RTIR: RT for Incident Response

RTIR 4.0.0 - 2016-07-20
=======================

We're very excited to announce the availability of RTIR 4.0.0: the first
release for the next major version of RTIR. We have completely rearchitected
RTIR queues in order to significantly improve RTIR's flexibility and
performance. As this is a new major version number, with many changes
throughout the entire system, we urge you to carefully test your
configuration and customizations. Additionally, RTIR 4.0.0 is the first
release of RTIR compatible with RT 4.4. 

A quick note on the version number: while this next version of RTIR was
under development, we had naturally labelled it RTIR 3.4. However, to
reflect the significant architectural changes we made for constituencies and
multiple queues, we decided to give this release a new major version number.
If you're looking for the version of RTIR compatible with RT 4.4, RTIR 4.0
is it!

Please be sure to review the RTIR UPGRADING-4.0 upgrade documentation, as
there are a number of backward-incompatible changes that come along with the
new version: https://docs.bestpractical.com/rtir/4.0/UPGRADING-4.0.html

If you are also upgrading to RT 4.4, be sure to also read its
documentation, available at
https://docs.bestpractical.com/rt/4.4/UPGRADING-4.4.html

https://download.bestpractical.com/pub/rt/release/RT-IR-4.0.0.tar.gz
https://download.bestpractical.com/pub/rt/release/RT-IR-4.0.0.tar.gz.asc

SHA1 sums

b660855cd7467cad1fec60b4050437dacb77cb91  RT-IR-4.0.0.tar.gz
f0d9051b250e1d29570e64cd8c6d78310aeb7f64  RT-IR-4.0.0.tar.gz.asc


A list of the major new features in RTIR 4.0.0 is included below. We'll be
describing and demoing these new features in a series of blog posts on
https://bestpractical.com/blog/ in the coming weeks.

 - Shawn M Moore, for Best Practical


  * The constituency system has been completely redesigned from the ground
    up. Don't worry, your existing constituencies will be migrated as part
    of the upgrade. Now constituencies get a full-fledged queue for each
    stage of the incident response workflow (one for each of reports,
    incidents, investigations, and countermeasures). This lets constituency
    queues tap into much more of RT's flexibility around custom fields,
    watchers, scrips, etc. This addresses many longstanding limitations
    around the previous constituency queue design, and significantly
    improves performance as well.

  * You may now have multiple queues for each type of RTIR queue:
    multiple Incident Report queues, multiple Incident queues, etc. Each of
    these queues may have its own custom fields, watchers, permissions,
    scrips, templates, and so on. We're excited to hear about how you make
    use of this new flexibility.

  * If a user has permissions to work with multiple constituencies, it is
    now possible to limit RTIR's web interface to a single constituency
    by clicking a link from the new "Work with constituency" box on the RTIR
    homepage.

  * Blocks have been renamed to Countermeasures to reflect their more
    generic use case.


There were many, many changes throughout RTIR to support these major new
features. Here is an abbreviated list of additional changes:

General user UI
  * The main navigation menu for RTIR has been rearranged; RT's menus have
    been moved to underneath the RT heading.
  * Maintain message format when launching an Investigation (I#30786)
  * IPs, email addresses, etc which are annotated with buttons in messages
    now look like buttons (I#31259)
  * Clean up the visual design of the Lookup tool page
  * Make the blue header bar darker to hint you're within RTIR (I#31297)
  * It is currently no longer possible to simultaneously launch an
    Investigation on the Incident creation page due to the new architecture
  * Fix lowercase lifecycle display names on Lookup tool
  * Fix grammar error in Lookup tool
  * Improve support for infinite scroll (I#32137)
  * Fix broken attachment download links under infinite scroll (I#32084)
  * Suppress lookup and other RTIR auto linking in SelfService (I#31868)
  * Avoid error when all queues of a type are disabled
  * Avoid double concatenation of ?id=X on txn anchors
  * Allow users to set SLA on create, view the value, and update (I#32167)
  * Fix Search Builder submit for non-root WebPath

Command-line
  * add_constituency now produces less output in the ordinary case, but if
    you want to see every change it makes, you can pass the new --verbose flag

Mail
  * X-RT-Mail-Extension no longer sets constituency; instead you can now use
    ordinary RT features to filter incoming mail into the correct queue

Web Administration
  * DutyTeams now have the ForwardMessage right by default
  * Different queues may now have a different default whois server,
    controlled by the "RTIR default WHOIS server" custom field

Server Administration
  * $MaxInlineBody's default has changed from unlimited, which can cause
    performance issues, to 25kb
  * Bail out from `make initdb` early if RT::IR isn't in Plugins (I#31961)
  * Update required RT version from 4.4.0 to 4.4.1 (I#32093)

Developer
  * Many of the methods in RTIR's codebase now produce explicit return
    values
  * RT::IR::FlushCustomFieldsCache is now a supported API
  * RT::IR::Test::Web's unused merge_ticket method has been removed
  * The guts of bin/add_constituency have been factored out into an
    RT::IR::ConstituencyManager which makes it much easier to create
    constituencies programmatically
  * Added a RT::IR->HREFTo helper function which maintains the user's
    currently-selected constituency
  * Innumerable API changes were made to support RTIR's constituency queues
  * The Lookup tool page now has four callbacks (BeforeCurrent,
    AfterCurrent, BeforeTools, AfterTools)
  * The body HTML tag now has an "rtir" class to aid in styling

Documentation
  * Fix several POD errors
  * Improve clarity around RTIR install instructions


A complete changelog is available from git by running:
    git log 3.2.0..4.0.0
or visiting
    https://github.com/bestpractical/rtir/compare/3.2.0...4.0.0