Sakai 11 ReadMe

Sakai will store the file content in the database as BLOBs by default. Set this value to change it to store the content on the filesystem instead.

The file system root for content hosting's external stored files (default is null, i.e. store them in the db). 

# bodyPath@org.sakaiproject.content.api.ContentHostingService=/someplace/

# KNL-309 : To enable support for deleted files set this property to some location

# bodyPathDeleted@org.sakaiproject.content.api.ContentHostingService=${sakai.home}db/bodyContentDeleted/

# When storing content hosting's body bits in files, an optional set of folders just within the bodyPath -

# to act as volumes to distribute the files among - a comma separate list of folders.  If left out, no volumes will be used.

# see the readme file (2.2.7 File Based Content Hosting) for more details

# bodyVolumes@org.sakaiproject.content.api.ContentHostingService=vol1,vol2,vol3

# Set to true to enable the release/retract and hiding of resources in ContentHostingService, Default: true

# availabilityChecksEnabled@org.sakaiproject.content.api.ContentHostingService=true

# Set to true to enable custom sorts within folders in ContentHostingService and the Resources tool

# DEFAULT: true

# prioritySortEnabled@org.sakaiproject.content.api.ContentHostingService=true

You might also want to enable the soft deletion feature of Sakai

Soft site deletion. 

If enabled, sites that are deleted will be inaccessible to normal users but won't be deleted immediately, in case they need to be recovered.

You also need to set the gracetime value, in days. After this period, the softly deleted sites will be hard deleted. Defaults to 30 days.

There is a Quartz job that must be configured to run periodically (once per day or so) to expunge those sites.

site.soft.deletion=true (default is false)

 site.soft.deletion.gracetime=30

By default, Lessons uses Content Security Policy headers to restrict what an HTML page can do, when the page is loaded from Sakai.

This is a security tradeoff. There are security risks from opening a web page written by someone else. That page can contain Javascript, which will execute with your own permissions. For this reason, by default Sakai will not open web pages in Resources. If you click on an HTML file there, it will download. We considered this inaccessible for Lessons, since the whole point of Lessons is to present content online. But we still had to deal with the security problem. So the page is served with an HTTP header that causes browsers to open the page in a “sandbox.” This restricts what the page can do.

This is new in 11. In Sakai 10, Lessons would simply open any HTML page specified.

You can restore the Sakai 10 behavior by adding the following to sakai.properties:

lessonbuilder.use-csp-headers=false

The recommended approach for dealing with this security risk is to use Sakai’s content domain support. This causes HTML pages stored in resources to be served from a different hostname than the main Sakai hostname. E.g. if your institution uses sakai.univ.edu, you might use content.sakai.univ.edu for content, resulting in URL such as https://content.sakai.univ.edu/access/content/group ….  Using a separate domain prevents web pages from executing with your Sakai privileges. Thus if you are using a separate content domain, Lessons does not add the Content Security Policy headers.

Note that it is up to the browser to enforce Content Security Policy. Safari, Chrome, and Edge do. Firefox does not. Thus Firefox users are still at risk when opening HTML pages in Lessons. I believe IE 10 and 11 also support it.

The Dashboard tool, new for Sakai 11, has not been included in the 11.0 release because too many technical issues existed and not enough person-power to address them in time for the release.

List of Dashboard issues (not included in 11.0) .   

STEP (Samigo Test and Quizzes Enhancement Project) feature to allow different delivery settings for specific sections, groups, and individuals , did not make it into Sakai 11.0 due to issues with the Auto Submit feature and data storage and retrieval issues. We are hoping to have this go into a later 11.x maintenance release. https://sakaiproject.atlassian.net/browse/SAM-1408

A number of other features were delivered as a result of STEP for 11.0 including:

https://sakaiproject.atlassian.net/browse/SAM-1369

https://sakaiproject.atlassian.net/browse/SAM-1263

https://sakaiproject.atlassian.net/browse/SAM-1596

Documentation is stored with Sakai on Github

For listings of all open issues see:

Blocker Critical Major Minor, trivial