Only execute the authz filter for external requests.

OPENIDM-4112 - hash internal/user passwords instead of encrypting them

Fixes OPENIDM-3906, allows for policy enforcement of repo/internal records

CR-7247 - OPENIDM-3211 - Policy filter triggers on every script request against every endpoint.

CR-3785 - OPENIDM-1618 - openidm-admin password stored in cleartext

Changed "name" to "file" in script configs

Adopt to CREST-77 API changes

[OPENIDM-922] Added access to Rhino shell commands in OpenIDM scripts. Separated enforcement and helper logic of router authorization script. Moved router-authz.js to bin/defaults.

Moving scripts to bin/defaults and updating references in conf

UI branch changes, r1480-1529 http://sources.forgerock.org/cru/CR-891 This also includes global rename of _query-id to _queryId and _query-expression to _queryExpression. Note for documenters: there are several changes expected to be made soon; review the code review (linked above) and note Andi's comments

Removing references to obsolete query

moved app's related scripts to apps module; removed apps from default openidm ui; cleanup

New securityQA endpoint, replacing the previous queries and routes we had before

CR-824 Merging in changes from UI branch to trunk

[OPENIDM-741/765/766/811] [CR-809] Phase 2 of Policy Service: client side execution of policies, server side enforcement of policies, support for "required" policy, support for policy config inside component configs, policy request/response format changes, support for additional policy scirpts, other minor fixes.

Changing validation to use new server-based policy resource

fixed forgottenPassword dialog and change password dialog with private scope on password and security answer fields

OPENIDM-762 [CR-792] Declarative way to have private data Added "scope" field to managed.json properties. Supports "public" and "private". If none is set, property is assumed to be "public" and thus not filtered out. Also updated the defaults in managed.json and router.json and removed the ui-workaround to sensitive attributes.

Recent changes from UI branch, fixing some little things http://sources.forgerock.org/cru/CR-768#CFR-12724

patched with r1285 OPENIDM-739 [CR-749], removed uuid generating in ui_notifications

Set the router-authz.js to be the default for all onRequest events.

* tasks view fix * removed generate UUID script from user, app

* moved countries, states and security questions to conf/ * fixed login as internal_user using mysql * UserApp is connected using user _id not username * messages hides on click * removing userAppLink on user delete

* removed ui-user, ui-libs & ui-commons. * links in apps * moved apps to conf/applications.json, notifications to repo * error messages are not fading out now * task details with username & app name

CR-607 CR-630 - ui divided into three modules, - customizable forms, - new dashboard & apps views, - js refactoring, - apps request approval simple workflow, - users table pagination

Minor fixes for UI: allow empty strings in querying for users in admin mode, fix Edit Password popup

- logging in as openidm-admin (internal_user) - form validation msg next to submit button in registration - fixed problems reported in CR-485 & CR-490 - functional tests update - removed profiles

Default authorization rule: HTTP access only for users assigned an "openidm-admin" role. Decorates HTTP context with assigned roles in "openidm-roles" security member. Managed object set enforces "id" provided for specific operations. Fix false assumption that all entities for action are maps.

Merge ../try-again