dradis-projects 3.14.1 → 3.19.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
-SHA1:
-  metadata.gz: 4bcb99879ce1660ca26e84dfa80564c46aaf5e99
-  data.tar.gz: c9838ef567edba5bd151ca33651661ff7d0d05f3
+SHA256:
+  metadata.gz: 15e6f2944b32adc796476388e08a4526d78046d8c899b47c6d68dc7750b973cb
+  data.tar.gz: 63b932c050ca7f3f1b40d9c7fd4d29f2eb8165d728c4314ed21e8bd7cd552919
 SHA512:
-  metadata.gz: 86bd5c1ee5bdb8793b10e9e17f2da497dfadaf0b1a70a693b4b76d43756a6c6e47cba220defe57ec94c3a783a19fe04fc69786bb668c4000c75c758a02120292
-  data.tar.gz: 8d9ed93eb3d32eadba159a2bcd6051de9b8c4c8f87e62c72d4a9a21fa77a76a978b016218781b8e55fddb121ef8059d31e95ae158ca55553dd8ba5fe27350ce6
+  metadata.gz: '08cc871995bc3cf8a56b112a3b85729fa6d6561b2addbec65f6a0b0a9c69291825dff38e8458525a6c40a2b814114a9aef7428cf458d35ae4b13f61c07189551'
+  data.tar.gz: 07e6b9fb5d85de664c3e3e91141961a73931a317bab525c0456c6f60f6b857dbf3167539ef112d2b9ff26e8947f36afacb9c2c93518f5b79dcc425c2d565dc39

data/.ruby-version

@@ -1 +1 @@
-2.2.2
+2.4.1

data/CHANGELOG.md

@@ -1,3 +1,24 @@
+## Dradis Framework 3.19 (September, 2020) ##
+
+*  No changes
+
+## Dradis Framework 3.18 (July, 2020) ##
+
+*  No changes
+
+## Dradis Framework 3.17 (May, 2020) ##
+
+*  No changes
+
+## Dradis Framework 3.16 (February, 2020) ##
+
+*  No changes
+
+## Dradis Framework 3.15 (November, 2019) ##
+
+*  Fix upload with attachments
+*  Being able to export/upload boards (v3)
+
 ## Dradis Framework 3.14.1 (October, 2019) ##
 
 *  Fix directory traversal vulnerability
@@ -30,19 +51,19 @@
 
 ## Dradis Framework 3.9 (January, 2018) ##
 
-*   Fix nodes upload   
+*   Fix nodes upload
 
 *   Add default user id as fallback for activity user when importing
 
 ## Dradis Framework 3.8 (September, 2017) ##
 
-*   Add version attribute to exported methodologies   
+*   Add version attribute to exported methodologies
 
 *   Add parse_report_content placeholders to import/export.
 
 ## Dradis Framework 3.7 (July, 2017) ##
 
-*   Skip closing the logger in thorfile   
+*   Skip closing the logger in thorfile
 
 ## Dradis Framework 3.6 (March, 2017) ##
 

data/lib/dradis/plugins/projects/engine.rb

@@ -18,8 +18,8 @@ module Dradis
 
         initializer "dradis-projects.set_configs" do |app|
           options = app.config.dradis.projects
-          options.template_exporter ||= Dradis::Plugins::Projects::Export::V2::Template
-          options.template_uploader ||= Dradis::Plugins::Projects::Upload::V2::Template::Importer
+          options.template_exporter ||= Dradis::Plugins::Projects::Export::V3::Template
+          options.template_uploader ||= Dradis::Plugins::Projects::Upload::V3::Template::Importer
         end
 
 

data/lib/dradis/plugins/projects/export/template.rb

@@ -29,3 +29,4 @@ end
 
 require_relative 'v1/template'
 require_relative 'v2/template'
+require_relative 'v3/template'

data/lib/dradis/plugins/projects/export/v3/template.rb

@@ -0,0 +1,57 @@
+module Dradis::Plugins::Projects::Export::V3
+  class Template < Dradis::Plugins::Projects::Export::V2::Template
+    VERSION = 3
+
+    protected
+
+    def build_methodologies(builder)
+      boards = content_service.all_boards
+
+      builder.methodologies do |methodologies_builder|
+
+        boards.each do |board|
+          node_id =
+            board.node == project.methodology_library ? nil : board.node_id
+
+          methodologies_builder.board(version: VERSION) do |board_builder|
+            board_builder.id(board.id)
+            board_builder.name(board.name)
+            board_builder.node_id(node_id)
+
+            board.ordered_items.each do |list|
+
+              board_builder.list do |list_builder|
+                list_builder.id(list.id)
+                list_builder.name(list.name)
+                list_builder.previous_id(list.previous_id)
+
+                list.ordered_items.each do |card|
+
+                  list_builder.card do |card_builder|
+                    card_builder.id(card.id)
+                    card_builder.name(card.name)
+                    card_builder.description do
+                      card_builder.cdata!(card.description)
+                    end
+                    card_builder.due_date(card.due_date)
+                    card_builder.previous_id(card.previous_id)
+
+                    card_builder.assignees do |assignee_builder|
+                      card.assignees.each do |assignee|
+                        assignee_builder.assignee(assignee.email)
+                      end
+                    end
+
+                    build_activities_for(card_builder, card)
+                    build_comments_for(card_builder, card)
+                  end
+
+                end
+              end
+            end
+          end
+        end
+      end
+    end
+  end
+end

data/lib/dradis/plugins/projects/gem_version.rb

@@ -8,8 +8,8 @@ module Dradis
 
       module VERSION
         MAJOR = 3
-        MINOR = 14
-        TINY = 1
+        MINOR = 19
+        TINY = 0
         PRE = nil
 
