Updated to 5.0.0

Fixes #3774 - Broken dialog whiling uploading oversized attachment

.codeclimate.yml

@@ -1,44 +1,15 @@
 ---
-engines:
-  brakeman:
-    enabled: true
-  bundler-audit:
-    enabled: true
-  csslint:
-    enabled: true
-  coffeelint:
-    enabled: true
-  duplication:
-    enabled: true
-    config:
-      languages:
-      - ruby
-      - javascript
-  eslint:
-    enabled: true
-  fixme:
-    enabled: true
-  phpmd:
-    enabled: false
-  rubocop:
-    enabled: true
-ratings:
-  paths:
-  - Gemfile.lock
-  - "**.erb"
-  - "**.haml"
-  - "**.rb"
-  - "**.rhtml"
-  - "**.slim"
-  - "**.css"
-  - "**.coffee"
-  - "**.inc"
-  - "**.js"
-  - "**.jsx"
-  - "**.module"
-exclude_paths:
-- config/
-- db/
-- script/
-- test/
-- vendor/
+version: "2"
+exclude_patterns:
+  # Bundled thirdparty asset files
+  - "app/assets/javascripts/app/lib/**/*.js"
+  - "config/"
+  - "db/"
+  - "**/node_modules/"
+  - "script/"
+  - "public/assets/"
+  - "**/spec/"
+  - "**/test/"
+  - "**/tests/"
+  - "**/vendor/"
+  - "**/*.d.ts"

.editorconfig

@@ -0,0 +1,12 @@
+# http://editorconfig.org
+root = true
+
+[*]
+indent_style = space
+indent_size = 2
+charset = utf-8
+trim_trailing_whitespace = true
+insert_final_newline = true
+
+[*.md]
+trim_trailing_whitespace = false

.eslintrc

@@ -57,7 +57,7 @@ rules:
   no-case-declarations: 2
   no-div-regex: 2
   no-else-return: 0
-  no-empty-label: 2
+  no-labels: 2
   no-empty-pattern: 2
   no-eq-null: 2
   no-eval: 2
@@ -69,7 +69,6 @@ rules:
   no-implied-eval: 2
   no-invalid-this: 0
   no-iterator: 2
-  no-labels: 0
   no-lone-blocks: 2
   no-loop-func: 2
   no-magic-number: 0

.github/ISSUE_TEMPLATE.md

@@ -1,6 +1,18 @@
 <!--
-Hi there - thanks for filling an issue. Please ensure the following things before creating an issue - thank you! 🤓
+Hi there - thanks for filing an issue. Please ensure the following things before creating an issue - thank you! 🤓
 
+Since november 15th we handle all requests, except real bugs, at our community board.
+Full explanation: https://community.zammad.org/t/major-change-regarding-github-issues-community-board/21
+
+Please post:
+- Feature requests
+- Development questions
+- Technical questions
+
+on the board -> https://community.zammad.org !
+
+
+If you think you hit a bug, please continue:
 - Search existing issues and the CHANGELOG.md for your issue - there might be a solution already
 - Make sure to use the latest version of Zammad if possible
 - Add the `log/production.log` file from your system. Attention: Make sure no confidential data is in it!
@@ -8,30 +20,33 @@ Hi there - thanks for filling an issue. Please ensure the following things befor
 - Don't remove the template - otherwise we will close the issue without further comments
 - Ask questions about Zammad configuration and usage at our mailinglist. See: https://zammad.org/participate
 
-Note: We always do our best. Unfortunately, sometimes the requests are too much and we can't handle everything at once. If you want to prioritize/escalate your issue, you can do so by means of a support contract (see https://zammad.com/pricing#selfhosted).
+Note: We always do our best. Unfortunately, sometimes there are too many requests and we can't handle everything at once. If you want to prioritize/escalate your issue, you can do so by means of a support contract (see https://zammad.com/pricing#selfhosted).
 
 * The upper textblock will be removed automatically when you submit your issue *
 -->
 
 ### Infos:
 
-* Used Zammad version: 
-* Used Zammad installation source: (source, package, ...)
-* Operating system: 
-* Browser + version: 
+* Used Zammad version:
+* Installation method (source, package, ..):
+* Operating system:
+* Database + version:
+* Elasticsearch version:
+* Browser + version:
 
 
 ### Expected behavior:
 
-* 
+*
 
 
 ### Actual behavior:
 
-* 
+*
 
 
 ### Steps to reproduce the behavior:
 
-* 
+*
 
+Yes I'm sure this is a bug and no feature request or a general question.

.github/ci.sh

@@ -0,0 +1,43 @@
+#!/usr/bin/env bash
+#
+# install & unit test zammad
+#
+
+set -o errexit
+set -o pipefail
+
+# install build dependencies
+sudo apt-get update
+sudo apt-get install -y --no-install-recommends autoconf automake autotools-dev bison build-essential curl git-core libffi-dev libgdbm-dev libgmp-dev libmariadbclient-dev-compat libncurses5-dev libreadline-dev libsqlite3-dev libssl-dev libtool libxml2-dev libxslt1-dev libyaml-0-2 libyaml-dev patch pkg-config postfix sqlite3 zlib1g-dev libimlib2 libimlib2-dev
+
+# create db config
+DB_CONFIG="test:\n  adapter: postgresql\n  database: zammad_test\n  host: 127.0.0.1\n  port: DB_PORT\n  pool: 50\n  timeout: 5000\n  encoding: utf8\n  username: DB_USERNAME\n  password: DB_PASSWORD"
+
+if [ "${ZAMMAD_DBS}" == "mysql" ]; then
+  DB_ADAPTER="mysql2"
+  DB_USERNAME="root"
+  DB_PASSWORD="password"
+  DB_PORT="13306"
+  INSTALL_OPTION="postgres"
+elif [ "${ZAMMAD_DBS}" == "postgresql" ]; then
+  DB_ADAPTER="postgresql"
+  DB_USERNAME="postgres"
+  DB_PASSWORD="postgres"
+  DB_PORT="5432"
+  INSTALL_OPTION="mysql"
+fi
+
+echo -e "${DB_CONFIG}" | sed -e "s/adapter: postgresql/adapter: ${DB_ADAPTER}/g" -e "s/DB_USERNAME/${DB_USERNAME}/g" -e "s/DB_PASSWORD/${DB_PASSWORD}/g" -e "s/DB_PORT/${DB_PORT}/g" > config/database.yml
+
+# install zammad
+gem install bundler:1.7.3
+bundle install --without "${INSTALL_OPTION}"
+
+# unit tests
+bundle exec rubocop
+bundle exec rake zammad:db:init
+bundle exec rspec -t ~type:system -t ~searchindex -t ~required_envs
+bundle exec rake zammad:db:reset
+bundle exec rake test:units
+ruby -I test/ test/integration/object_manager_test.rb
+ruby -I test/ test/integration/package_test.rb

