Before we implement new features (which we plan for Q3), the ProjectForge-Team wants to make a technical release at the end of Q2 2016.
For a new major release we are currently working on the internals of ProjectForge.
Update from Hibernate 3 to Hibernate 5
Update Hibernate Search
Using Micromata Genome Commons for JPA
Hibernate Search adapter
Using JPA-Stack for new features
Upgrade to Spring 4.2.3 and Spring Boot
Using Spring Annotations
Many other libraries are updated.
Plugins are now in separate projects and can be loaded dynamically
Plugin-API revised to allow discovering Plugins dynamically.
Administration mask to activate / deactivate Plugins.
Refactoring and Cleanups
Reduce internal cyclic dependencies
Cleanup Maven structure
Configuration framework with properties files
ProjectForge runs as standalone application.
Using Spring Boot as application framework with Jetty
More flexible Schema for entities
To enable extensions to entities, we implemented attributes and time able attributes, which can be attached to an entity, like Employee or Address.
The attributes schema for an entity can be declared in a xml file, so each installation of ProjectForge can extend the entities with own data.
For edit pages a generic control renders input fields for the attributes
time able attributes can be used to declare entity values for a given time range. For example the employee may get a raise of the salary on a given date. With time able attributes the salary for now and the future can be stored.
A security review was done by a team of Micromata, Germany. Many thanks to Sergej Michel and Peter Baus (great job)!
Security release: Please update as soon as is practicable! Some vulnerabilities were discovered (a logged-in-user is always required):
Security: Cross-Site-Request-Forgery (CSRF): an attacker may send manipulated html-pages to a logged-in-user.
Security: XSS of JSON-Strings in autocompletion form: an attacker must be a logged-in-user for manipulating autocompletion strings in the data-base.
Security: Salt and pepper for passwords: an attacker with access to a data-base dump or SHA256 hashed passwords of ProjectForge user's may compromise weak passwords by brute-force attacks or with a rainbow-tables.
Security: Improved mechanism for avoiding brute-force-attacks on user/password combinations (by username as well as by IP), rest-calls are now included.
Improved LDAP-support (for ProjectForge as LDAP-master).
Some minor bugfixes and features are included, as well.
A long and hard work, but now we're proud to present the new major release 3.5.0!
A completely new design.
Customizable menu entries for every user (via drag&drop).
The usage of Embats fonts instead of icons (Embats is an embedded font such as Wingdings, Zapfdingbats etc. enabled for web pages).
A mobile version of ProjectForge was started: Currently you can use the address book mobile, the time-sheet booking will follow be available mobile with the next release 3.5.1.
The migration of jsp is now completed (no more jsp). We're much more faster with much more re-usability with this technology (based on Apache-Wicket). This was important for further mobile development.
The current browser versions of Firefox, Safari and Chrome should work fine (tested under Windows and Mac). The IE doesn't work (again), we're working on that.
We're glad to welcome a lot of new Italian downloaders. www.pmi.it lists ProjectForge as a project managementsoftware for downloading. PMI is the World's Leading Professional Association for Project Management. It's very easy to enable the Italian language in ProjectForge. You'll only need to edit one translation file containing all texts used by ProjectForge and send this translation file to k.reinhard at me.com. You'll find the translation file here.
First version of the re-design (Internet Explorer since 6.0 is now supported). There is also a first version of an interactive tutorial available (document called ProjectForge). You can explore ProjectForge step by step interactively through the tutorial (with the so called action-links).
Today ProjectForge is launched as an innovative ready-to-run-version for MacOS X (dmg/app), Windows (exe) and all Java capable platforms (executable jar). You don't need any further installation or set-up of a data-base or web-server!
ProjectForge contains everything pre-configured for you (data-base and web-server). So every user is now able to run ProjectForge by a simple click!
The mission: download, double-click and start your team work with ProjectForge. You can scale ProjectForge every time you want and ProjectForge migrates your data later (e. g. for a more professional data-base or web-server-environment).