         STRING = [MAJOR, MINOR, TINY, PRE].compact.join(".")

data/lib/dradis/plugins/projects/upload/template.rb

@@ -89,3 +89,4 @@ end
 
 require_relative 'v1/template'
 require_relative 'v2/template'
+require_relative 'v3/template'

data/lib/dradis/plugins/projects/upload/v1/template.rb

@@ -95,7 +95,12 @@ module Dradis::Plugins::Projects::Upload::V1
       def finalize_attachments
         # Adjust attachment URLs for new Node IDs
         pending_changes[:attachment_notes].each do |item|
-          text_attr = item.is_a?(ContentBlock) ? :content : :text
+          text_attr =
+            if defined?(ContentBlock) && item.is_a?(ContentBlock)
+              :content
+            else
+              :text
+            end
 
           logger.info { "Adjusting screenshot URLs: #{item.class.name} ##{item.id}" }
 

data/lib/dradis/plugins/projects/upload/v3/template.rb

@@ -0,0 +1,203 @@
+module Dradis::Plugins::Projects::Upload::V3
+  module Template
+    class Importer < Dradis::Plugins::Projects::Upload::V2::Template::Importer
+      private
+
+      # Private: Given a XML node contianing assignee information this method
+      # tries to recreate the assignment in the new project.
+      #
+      #   * If the user exists in this instance: assign the card to that user
+      #     (no matter if the user is not a project author).
+      #   * If the user doesn't exist, don't creat an assiment and add a note
+      #     inside the card's description.
+      #
+      # card         - the Card object we're creating assignments for.
+      # xml_assignee - the Nokogiri::XML::Node that contains node assignment
+      #                information.
+      #
+      # Returns nothing, but creates a new Assignee for this card.
+      def create_assignee(card, xml_assignee)
+        email   = xml_assignee.text()
+        user_id = user_id_for_email(email)
+
+        if user_id == -1
+          old_assignee_field = card.fields['FormerAssignees'] || ''
+          card.set_field 'FormerAssignees', old_assignee_field << "* #{email}\n"
+        else
+          old_assignee_ids  = card.assignee_ids
+          card.assignee_ids = old_assignee_ids + [user_id]
+        end
+      end
+
+      # Private: Reassign cross-references once all the objects in the project
+      # have been recreated.
+      #
+      # No arguments received, but the methods relies on :lookup_table and
+      # :pending_changes provided by dradis-projects.
+      #
+      # Returns nothing.
+      def finalize_cards
+        logger.info { 'Reassigning card positions...' }
+
+        # Fix the :previous_id with the new card IDs
+        pending_changes[:cards].each do |card|
+          card.previous_id = lookup_table[:cards][card.previous_id]
+          raise "Couldn't save card's position" unless validate_and_save(card)
+        end
+
+        logger.info { 'Done.' }
+      end
+
+      # Private: Reassign the List's :previous_id now that we know what are the
+      # new IDs that correspond to all List objects in the import.
+      #
+      # No arguments received, but the method relies on :lookup_table and
+      # :pending_changes provided by dradis-projects.
+      #
+      # Returns nothing.
+      def finalize_lists
+        logger.info { 'Reassigning list positions...' }
+
+        # Fix the :previous_id with the new card IDs
+        pending_changes[:lists].each do |list|
+          list.previous_id = lookup_table[:lists][list.previous_id]
+          raise "Couldn't save list's position" unless validate_and_save(list)
+        end
+
+        logger.info { 'Done.' }
+      end
+
+      # Private: Restore Board, List and Card information from the project
+      # template.
+      def parse_methodologies(template)
+        if template_version == 1
+          # Restore Board from old xml methodology format
+          process_v1_methodologies(template)
+        else
+          process_v2_methodologies(template)
+        end
+      end
+
+      # Private:  For each XML card block, we're creating a new Card instance,
+      # restoring the card's Activities and Assignments.
+      #
+      # list     - the List instance that will hold this Card.
+      # xml_card - the Nokogiri::XML node containing the card's data.
+      #
+      # Returns nothing, but makes use of the :lookup_table and :pending_changes
+      # variables to store information that will be used during the
+      # :finalize_cards method.
+      def process_card(list, xml_card)
+        due_date = xml_card.at_xpath('due_date').text
+        due_date = Date.iso8601(due_date) unless due_date.empty?
+
+        card = list.cards.create name: xml_card.at_xpath('name').text,
+          description: xml_card.at_xpath('description').text,
+          due_date: due_date,
+          previous_id: xml_card.at_xpath('previous_id').text
+
+        xml_card.xpath('activities/activity').each do |xml_activity|