.github/docker-image-build.sh

@@ -0,0 +1,39 @@
+#!/usr/bin/env bash
+#
+# build zammads docker & docker-compose images
+
+set -o errexit
+set -o pipefail
+
+DOCKER_REGISTRY="index.docker.io"
+REPO_ROOT="$(git rev-parse --show-toplevel)"
+ZAMMAD_VERSION="$(git describe --tags | sed -e 's/-[a-z0-9]\{8,\}.*//g')"
+
+# dockerhub auth
+echo "${DOCKER_PASSWORD}" | docker login --username="${DOCKER_USERNAME}" --password-stdin
+
+# clone docker repo
+DOCKER_REPOSITORY_CLONE_URL="https://github.com/${REPO_USER}/${DOCKER_GITHUB_REPOSITORY}"
+echo "Cloning ${DOCKER_REPOSITORY_CLONE_URL}"
+git clone "${DOCKER_REPOSITORY_CLONE_URL}"
+
+# enter dockerfile dir
+cd "${REPO_ROOT}/${DOCKER_GITHUB_REPOSITORY}"
+
+# shellcheck disable=SC2153
+for DOCKER_IMAGE in ${DOCKER_IMAGES}; do
+  echo "Build Zammad Docker image ${DOCKER_IMAGE} with version ${ZAMMAD_VERSION} for DockerHubs ${DOCKER_REGISTRY}/${REPO_USER}/${DOCKER_REPOSITORY} repo"
+
+  if [ "${DOCKER_REPOSITORY}" == "zammad-docker-compose" ]; then
+    docker build --pull --no-cache --build-arg BUILD_DATE="$(date -u +'%Y-%m-%dT%H:%M:%SZ')" -t "${DOCKER_REGISTRY}/${REPO_USER}/${DOCKER_REPOSITORY}:${DOCKER_IMAGE}" -t "${DOCKER_REGISTRY}/${REPO_USER}/${DOCKER_REPOSITORY}:${DOCKER_IMAGE}-latest" -t "${DOCKER_REGISTRY}/${REPO_USER}/${DOCKER_REPOSITORY}:${DOCKER_IMAGE}-${ZAMMAD_VERSION}" -f "containers/${DOCKER_IMAGE}/Dockerfile" .
+
+    docker push "${DOCKER_REGISTRY}/${REPO_USER}/${DOCKER_REPOSITORY}:${DOCKER_IMAGE}"
+    docker push "${DOCKER_REGISTRY}/${REPO_USER}/${DOCKER_REPOSITORY}:${DOCKER_IMAGE}-latest"
+    docker push "${DOCKER_REGISTRY}/${REPO_USER}/${DOCKER_REPOSITORY}:${DOCKER_IMAGE}-${ZAMMAD_VERSION}"
+  else
+    docker build --pull --no-cache --build-arg BUILD_DATE="$(date -u +'%Y-%m-%dT%H:%M:%SZ')" -t "${DOCKER_REGISTRY}/${REPO_USER}/${DOCKER_REPOSITORY}:latest" -t "${DOCKER_REGISTRY}/${REPO_USER}/${DOCKER_REPOSITORY}:${ZAMMAD_VERSION}" .
+
+    docker push "${DOCKER_REGISTRY}/${REPO_USER}/${DOCKER_REPOSITORY}:latest"
+    docker push "${DOCKER_REGISTRY}/${REPO_USER}/${DOCKER_REPOSITORY}:${ZAMMAD_VERSION}"
+  fi
+done

.github/workflows/build-docker-compose-images.yaml

@@ -0,0 +1,24 @@
+name: build-docker-compose-images
+
+on:
+  push:
+    branches: [stable**]
+
+jobs:
+  build-docker-compose-images:
+    runs-on: ubuntu-latest
+    env:
+      DOCKER_GITHUB_REPOSITORY: "zammad-docker-compose"
+      DOCKER_IMAGES: "zammad zammad-elasticsearch zammad-postgresql"
+      DOCKER_PASSWORD: ${{ secrets.DOCKER_PASSWORD }}
+      DOCKER_REPOSITORY: "zammad-docker-compose"
+      DOCKER_USERNAME: ${{ secrets.DOCKER_USERNAME }}
+    steps:
+      - name: Extract REPO_USER from GITHUB_REPOSITORY ENV
+        run: echo "REPO_USER=$(echo "$GITHUB_REPOSITORY" | awk -F / '{print $1}')" >> $GITHUB_ENV
+      - name: Checkout code
+        uses: actions/checkout@master
+      - name: Fetch all history for all tags and branches
+        run: git fetch --prune --unshallow
+      - name: Build docker image
+        run: .github/docker-image-build.sh

.github/workflows/build-docker-image.yaml

@@ -0,0 +1,24 @@
+name: build-docker-image
+
+on:
+  push:
+    branches: [develop]
+
+jobs:
+  build-docker-image:
+    runs-on: ubuntu-latest
+    env:
+      DOCKER_GITHUB_REPOSITORY: "zammad-docker"
+      DOCKER_IMAGES: "zammad"
+      DOCKER_PASSWORD: ${{ secrets.DOCKER_PASSWORD }}
+      DOCKER_REPOSITORY: "zammad"
+      DOCKER_USERNAME: ${{ secrets.DOCKER_USERNAME }}
+    steps:
+      - name: Extract REPO_USER from GITHUB_REPOSITORY ENV
+        run: echo "REPO_USER=$(echo "$GITHUB_REPOSITORY" | awk -F / '{print $1}')" >> $GITHUB_ENV
+      - name: Checkout code
+        uses: actions/checkout@master
+      - name: Fetch all history for all tags and branches
+        run: git fetch --prune --unshallow
+      - name: Build docker image
+        run: .github/docker-image-build.sh

.github/workflows/ci.yaml

@@ -0,0 +1,45 @@
+name: ci
+
+on:
+  pull_request
+
+jobs:
+  ci:
+    runs-on: ubuntu-latest
+    services:
+      mysql:
+        image: mysql:5
+        env:
+          MYSQL_ROOT_PASSWORD: password
+        ports:
+        - 13306:3306
+        options: --health-cmd="mysqladmin ping" --health-interval=10s --health-timeout=5s --health-retries=3
+      postgres:
+        image: postgres:11
+        env:
+          POSTGRES_USER: postgres
+          POSTGRES_PASSWORD: postgres
+        ports:
+        - 5432:5432
+        options: --health-cmd pg_isready --health-interval 10s --health-timeout 5s --health-retries 5
+    strategy:
+      matrix:
+        dbs:
+          - mysql
+          - postgresql
+    env:
+      RAILS_ENV: test
+      ZAMMAD_DBS: ${{ matrix.dbs }}
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v1
+      - name: Set up Ruby
+        uses: ruby/setup-ruby@v1
+        with:
+          ruby-version: 2.7.4
+      - name: Increase MySQL max_allowed_packet to 1GB (workaround for unknown/missing service option)
+        run: |
+          sudo apt-get install -y mysql-client
+          mysql --host 127.0.0.1 --port 13306 -uroot -ppassword -e "SET GLOBAL max_allowed_packet=1073741824;"
+      - name: CI
+        run: .github/ci.sh

