to be used for computing password hashes; multiple algorithms can be specified in decreasing preference order (example: "scram-sha-256 scrypt-16384-8-1 salted-sha1"; default: "salted-sha1"; values are specified without quotes). (default salted-sha1, type string, scope instance)
security: PasswordHashAlgorithm
Define the algorithm to be used for computing password hashes; multiple algorithms can be specified in decreasing preference order (example: " argon2-12288-3-1 scram-sha-256 scrypt-16384-8-1 salted-sha1"; default: "salted-sha1"; values are specified without quotes). Potential values: argon2-12288-3-1 argon2-rfc9106-high-mem argon2-rfc9106-low-mem salted-sha1 scram-sha-256 scrypt-16384-8-1 (default salted-sha1, type string, scope instance)
security: RegisterRestrictEntireServerToRegisteredUsersFilters
Register filters at startup that will allow each subsite to be restricted to registered users. (default 0, type number, scope instance)
security: RegisterRestrictToSSLFilters
Whether to process the RestrictToSSL paths per site node on startup which can be quite slow on a site with many nodes. (default 1, type string, scope instance)
security: RequireQuestionForPasswordResetP
(Unsupported) Do we require a question/answer pair to reset a users password? (default 0, type string, scope instance)
security: RestrictLoginToSSLP
Should login, register, and password update pages be restricted to HTTPS? (default 1, type number, scope instance)
security: SecureSessionCookie
Set the session cookie as secure. This parameter should only be set, when ALL requests to the site requiring a cookie are over HTTPS. (default 0, type number, scope instance)
security: SessionLifetime
how long after the last hit should we save information in the SessionLifetime table? (default 604800, type string, scope instance)
security: SessionRenew
How many seconds do we let elapse before renewing a session cookie? This should be less than SessionTimeout. Change requires a server restart to take effect. (default 300, type number, scope instance)
security: SessionSweepInterval
how often should we sweep for old stale sessions? (default 3600, type string, scope instance)
security: SessionTimeout
For how many seconds can a be session inactive before it times out? Change requires a server restart to take effect. (default 1200, type string, scope instance)
security: UseCustomQuestionForPasswordReset
Does the user get to choose their custom password question and answer (default 0, type string, scope instance)
security: UseEmailForLoginP
Say 1 if we should login with email instead of username. (default 1, type number, scope instance)
security: UsePasswordWidgetForUsername
Should we hide what the user types in the username field, the way we do with the password field? Set this to 1 if you are using sensitive information such as social security number for username. (default 0, type number, scope instance)
server-cluster: CanonicalServer
The canonical (primary) server, i.e. the server running the scheduled procedures etc. The provided value should be included in the list of ClusterPeerIP? If a port is not provided, we assume port 80. (default , type string, scope instance)
server-cluster: ClusterAuthorizedIP
A space separated list of which machines can issues requests (e.g., flushing) to the cluster. Can use glob matching notation (10.0.0.*) (default , type string, scope instance)
server-cluster: ClusterAutodeleteInterval
When a peer node is inactive long than this duration, delete it automatically (default 2m, type string, scope instance)
server-cluster: ClusterEnableLoggingP
Should I log clustering events in the system log? (default 1, type string, scope instance)
server-cluster: ClusterEnabledP
is clustering enabled? (default 0, type string, scope instance)
server-cluster: ClusterHeartbeatInterval
Time duration between checks for the liveliness of cluster nodes (default 20s, type string, scope instance)
server-cluster: ClusterPreferredLocationRegexp
When servers listen on multiple endpoints (different protocols, IP addresses, IPv4/IPv6, ...) use the specified regexp to select the preferred option. When there is no match, the first optional value is used. (default https://, type string, scope instance)
server-cluster: DynamicClusterPeers
Do not edit here. Used for bookkeeping. (default , type string, scope instance)
server-cluster: DynamicClusterPeers
Do not edit here. Used for bookkeeping. (default , type string, scope instance)
system-information: CommunityMemberAdminURL
the URL of the admin community member page (default /acs-admin/users/one, type string, scope instance)
system-information: CommunityMemberURL
the URL of the public community member page (default /shared/community-member, type string, scope instance)
system-information: HomeName
the name of the workspace link (default #acs-subsite.Your_Account#, type string, scope instance)
system-information: HomeURL
the URL of the workspace link (default /pvt/home, type string, scope instance)
system-information: HostAdministrator
a person whom people can email with technical problems (default somenerd@yourdomain.com, type string, scope instance)
system-information: OutgoingSender
The email address that will sign outgoing alerts. (default somenerd@yourdomain.com, type string, scope instance)
system-information: PublisherName
for legal pages, full corporate entity (default Yourdomain Network, Inc., type string, scope instance)
system-information: SystemName
the name of your system (default yourdomain Network, type string, scope instance)
system-information: SystemOwner
who signs the average user-visible pages (default webmaster@yourdomain.com, type string, scope instance)
system-information: SystemURL
URL to tell users to go to (default http://yourdomain.com, type string, scope instance)

Bug Tracker Summary for Package: acs-kernel

Open Bugs: 12
All Tracked Issues: 77
Latest Bug Opened: 2017-03-02 PACKAGE BODY UTIL doesn't compile on clean Oracle install
Latest Bug Fixed: 2024-10-13 Make cmp_pg_version a little bit more robust.
Top Bug Submitters: Joel Aufrecht (5) Tilmann Singer (4) Michael Steigman (3) Jade Rubick (3) Brian Fenton (3)
Top Bug Fixers: Gustaf Neumann (18) Lars Pind (11) Jeff Davis (7) Don Baccus (6) Jarkko Laine (4) Joel Aufrecht (3) Dave Bauer (3)

Code Metrics Summary for Package: acs-kernel

# Tcl Procs 0
# Tcl Lines 0
# Tcl Blank Lines 1
# Tcl Comment Lines 0
# Automated Tests 1
# Stored Procedures PG: 375 ORA: 398
# SQL Lines PG: 19685 (blank 3321 comments 3309) ORA: 12959 (blank 1810 comments 1369)
# ADP pages 0
# ADP lines 0
# Include pages (acs-kernel/lib/) 0
# Documentation pages 0
# Documentation lines 0
Browse Source API-browser
Github Repository: https://github.com/openacs/openacs-core

 

 

previous November 2024
Sun Mon Tue Wed Thu Fri Sat
27 28 29 30 31 1 2
3 4 5 6 7 8 9
10 11 12 13 14 15 16
17 18 19 20 21 22 23
24 25 26 27 28 29 30

Popular tags

17 , 5.10 , 5.10.0 , 5.10.1 , 5.9.0 , 5.9.1 , ad_form , ADP , ajax , aolserver , asynchronous , bgdelivery , bootstrap , bugtracker , CentOS , COMET , compatibility , CSP , CSRF , cvs , debian , docker , docker-compose , emacs , engineering-standards , exec , fedora , FreeBSD , guidelines , host-node-map
No registered users in community xowiki
in last 30 minutes
Contributors

OpenACS.org