+          raise "Couldn't create activity for Card ##{card.id}" unless create_activity(card, xml_activity)
+        end
+
+        xml_card.xpath('assignees/assignee').each do |xml_assignee|
+         raise "Couldn't create assignment for Card ##{card.id}" unless create_assignee(card, xml_assignee)
+        end
+
+        raise "Couldn't create comments for Card ##{card.id}" unless create_comments(card, xml_card.xpath('comments/comment'))
+
+        lookup_table[:cards][xml_card.at_xpath('id').text.to_i] = card.id
+        pending_changes[:cards] << card
+      end
+
+      # Private: Initial pass over ./methodologies/ section of the tempalte
+      # document to extract Board, List and Card information. Some of the
+      # objects will contain invalid references (e.g. the former :previous_id
+      # of a card will need to be reassigned) that we will fix at a later stage.
+      #
+      # template - A Nokogiri::XML document containing the project template
+      #            data.
+      #
+      # Returns nothing.
+      def process_methodologies(template)
+        logger.info { 'Processing Methodologies...' }
+
+        lookup_table[:cards]    = {}
+        lookup_table[:lists]    = {}
+        pending_changes[:cards] = []
+        pending_changes[:lists] = []
+
+        template.xpath('dradis-template/methodologies/board').each do |xml_board|
+          xml_node_id = xml_board.at_xpath('node_id').try(:text)
+          node_id =
+            if xml_node_id.present?
+              lookup_table[:nodes][xml_node_id]
+            else
+              project.methodology_library.id
+            end
+
+          board = content_service.create_board(
+            name: xml_board.at_xpath('name').text,
+            node_id: node_id
+          )
+
+          xml_board.xpath('./list').each do |xml_list|
+            list = board.lists.create name: xml_list.at_xpath('name').text,
+              previous_id: xml_list.at_xpath('previous_id').text
+
+            lookup_table[:lists][xml_list.at_xpath('id').text.to_i] = list.id
+            pending_changes[:lists] << list
+
+            xml_list.xpath('./card').each do |xml_card|
+              process_card(list, xml_card)
+            end
+          end
+        end
+
+        logger.info { 'Done.' }
+      end
+
+      # Private: Pass over old ./methodologies/ sections of the template
+      # document to extract Board, List and Card information.
+      #
+      # template - A Nokogiri::XML document containing the project template
+      #            data.
+      #
+      # Returns nothing.
+      def process_v1_methodologies(template)
+        xml_methodologies = template.xpath('dradis-template/methodologies/methodology')
+        return if xml_methodologies.empty?
+
+        logger.info { 'Processing V1 Methodologies...' }
+
+        migration = MethodologyMigrationService.new(project.id)
+
+        xml_methodologies.each do |xml_methodology|
+          migration.migrate(
+            Methodology.new(content: xml_methodology.at_xpath('text').text)
+          )
+        end
+
+        logger.info { 'Done.' }
+      end
+
+      # Private: Pass over new ./methodologies/ sections of the template
+      # document to extract Board, List and Card information.
+      #
+      # template - A Nokogiri::XML document containing the project template
+      #            data.
+      #
+      # Returns nothing.
+      def process_v2_methodologies(template)
+        # Restore Board
+        process_methodologies(template)
+
+        # Reassign Card's :previous_id and :assginees
+        finalize_cards()
+
+        # Reassign List's :previous id
+        finalize_lists()
+      end
+    end
+  end
+end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dradis-projects
 version: !ruby/object:Gem::Version
-  version: 3.14.1
+  version: 3.19.0
 platform: ruby
 authors:
 - Daniel Martin
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2019-10-25 00:00:00.000000000 Z
+date: 2020-09-04 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: bundler
@@ -121,11 +121,13 @@ files:
 - lib/dradis/plugins/projects/export/template.rb
 - lib/dradis/plugins/projects/export/v1/template.rb
 - lib/dradis/plugins/projects/export/v2/template.rb
+- lib/dradis/plugins/projects/export/v3/template.rb
 - lib/dradis/plugins/projects/gem_version.rb
 - lib/dradis/plugins/projects/upload/package.rb
 - lib/dradis/plugins/projects/upload/template.rb
 - lib/dradis/plugins/projects/upload/v1/template.rb
 - lib/dradis/plugins/projects/upload/v2/template.rb
+- lib/dradis/plugins/projects/upload/v3/template.rb
 - lib/dradis/plugins/projects/version.rb
 - lib/tasks/thorfile.rb
 - spec/fixtures/files/attachments_url.xml
@@ -152,8 +154,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubyforge_project: 
-rubygems_version: 2.6.8
+rubygems_version: 3.0.0
 signing_key: 
 specification_version: 4
 summary: Project export/upload for the Dradis Framework.