.github_changelog_generator

@@ -3,8 +3,8 @@ project=zammad
 output=CHANGELOG.md
 since-tag=1.0.0
 bug-labels=bug,minor bug,security
-enhancement-labels=enhancement,feature
+enhancement-labels=enhancement,feature,feature backlog
 issues-wo-labels=false
-include-labels=security,trigger,UX/UI,admin area,API,browser,bug,channel,chat,email filter,enhancement,feature,import,minor bug,notification,email filter,ticket templates,
-issue-line-labels=enhancement,feature,bug,minor bug,notification,reporting,security,ticket templates,translation,trigger,UX/UI
+include-labels=security,trigger,UX/UI,admin area,API,browser,bug,channel,chat,email filter,enhancement,feature,feature backlog,import,minor bug,notification,email filter,ticket templates,
+issue-line-labels=enhancement,feature,feature backlog,bug,minor bug,notification,reporting,security,ticket templates,translation,trigger,UX/UI
 exclude-tags=9.0.1,0.9.1,v0.1.8,v0.1.7,unittests_passed

.gitignore

@@ -4,62 +4,94 @@
 # or operating system, you probably want to add a global ignore instead:
 #   git config --global core.excludesfile ~/.gitignore_global
 
-# Ignore .swp files
-.*.swp
+# Configuration ================================================================
+# These files will differ from one user to another;
+# committing them may cause Zammad to behave unexpectedly on other machines
 
-# Ignore bundler config
-/.bundle
+# Zammad -----------------------------------------------------------------------
 
-# Ignore mac stuff
-.DS_Store
-
-# Ignore Rubymine config
-/.idea
-
-# Ignore .project files
-/.project
-
-# Ignore .rbenv-vars
-/.rbenv-vars
-
-# Ignore database config
+# database (copy from config/database/database.yml, or use `rails bs:init`)
 /config/database.yml
 
-# Ignore translation cache files
+# local backup config file
+/contrib/backup/config
+
+# Dynamic environment config for Gitlab
+/.gitlab/environment.env
+
+# Third-Party ------------------------------------------------------------------
+# The config files / dev tools listed below are optional
+# and may not be present on most users' machines
+
+# Bundler
+/.bundle
+/Gemfile.local
+
+# Clutter ======================================================================
+# These files are automatically generated;
+# in most cases, committing them won't do anything other than bloat the repo
+
+# Zammad -----------------------------------------------------------------------
+
+# database files
+/db/*.sqlite3
+/db/schema.rb
+
+# translation cache files
 /config/locales*.yml
 /config/translations/*.yml
 
-# Ignore coverage stuff
-/coverage
-
-# Ignore the default SQLite database.
-/db/*.sqlite3
-
-# Ignore local changes to schema.rb (e. g. through extentions)
-/db/schema.rb
-
-# Ignore custom gem file
-/Gemfile.local
-
-# Ignore node modules
+# NPM / Yarn
 /node_modules
+/yarn.lock
 
-# Ignore all logfiles and tempfiles.
+# logfiles and tempfiles
 /log
 /public/assets/*.*
+/public/assets/addons
 /public/assets/app
 /public/assets/custom
 /public/assets/chat/node_modules
 /tmp/*
+!/tmp/pids
 /tmp/pids/*
+!/tmp/pids/.keep
 /storage/fs
 
-# except /tmp/pids/ which is needed for certain Zammad processes
-!/tmp
-!/tmp/pids
-!/tmp/pids/.keep
+# doorkeeper (OAuth 2)
+/public/assets/doorkeeper
 
-# exclude the figaro ENV setting helper file - run 'bundle exec figaro install' for creating your own
-# see: https://github.com/laserlemon/figaro
-# Ignore application configuration
-/config/application.yml
+# images
+/public/assets/images/*
+!/public/assets/images/icons/
+!/public/assets/images/avatar-bg.png
+!/public/assets/images/chat-demo-avatar.png
+!/public/assets/images/eyedropper.gif
+!/public/assets/images/icons.svg
+!/public/assets/images/logo.svg
+
+# Third-Party ------------------------------------------------------------------
+
+# macOS
+.DS_Store
+
+# vim
+.*.sw[pon]
+
+# RubyMine
+/.idea
+
+# Eclipse
+/.project
+
+# Byebug
+/.byebug_history
+
+# SimpleCov
+/coverage
+
+# RDoc / YARD
+/doc
+
+# Backup files
+*~

