= Extensions
:page-role: -toc -narrow


:Notice: Licensed to the Apache Software Foundation (ASF) under one or more contributor license agreements. See the NOTICE file distributed with this work for additional information regarding copyright ownership. The ASF licenses this file to you under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at. http://www.apache.org/licenses/LICENSE-2.0 . Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR  CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.

include::../section-hooks/isis.extensions~pre.adoc[]

[cols="3a,2a,5a", options="header"]
|===
|Property
|Default
|Description
|
[[isis.extensions.command-replay.analyser.exception.enabled]]
isis.extensions.command-replay. +
analyser.exception.enabled

| 
| null


|
[[isis.extensions.command-replay.analyser.result.enabled]]
isis.extensions.command-replay. +
analyser.result.enabled

| 
| null


|
[[isis.extensions.command-replay.batch-size]]
isis.extensions.command-replay. +
batch-size

| 
| null


|
[[isis.extensions.command-replay.primary-access.base-url-restful]]
isis.extensions.command-replay. +
primary-access.base-url-restful

| 
| null


|
[[isis.extensions.command-replay.primary-access.base-url-wicket]]
isis.extensions.command-replay. +
primary-access.base-url-wicket

| 
| null


|
[[isis.extensions.command-replay.primary-access.password]]
isis.extensions.command-replay. +
primary-access.password

| 
| null


|
[[isis.extensions.command-replay.primary-access.user]]
isis.extensions.command-replay. +
primary-access.user

| 
| null


|
[[isis.extensions.command-replay.quartz-replicate-and-replay-job.repeat-interval]]
isis.extensions.command-replay. +
quartz-replicate-and-replay-job. +
repeat-interval

| 
| Number of milliseconds before running again.


|
[[isis.extensions.command-replay.quartz-replicate-and-replay-job.start-delay]]
isis.extensions.command-replay. +
quartz-replicate-and-replay-job. +
start-delay

| 
| Number of milliseconds before starting the job.


|
[[isis.extensions.command-replay.quartz-session.roles]]
isis.extensions.command-replay. +
quartz-session.roles

| 
| null


|
[[isis.extensions.command-replay.quartz-session.user]]
isis.extensions.command-replay. +
quartz-session.user

| 
| The user that runs the replay session secondary.


|
[[isis.extensions.command-replay.secondary-access.base-url-wicket]]
isis.extensions.command-replay. +
secondary-access.base-url-wicket

| 
| null


|
[[isis.extensions.cors.allow-credentials]]
isis.extensions.cors. +
allow-credentials

| 
| TODO missing java-doc


|
[[isis.extensions.cors.allowed-headers]]
isis.extensions.cors. +
allowed-headers

| 
| Which HTTP headers are allowed in a CORS request.

For more information, check the usage of the ``headers`` init parameter for https://github.com/eBay/cors-filter[EBay CORSFilter].


|
[[isis.extensions.cors.allowed-methods]]
isis.extensions.cors. +
allowed-methods

| 
| Which HTTP methods are permitted in a CORS request.

For more information, check the usage of the ``methods`` init parameter for https://github.com/eBay/cors-filter[EBay CORSFilter].


|
[[isis.extensions.cors.allowed-origins]]
isis.extensions.cors. +
allowed-origins

| 
| Which origins are allowed to make CORS requests.

The default is the wildcard ("*") but this can be made more restrictive if necessary.

For more information, check the usage of the ``origins`` init parameter for https://github.com/eBay/cors-filter[EBay CORSFilter].


|
[[isis.extensions.cors.exposed-headers]]
isis.extensions.cors. +
exposed-headers

| 
| Which HTTP headers are exposed in a CORS request.

For more information, check the usage of the ``headers`` init parameter for https://github.com/eBay/cors-filter[EBay CORSFilter].


|
[[isis.extensions.secman.delegated-users.auto-create-policy]]
isis.extensions.secman. +
delegated-users.auto-create-policy

| 
| Whether delegated users should be autocreated as locked (the default) or unlocked.

BE AWARE THAT if any users are auto-created as unlocked, then the set of roles that they are given should be highly restricted !!!


|
[[isis.extensions.secman.permissions-evaluation-policy]]
isis.extensions.secman. +
permissions-evaluation-policy

| 
| If there are conflicting (allow vs veto) permissions at the same scope, then this policy determines whether to prefer to allow the permission or to veto it.

This is only used if a ``PermissionsEvaluationService`` has not been declared explicitly.


|
[[isis.extensions.secman.seed.admin.namespace-permissions.additional]]
isis.extensions.secman.seed.admin. +
namespace-permissions.additional

| 
| An (optional) additional set of namespaces that the admin role is granted.

These are in addition to the main namespaces granted.

@see NamespacePermissions#getSticky()


|
[[isis.extensions.secman.seed.admin.namespace-permissions.sticky]]
isis.extensions.secman.seed.admin. +
namespace-permissions.sticky

| 
| The set of namespaces to which the admin role is granted.

These namespaces are intended to be sufficient to allow users with this admin role to be able to administer the security module itself, for example to manage users and roles. The security user is not necessarily able to use the main business logic within the domain application itself, though.

These roles cannot be removed via user interface

WARNING: normally these should not be overridden. Instead, specify additional namespaces using ``NamespacePermissions#getAdditional()``.

@see NamespacePermissions#getAdditional()


|
[[isis.extensions.secman.seed.admin.password]]
isis.extensions.secman.seed.admin. +
password

| 
| The corresponding password for admin user. @see #getUserName()


|
[[isis.extensions.secman.seed.admin.role-name]]
isis.extensions.secman.seed.admin. +
role-name

| 
| The name of security admin role.

Users with this role (in particular, the default admin user are granted access to a set of namespaces (``NamespacePermissions#getSticky()`` and ``NamespacePermissions#getAdditional()``) which are intended to be sufficient to allow users with this admin role to be able to administer the security module itself, for example to manage users and roles.

@see Admin#getUserName() @see NamespacePermissions#getSticky() @see NamespacePermissions#getAdditional()


|
[[isis.extensions.secman.seed.admin.user-name]]
isis.extensions.secman.seed.admin. +
user-name

| 
| The name of the security super user.

This user is automatically made a member of the admin role, from which it is granted permissions to administer other users.

The password for this user is set in ``Admin#getPassword()``.

@see #getPassword() @see #getRoleName()


|
[[isis.extensions.secman.seed.regular-user.role-name]]
isis.extensions.secman.seed. +
regular-user.role-name

| 
| The role name for regular users of the application, granting them access to basic security features.

The exact set of permissions is hard-wired in the ``IsisExtSecmanRegularUserRoleAndPermissions`` fixture.


|
[[isis.extensions.secman.user-menu-me-action-policy]]
isis.extensions.secman. +
user-menu-me-action-policy

| 
| Whether the presence of SecMan should result in the automatic suppression of the ``UserMenu``'s me action.

This is normally what is required as SecMan's ``ApplicationUser`` is a more comprehensive representation of the current user. If the default me action is not suppressed, then the end-user will see two actions with the name "me" in the tertiary menu.


|
[[isis.extensions.secman.user-registration.initial-role-names]]
isis.extensions.secman. +
user-registration. +
initial-role-names

| 
| The set of roles that users registering with the app are granted automatically.

If using the wicket viewer, also requires isis.viewer.wicket.suppress-signup to be set ``false``, along with any other of its other prereqs.


|
[[isis.extensions.session-log.auto-logout-on-restart]]
isis.extensions.session-log. +
auto-logout-on-restart

| 
| null



|===

include::../section-hooks/isis.extensions~post.adoc[]