.gitlab/ci/base.yml

@@ -0,0 +1,249 @@
+# Artifacts are stored for failed jobs for 2 days
+.artifacts_error: &artifacts_error
+  artifacts:
+    expire_in: 2 days
+    when: on_failure
+    paths:
+    - tmp/screenshot*
+    - tmp/screenshots/*
+    - log/*.log
+
+.variables_es: &variables_es
+  variables:
+    ES_INDEX_RAND: "true"
+    ES_URL: "http://elasticsearch:9200"
+
+.variables_redis_memcached: &variables_redis_memcached
+  variables:
+    REDIS_URL: "redis://redis:6379"
+    MEMCACHE_SERVERS: "memcached"
+
+.variables_selenium_firefox: &variables_selenium_firefox
+  variables:
+    REMOTE_URL: "http://selenium-firefox:4444/wd/hub"
+    BROWSER: "firefox"
+    # Settings for Selenium 3:
+    NODE_MAX_INSTANCES: "5"
+    NODE_MAX_SESSION: "5"
+
+.variables_selenium_chrome: &variables_selenium_chrome
+  variables:
+    REMOTE_URL: "http://selenium-chrome:4444/wd/hub"
+    BROWSER: chrome
+    # Settings for Selenium 3:
+    NODE_MAX_INSTANCES: "5"
+    NODE_MAX_SESSION: "5"
+
+.variables_app_restart_cmd: &variables_app_restart_cmd
+  variables:
+    APP_RESTART_CMD: "bundle exec rake environment zammad:ci:app:restart"
+
+.variables_rspec_slicing: &variables_rspec_slicing
+  variables:
+    RSPEC_EXAMPLE_MATCHES: "."      # Default: all. Set this to one of the slices in a job to run only that slice.
+    RSPEC_EXAMPLE_SLICE_1_OF_4: "^[A-H]"
+    RSPEC_EXAMPLE_SLICE_2_OF_4: "^[I-P]"
+    RSPEC_EXAMPLE_SLICE_3_OF_4: "^[Q-S]"
+    RSPEC_EXAMPLE_SLICE_4_OF_4: "^[^A-S]" # Rest, including lower case and other characters like '#'
+
+.rules_singletest: &rules_singletest
+  rules:
+    - if: $CI_MERGE_REQUEST_ID
+      when: never
+    - if: '$SINGLETESTNAME && $SINGLETESTNAME == $CI_JOB_NAME'
+      when: always
+    - if: '$SINGLETESTNAME && $SINGLETESTNAME != $CI_JOB_NAME'
+      when: never
+    - if: '$CI_JOB_NAME'
+      when: on_success
+
+# Workaround to enable usage of mixed SSH and Docker GitLab CI runners
+.tags_docker: &tags_docker
+  tags:
+    - docker
+
+# Workaround for blocked port 25 access on cloud provider infrastructure
+.tags_mail: &tags_mail
+  tags:
+    - mail
+
+.env_base: &env_base
+  <<: *tags_docker
+  <<: *artifacts_error
+  <<: *rules_singletest
+
+# DB Docker
+.docker_mysql: &docker_mysql
+  name: registry.znuny.com/docker/zammad-mysql:stable
+  alias: mysql
+
+.docker_postgresql: &docker_postgresql
+  name: registry.znuny.com/docker/zammad-postgresql:stable
+  alias: postgresql
+
+.docker_elasticsearch: &docker_elasticsearch
+  name: registry.znuny.com/docker/zammad-elasticsearch:$ELASTICSEARCH_TAG
+  alias: elasticsearch
+
+.docker_selenium_chrome: &docker_selenium_chrome
+  name: registry.znuny.com/docker/zammad-selenium-chrome:stable
+  alias: selenium-chrome
+
+.docker_selenium_firefox: &docker_selenium_firefox
+  name: registry.znuny.com/docker/zammad-selenium-firefox:stable
+  alias: selenium-firefox
+
+.docker_imap: &docker_imap
+  name: registry.znuny.com/docker/zammad-imap:stable
+  alias: mail
+
+.docker_redis: &docker_redis
+  name: registry.znuny.com/docker/zammad-redis:stable
+  alias: redis
+
+.docker_memcached: &docker_memcached
+  name: registry.znuny.com/docker/zammad-memcached:stable
+  alias: memcached
+  command: ["memcached", "-m", "256M"]
+
+ # service templates
+.services_mysql: &services_mysql
+  services:
+    - <<: *docker_mysql
+
+.services_mysql_redis_memcached: &services_mysql_redis_memcached
+  extends:
+    - .variables_redis_memcached
+  services:
+    - <<: *docker_mysql
+    - <<: *docker_redis
+    - <<: *docker_memcached
+
+.services_postgresql: &services_postgresql
+  services:
+    - <<: *docker_postgresql
+
+.services_postgresql_redis_memcached: &services_postgresql_redis_memcached
+  extends:
+    - .variables_redis_memcached
+  services:
+    - <<: *docker_postgresql
+    - <<: *docker_redis
+    - <<: *docker_memcached
+
+.services_mysql_postgresql: &services_mysql_postgresql
+  services:
+    - <<: *docker_mysql
+    - <<: *docker_postgresql
+
+.services_mysql_postgresql_redis_memcached: &services_mysql_postgresql_redis_memcached
+  extends:
+    - .variables_redis_memcached
+  services:
+    - <<: *docker_mysql
+    - <<: *docker_postgresql
+    - <<: *docker_redis
+    - <<: *docker_memcached
+
+.services_postgresql_selenium_chrome: &services_postgresql_selenium_chrome
+  extends:
+    - .variables_selenium_chrome
+  services:
+    - <<: *docker_postgresql
+    - <<: *docker_selenium_chrome
+
+.services_postgresql_selenium_firefox: &services_postgresql_selenium_firefox
+  extends:
+    - .variables_selenium_firefox
+  services:
+    - <<: *docker_postgresql
+    - <<: *docker_selenium_firefox
+
+.services_mysql_postgresql_imap: &services_mysql_postgresql_imap
+  services:
+    - <<: *docker_mysql
+    - <<: *docker_postgresql
+    - <<: *docker_imap
+
+.services_mysql_postgresql_elasticsearch: &services_mysql_postgresql_elasticsearch
+  variables:
+    ELASTICSEARCH_TAG: 'stable'
+  services:
+    - <<: *docker_mysql
+    - <<: *docker_postgresql
+    - <<: *docker_elasticsearch
+
+.services_mysql_postgresql_elasticsearch_selenium_chrome_imap: &services_mysql_postgresql_elasticsearch_selenium_chrome_imap
+  extends:
+    - .variables_selenium_chrome
+  variables:
+    ELASTICSEARCH_TAG: 'stable'
+  services:
+    - <<: *docker_mysql
+    - <<: *docker_postgresql
+    - <<: *docker_elasticsearch
+    - <<: *docker_selenium_chrome
+    - <<: *docker_imap
+
+.services_mysql_postgresql_elasticsearch_selenium_firefox_imap: &services_mysql_postgresql_elasticsearch_selenium_firefox_imap
+  extends:
+    - .variables_selenium_firefox
+  variables:
+    ELASTICSEARCH_TAG: 'stable'
+  services:
+    - <<: *docker_mysql
+    - <<: *docker_postgresql
+    - <<: *docker_elasticsearch
+    - <<: *docker_selenium_firefox
+    - <<: *docker_imap
+
+.services_mysql_postgresql_elasticsearch_selenium_chrome_imap_redis_memcached: &services_mysql_postgresql_elasticsearch_selenium_chrome_imap_redis_memcached
+  extends:
+    - .variables_selenium_chrome
+    - .variables_redis_memcached
+  variables:
+    ELASTICSEARCH_TAG: 'stable'
+  services:
+    - <<: *docker_mysql
+    - <<: *docker_postgresql
+    - <<: *docker_elasticsearch
+    - <<: *docker_selenium_chrome
+    - <<: *docker_imap
+    - <<: *docker_redis
+    - <<: *docker_memcached
+
+.services_mysql_postgresql_elasticsearch_selenium_firefox_imap_redis_memcached: &services_mysql_postgresql_elasticsearch_selenium_firefox_imap_redis_memcached
+  extends:
+    - .variables_selenium_firefox
+    - .variables_redis_memcached
+  variables:
+    ELASTICSEARCH_TAG: 'stable'
+  services:
+    - <<: *docker_mysql
+    - <<: *docker_postgresql
+    - <<: *docker_elasticsearch
+    - <<: *docker_selenium_firefox
+    - <<: *docker_imap
+    - <<: *docker_redis
+    - <<: *docker_memcached
+
+
+.rules_integration_manual_start: &rules_integration_manual_start
+  rules:
+    - if: $CI_MERGE_REQUEST_ID
+      when: never
+    - if: '$CI_COMMIT_BRANCH =~ /^private/ && $INTEGRATION_TESTS == null'
+      when: manual
+      allow_failure: true
+    - when: on_success
+
+# we need at least one job to store and include this template
+# but we skip this via 'only' -> 'variables' -> '$IGNORE'
+# $IGNORE is not defined
+ignore:
+  stage: test
+  only:
+    variables:
+      - $IGNORE
+  script:
+    - ''

.gitlab/ci/browser-core.yml

@@ -0,0 +1,111 @@
+include:
+
+  # browser-core
+  - local: '/.gitlab/ci/browser-core/build.yml'
+  - local: '/.gitlab/ci/browser-core/autowizard_chrome.yml'
+  - local: '/.gitlab/ci/browser-core/autowizard_ff.yml'
+  - local: '/.gitlab/ci/browser-core/api_client_php.yml'
+  - local: '/.gitlab/ci/browser-core/api_client_ruby.yml'
+  - local: '/.gitlab/ci/browser-core/capybara_chrome.yml'
+  - local: '/.gitlab/ci/browser-core/capybara_ff.yml'
+  - local: '/.gitlab/ci/browser-core/chrome.yml'
+  - local: '/.gitlab/ci/browser-core/firefox.yml'
+
+.template_browser-core: &template_browser-core
+  stage: browser-core
+  dependencies:
+    - browser:build
+  extends:
+    - .env_base
+    - .variables_es
+    - .variables_app_restart_cmd
+  variables:
+    RAILS_ENV: "production"
+  script:
+    - script/build/test_slice_tests.sh $TEST_SLICE
+    - RAILS_ENV=test bundle exec rake db:create
+    - bundle exec rake zammad:ci:test:start[with_elasticsearch]
+    - time bundle exec rails test --fail-fast test/browser
+
+.template_browser-core_chrome: &template_browser-core_chrome
+  extends:
+    - .template_browser-core
+    - .services_mysql_postgresql_elasticsearch_selenium_chrome_imap_redis_memcached
+
+.template_browser-core_firefox: &template_browser-core_firefox
+  extends:
+    - .template_browser-core
+    - .services_mysql_postgresql_elasticsearch_selenium_firefox_imap_redis_memcached
+
+.template_browser-core_autowizard: &template_browser-core_autowizard
+  stage: browser-core
+  dependencies:
+    - browser:build
+  extends:
+    - .env_base
+    - .variables_app_restart_cmd
+  variables:
+    RAILS_ENV: "production"
+    AUTO_WIZARD_FILE: "contrib/auto_wizard_example.json"
+    TEST_FILE: "test/integration/auto_wizard_browser_test.rb"
+  script:
+    - RAILS_ENV=test bundle exec rake db:create
+    - cp $AUTO_WIZARD_FILE auto_wizard.json
+    - bundle exec rake zammad:ci:test:start
+    - bundle exec rails test $TEST_FILE
+
+.template_browser-core_autowizard_chrome: &template_browser-core_autowizard_chrome
+  extends:
+    - .template_browser-core_autowizard
+    - .services_postgresql_selenium_chrome
+
+.template_browser-core_autowizard_firefox: &template_browser-core_autowizard_firefox
+  extends:
+    - .template_browser-core_autowizard
+    - .services_postgresql_selenium_firefox
+
+.template_browser-core_api_client: &template_browser-core_api_client
+  stage: browser-core
+  dependencies:
+    - browser:build
+  extends:
+    - .env_base
+    - .variables_app_restart_cmd
+    - .services_mysql_postgresql_redis_memcached
+  variables:
+    RAILS_ENV: "production"
+
+.template_browser-core_capybara: &template_browser-core_capybara
+  stage: browser-core
+  dependencies:
+    - browser:build
+  extends:
+    - .env_base
+    - .variables_es
+    - .variables_rspec_slicing
+  variables:
+    RAILS_ENV: "test"
+  script:
+    - bundle exec rake zammad:ci:test:prepare
+    - echo "RSpec filter:" "$RSPEC_EXAMPLE_MATCHES"
+    - bundle exec rspec --require ./spec/rspec_extensions.rb --example-matches "$RSPEC_EXAMPLE_MATCHES" --fail-fast -t ~integration --profile 10 spec/system
+
+.template_browser-core_capybara_chrome: &template_browser-core_capybara_chrome
+  extends:
+    - .template_browser-core_capybara
+    - .services_mysql_postgresql_elasticsearch_selenium_chrome_imap_redis_memcached
+
+.template_browser-core_capybara_firefox: &template_browser-core_capybara_firefox
+  extends:
+    - .template_browser-core_capybara
+    - .services_mysql_postgresql_elasticsearch_selenium_firefox_imap_redis_memcached
+
+# we need at least one job to store and include this template
+# $IGNORE is not defined
+ignore:
+  stage: test
+  only:
+    variables:
+      - $IGNORE
+  script:
+    - ''

.gitlab/ci/browser-core/api_client_php.yml

@@ -0,0 +1,17 @@
+api_client_php:
+  extends:
+    - .template_browser-core_api_client
+  variables:
+    ZAMMAD_PHP_API_CLIENT_UNIT_TESTS_URL: "http://localhost:3000"
+    ZAMMAD_PHP_API_CLIENT_UNIT_TESTS_USERNAME: "admin@example.com"
+    ZAMMAD_PHP_API_CLIENT_UNIT_TESTS_PASSWORD: "test"
+  script:
+    - RAILS_ENV=test bundle exec rake db:create
+    - RAILS_ENV=test bundle exec rake zammad:ci:test:start zammad:setup:auto_wizard
+    - git clone https://github.com/zammad/zammad-api-client-php.git
+    - php -r "copy('https://getcomposer.org/installer', 'composer-setup.php');"
+    - php composer-setup.php --install-dir=/usr/local/bin
+    - ln -s /usr/local/bin/composer.phar /usr/local/bin/composer
+    - cd zammad-api-client-php
+    - composer install
+    - vendor/bin/phpunit

.gitlab/ci/browser-core/api_client_ruby.yml

@@ -0,0 +1,12 @@
+api_client_ruby:
+  extends:
+    - .template_browser-core_api_client
+  script:
+    - RAILS_ENV=test bundle exec rake db:create
+    - cp contrib/auto_wizard_test.json auto_wizard.json
+    - bundle exec rake zammad:ci:test:start
+    - git clone https://github.com/zammad/zammad-api-client-ruby.git
+    - cd zammad-api-client-ruby
+    - bundle update --bundler
+    - bundle install -j $(nproc)
+    - bundle exec rspec

.gitlab/ci/browser-core/autowizard_chrome.yml

@@ -0,0 +1,3 @@
+autowizard_chrome:
+  extends:
+    - .template_browser-core_autowizard_chrome

.gitlab/ci/browser-core/autowizard_ff.yml

@@ -0,0 +1,3 @@
+autowizard_ff:
+  extends:
+    - .template_browser-core_autowizard_firefox

.gitlab/ci/browser-core/build.yml

@@ -0,0 +1,17 @@
+browser:build:
+  stage: test
+  extends:
+    - .tags_docker
+    - .services_postgresql
+  artifacts:
+    expire_in: 1 week
+    paths:
+    - public/assets/.sprockets-manifest*
+    - public/assets/application-*
+    - public/assets/knowledge_base*
+    - public/assets/print-*
+  variables:
+    RAILS_ENV: "production"
+  script:
+    - bundle exec rake zammad:db:unseeded
+    - bundle exec rake assets:precompile

.gitlab/ci/browser-core/capybara_chrome.yml

@@ -0,0 +1,23 @@
+capybara:chrome:1:
+  extends:
+    - .template_browser-core_capybara_chrome
+  variables:
+    RSPEC_EXAMPLE_MATCHES: $RSPEC_EXAMPLE_SLICE_1_OF_4
+
+capybara:chrome:2:
+  extends:
+    - .template_browser-core_capybara_chrome
+  variables:
+    RSPEC_EXAMPLE_MATCHES: $RSPEC_EXAMPLE_SLICE_2_OF_4
+
+capybara:chrome:3:
+  extends:
+    - .template_browser-core_capybara_chrome
+  variables:
+    RSPEC_EXAMPLE_MATCHES: $RSPEC_EXAMPLE_SLICE_3_OF_4
+
+capybara:chrome:4:
+  extends:
+    - .template_browser-core_capybara_chrome
+  variables:
+    RSPEC_EXAMPLE_MATCHES: $RSPEC_EXAMPLE_SLICE_4_OF_4

.gitlab/ci/browser-core/capybara_ff.yml

@@ -0,0 +1,23 @@
+capybara:firefox:1:
+  extends:
+    - .template_browser-core_capybara_firefox
+  variables:
+    RSPEC_EXAMPLE_MATCHES: $RSPEC_EXAMPLE_SLICE_1_OF_4
+
+capybara:firefox:2:
+  extends:
+    - .template_browser-core_capybara_firefox
+  variables:
+    RSPEC_EXAMPLE_MATCHES: $RSPEC_EXAMPLE_SLICE_2_OF_4
+
+capybara:firefox:3:
+  extends:
+    - .template_browser-core_capybara_firefox
+  variables:
+    RSPEC_EXAMPLE_MATCHES: $RSPEC_EXAMPLE_SLICE_3_OF_4
+
+capybara:firefox:4:
+  extends:
+    - .template_browser-core_capybara_firefox
+  variables:
+    RSPEC_EXAMPLE_MATCHES: $RSPEC_EXAMPLE_SLICE_4_OF_4

.gitlab/ci/browser-core/chrome.yml

@@ -0,0 +1,35 @@
+1_chrome:
+  extends:
+    - .template_browser-core_chrome
+  variables:
+    TEST_SLICE: "1"
+
+2_chrome:
+  extends:
+    - .template_browser-core_chrome
+  variables:
+    TEST_SLICE: "2"
+
+3_chrome:
+  extends:
+    - .template_browser-core_chrome
+  variables:
+    TEST_SLICE: "3"
+
+4_chrome:
+  extends:
+    - .template_browser-core_chrome
+  variables:
+    TEST_SLICE: "4"
+
+5_chrome:
+  extends:
+    - .template_browser-core_chrome
+  variables:
+    TEST_SLICE: "5"
+
+6_chrome:
+  extends:
+    - .template_browser-core_chrome
+  variables:
+    TEST_SLICE: "6"

.gitlab/ci/browser-core/firefox.yml

@@ -0,0 +1,36 @@
+1_firefox:
+  extends:
+    - .template_browser-core_firefox
+  variables:
+    TEST_SLICE: "1"
+
+2_firefox:
+  extends:
+    - .template_browser-core_firefox
+  variables:
+    TEST_SLICE: "2"
+
+3_firefox:
+  extends:
+    - .template_browser-core_firefox
+    - .tags_mail
+  variables:
+    TEST_SLICE: "3"
+
+4_firefox:
+  extends:
+    - .template_browser-core_firefox
+  variables:
+    TEST_SLICE: "4"
+
+5_firefox:
+  extends:
+    - .template_browser-core_firefox
+  variables:
+    TEST_SLICE: "5"
+
+6_firefox:
+  extends:
+    - .template_browser-core_firefox
+  variables:
+    TEST_SLICE: "6"

.gitlab/ci/browser-integration.yml

@@ -0,0 +1,73 @@
+include:
+
+  # browser-integration
+  - local: '/.gitlab/ci/browser-integration/capybara_chrome.yml'
+  - local: '/.gitlab/ci/browser-integration/capybara_ff.yml'
+  - local: '/.gitlab/ci/browser-integration/idoit_chrome.yml'
+  - local: '/.gitlab/ci/browser-integration/otrs_chrome.yml'
+
+.template_browser-integration_capybara: &template_browser-integration_capybara
+  stage: browser-integration
+  dependencies:
+    - browser:build
+  extends:
+    - .env_base
+    - .variables_app_restart_cmd
+    - .variables_es
+  variables:
+    RAILS_ENV: "test"
+  script:
+    - bundle exec rake zammad:ci:test:prepare
+    - bundle exec rspec --fail-fast --pattern "spec/system/**/*_spec.rb" -t integration --profile 10
+
+.template_browser-integration_capybara_chrome: &template_browser-integration_capybara_chrome
+  extends:
+    - .template_browser-integration_capybara
+    - .services_mysql_postgresql_elasticsearch_selenium_chrome_imap_redis_memcached
+
+.template_browser-integration_capybara_firefox: &template_browser-integration_capybara_firefox
+  extends:
+    - .template_browser-integration_capybara
+    - .services_mysql_postgresql_elasticsearch_selenium_firefox_imap_redis_memcached
+
+.template_browser-integration_chrome: &template_browser-integration_chrome
+  stage: browser-integration
+  dependencies:
+    - browser:build
+  extends:
+    - .env_base
+    - .variables_app_restart_cmd
+    - .services_postgresql_selenium_chrome
+  variables:
+    RAILS_ENV: "production"
+    AUTO_WIZARD_FILE: "contrib/auto_wizard_test.json"
+  script:
+    - RAILS_ENV=test bundle exec rake db:create
+    - cp $AUTO_WIZARD_FILE auto_wizard.json
+    - bundle exec rake zammad:ci:test:start
+    - bundle exec rails test $TEST_FILE
+
+.template_browser-integration_import_chrome: &template_browser-integration_import_chrome
+  stage: browser-integration
+  dependencies:
+    - browser:build
+  extends:
+    - .env_base
+    - .services_postgresql_selenium_chrome
+  variables:
+    RAILS_ENV: "production"
+    RAILS_SERVE_STATIC_FILES: "true"
+  script:
+    - RAILS_ENV=test bundle exec rake db:create
+    - bundle exec rake zammad:ci:test:start
+    - bundle exec rails test $TEST_FILE
+
+# we need at least one job to store and include this template
+# $IGNORE is not defined
+ignore:
+  stage: test
+  only:
+    variables:
+      - $IGNORE
+  script:
+    - ''

.gitlab/ci/browser-integration/capybara_chrome.yml

@@ -0,0 +1,3 @@
+integration_capybara_chrome:
+  extends:
+    - .template_browser-integration_capybara_chrome

.gitlab/ci/browser-integration/capybara_ff.yml

@@ -0,0 +1,3 @@
+integration_capybara_ff:
+  extends:
+    - .template_browser-integration_capybara_firefox

.gitlab/ci/browser-integration/idoit_chrome.yml

@@ -0,0 +1,5 @@
+idoit_chrome:
+  extends:
+    - .template_browser-integration_chrome
+  variables:
+    TEST_FILE: "test/integration/idoit_browser_test.rb"

.gitlab/ci/browser-integration/otrs_chrome.yml

@@ -0,0 +1,17 @@
+otrs_chrome:
+  extends:
+    - .template_browser-integration_import_chrome
+  variables:
+    TEST_FILE: "test/integration/otrs_import_browser_test.rb"
+    FF_NETWORK_PER_BUILD: 1   # https://docs.gitlab.com/runner/configuration/feature-flags.html
+    IMPORT_OTRS_ENDPOINT: "http://zammad-ci-otrsimport-app/otrs/public.pl?Action=ZammadMigrator"
+    TZ: "Europe/Berlin"       # Required for the zammad-ci-otrsimport-app containers
+  services:
+    - name: registry.znuny.com/docker/zammad-postgresql:stable
+      alias: postgresql
+    - name: registry.znuny.com/docker/zammad-selenium-chrome:stable
+      alias: selenium-chrome
+    - name: registry.znuny.com/docker/zammad-ci-otrsimport-db:otrs6
+      alias: zammad-ci-otrsimport-db
+    - name: registry.znuny.com/docker/zammad-ci-otrsimport-app:otrs6
+      alias: zammad-ci-otrsimport-app

.gitlab/ci/integration.yml

@@ -0,0 +1,29 @@
+include:
+  - local: '/.gitlab/ci/integration/clearbit.yml'
+  - local: '/.gitlab/ci/integration/email_helper_deliver.yml'
+  - local: '/.gitlab/ci/integration/es.yml'
+  - local: '/.gitlab/ci/integration/geo.yml'
+  - local: '/.gitlab/ci/integration/otrs.yml'
+  - local: '/.gitlab/ci/integration/slack.yml'
+  - local: '/.gitlab/ci/integration/user_agent.yml'
+
+.template_integration: &template_integration
+  extends:
+    - .env_base
+    - .services_mysql_postgresql
+    - .rules_integration_manual_start
+  tags:
+    - integration
+  stage: test
+  variables:
+    RAILS_ENV: "test"
+
+# we need at least one job to store and include this template
+# $IGNORE is not defined
+ignore:
+  stage: test
+  only:
+    variables:
+      - $IGNORE
+  script:
+    - ''

.gitlab/ci/integration/clearbit.yml

@@ -0,0 +1,7 @@
+clearbit:
+  extends:
+    - .template_integration
+  script:
+    - bundle exec rake zammad:db:unseeded
+    - bundle exec rails test test/integration/clearbit_test.rb
+  allow_failure: true

.gitlab/ci/integration/email_helper_deliver.yml

@@ -0,0 +1,11 @@
+email_helper_deliver:
+  extends:
+    - .template_integration
+    - .tags_mail
+    - .services_mysql_postgresql_imap
+  script:
+    - bundle exec rake zammad:db:unseeded
+    - bundle exec rails test test/integration/email_helper_test.rb
+    - bundle exec rails test test/integration/email_deliver_test.rb
+    - bundle exec rails test test/integration/email_keep_on_server_test.rb
+    - bundle exec rails test test/integration/email_postmaster_to_sender.rb

.gitlab/ci/integration/es.yml

@@ -0,0 +1,26 @@
+.template_integration_es: &template_integration_es
+  extends:
+    - .env_base
+    - .services_mysql_postgresql_elasticsearch
+    - .variables_es
+  stage: test
+  tags:
+    - integration
+  script:
+    - bundle exec rake zammad:db:unseeded
+    - bundle exec rails test test/integration/elasticsearch_active_test.rb
+    - bundle exec rails test test/integration/elasticsearch_test.rb
+    - bundle exec rspec --tag searchindex --tag ~type:system --profile 10
+    - bundle exec rails test test/integration/report_test.rb
+
+es:7:
+  <<: *template_integration_es
+  variables:
+    ELASTICSEARCH_TAG: '7'
+    RAILS_ENV: "test"
+
+es:7.8:
+  <<: *template_integration_es
+  variables:
+    ELASTICSEARCH_TAG: '7.8.1'
+    RAILS_ENV: "test"

.gitlab/ci/integration/geo.yml

@@ -0,0 +1,8 @@
+geo:
+  extends:
+    - .template_integration
+  script:
+    - bundle exec rake zammad:db:unseeded
+    - bundle exec rails test test/integration/geo_calendar_test.rb
+    - bundle exec rails test test/integration/geo_location_test.rb
+    - bundle exec rails test test/integration/geo_ip_test.rb

.gitlab/ci/integration/otrs.yml

@@ -0,0 +1,82 @@
+.template_integration_otrs: &template_integration_otrs
+  extends:
+    - .template_integration
+  script:
+    - bundle exec rake zammad:db:unseeded
+    - bundle exec rails test test/integration/otrs_import_test.rb
+  variables:
+    FF_NETWORK_PER_BUILD: 1   # https://docs.gitlab.com/runner/configuration/feature-flags.html
+    IMPORT_OTRS_ENDPOINT: "http://zammad-ci-otrsimport-app/otrs/public.pl?Action=ZammadMigrator"
+    TZ: "Europe/Berlin"       # Required for the zammad-ci-otrsimport-app containers
+
+otrs:6:
+  <<: *template_integration_otrs
+  services:
+    - name: registry.znuny.com/docker/zammad-mysql:stable
+      alias: mysql
+    - name: registry.znuny.com/docker/zammad-postgresql:stable
+      alias: postgresql
+    - name: registry.znuny.com/docker/zammad-ci-otrsimport-db:otrs6
+      alias: zammad-ci-otrsimport-db
+    - name: registry.znuny.com/docker/zammad-ci-otrsimport-app:otrs6
+      alias: zammad-ci-otrsimport-app
+
+otrs:5:
+  <<: *template_integration_otrs
+  services:
+    - name: registry.znuny.com/docker/zammad-mysql:stable
+      alias: mysql
+    - name: registry.znuny.com/docker/zammad-postgresql:stable
+      alias: postgresql
+    - name: registry.znuny.com/docker/zammad-ci-otrsimport-db:otrs5
+      alias: zammad-ci-otrsimport-db
+    - name: registry.znuny.com/docker/zammad-ci-otrsimport-app:otrs5
+      alias: zammad-ci-otrsimport-app
+
+otrs:4:
+  <<: *template_integration_otrs
+  services:
+    - name: registry.znuny.com/docker/zammad-mysql:stable
+      alias: mysql
+    - name: registry.znuny.com/docker/zammad-postgresql:stable
+      alias: postgresql
+    - name: registry.znuny.com/docker/zammad-ci-otrsimport-db:otrs4
+      alias: zammad-ci-otrsimport-db
+    - name: registry.znuny.com/docker/zammad-ci-otrsimport-app:otrs4
+      alias: zammad-ci-otrsimport-app
+
+otrs:33:
+  <<: *template_integration_otrs
+  services:
+    - name: registry.znuny.com/docker/zammad-mysql:stable
+      alias: mysql
+    - name: registry.znuny.com/docker/zammad-postgresql:stable
+      alias: postgresql
+    - name: registry.znuny.com/docker/zammad-ci-otrsimport-db:otrs33
+      alias: zammad-ci-otrsimport-db
+    - name: registry.znuny.com/docker/zammad-ci-otrsimport-app:otrs33
+      alias: zammad-ci-otrsimport-app
+
+otrs:32:
+  <<: *template_integration_otrs
+  services:
+    - name: registry.znuny.com/docker/zammad-mysql:stable
+      alias: mysql
+    - name: registry.znuny.com/docker/zammad-postgresql:stable
+      alias: postgresql
+    - name: registry.znuny.com/docker/zammad-ci-otrsimport-db:otrs32
+      alias: zammad-ci-otrsimport-db
+    - name: registry.znuny.com/docker/zammad-ci-otrsimport-app:otrs32
+      alias: zammad-ci-otrsimport-app
+
+otrs:31:
+  <<: *template_integration_otrs
+  services:
+    - name: registry.znuny.com/docker/zammad-mysql:stable
+      alias: mysql
+    - name: registry.znuny.com/docker/zammad-postgresql:stable
+      alias: postgresql
+    - name: registry.znuny.com/docker/zammad-ci-otrsimport-db:otrs31
+      alias: zammad-ci-otrsimport-db
+    - name: registry.znuny.com/docker/zammad-ci-otrsimport-app:otrs31
+      alias: zammad-ci-otrsimport-app

.gitlab/ci/integration/slack.yml

@@ -0,0 +1,13 @@
+slack:
+  extends:
+    - .template_integration
+  rules:
+    - if: $CI_MERGE_REQUEST_ID
+      when: never
+    - if: '$CI_COMMIT_BRANCH =~ /^private/'
+      when: manual
+      allow_failure: true
+    - when: on_success
+  script:
+    - bundle exec rake zammad:db:unseeded
+    - bundle exec rails test test/integration/slack_test.rb

.gitlab/ci/integration/user_agent.yml

@@ -0,0 +1,8 @@
+user_agent:
+  extends:
+    - .template_integration
+  script:
+    - bundle exec rake zammad:db:unseeded
+    - bundle exec rails test test/integration/user_agent_test.rb
+    - export ZAMMAD_PROXY_TEST=true
+    - bundle exec rails test test/integration/user_agent_test.rb

.gitlab/ci/pre.yml

@@ -0,0 +1,90 @@
+# Workaround to enable usage of mixed SSH and Docker GitLab CI runners
+.template_pre: &template_pre
+  stage: pre
+  extends:
+    - .tags_docker
+    - .rules_singletest
+  before_script:
+    - source /etc/profile.d/rvm.sh # ensure RVM is loaded
+    - source /opt/rh/rh-nodejs12/enable # ensure Node.js is available
+
+rubocop:
+  <<: *template_pre
+  script:
+    - bundle install -j $(nproc) --path vendor
+    - bundle exec rubocop --parallel
+
+shellcheck:
+  <<: *template_pre
+  image: koalaman/shellcheck-alpine:stable
+  before_script:
+    - echo "Disable default before_script."
+  script:
+    - shellcheck -S warning $(find . -name "*.sh" -o -name "functions" | grep -v "/vendor/")
+
+zeitwerk_check:
+  <<: *template_pre
+  extends:
+    - .tags_docker
+    - .services_postgresql
+  script:
+    - bundle install -j $(nproc) --path vendor
+    - bundle exec ruby .gitlab/configure_environment.rb
+    - source .gitlab/environment.env
+    - bundle exec rake zammad:db:init
+    - bundle exec rails zeitwerk:check
+
+brakeman:
+  <<: *template_pre
+  artifacts:
+    expire_in: 1 week
+    paths:
+    - tmp/brakeman-report.html
+    when: on_failure
+  script:
+    - bundle install -j $(nproc) --path vendor
+    - bundle exec brakeman -o /dev/stdout -o tmp/brakeman-report.html
+
+coffeelint:
+  <<: *template_pre
+  script:
+    - coffeelint app/
+
+bundle-audit:
+  <<: *template_pre
+  script:
+    - gem install bundler-audit
+    - bundle-audit update
+    - bundle-audit --ignore CVE-2015-9284
+
+github:
+  <<: *template_pre
+  tags:
+    - deploy
+  before_script:
+    - "" # no RVM present in deploy ENV
+  script:
+    - script/build/sync_repo.sh git@github.com:zammad/zammad.git
+
+global_refresh_envs:
+  extends:
+    - .tags_docker
+    - .services_postgresql
+  stage: pre
+  # ensure that only one Job runs in the whole project (branches etc.)
+  resource_group: global_refresh_envs
+  # allow download via the web UI to restore ENVs in case global cache got deleted (see: `.gitlab-ci.yml`)
+  artifacts:
+    expire_in: 1 day
+    paths:
+    - fresh.env
+  rules:
+    - if: $CI_MERGE_REQUEST_ID
+      when: never
+    - if: '$CI_COMMIT_BRANCH =~ /^private/'
+      when: manual
+      allow_failure: true
+    - when: on_success
+
+  script:
+    - bundle exec rake zammad:ci:refresh_envs

.gitlab/ci/rspec.yml

@@ -0,0 +1,35 @@
+include:
+  - local: '/.gitlab/ci/rspec/mysql.yml'
+  - local: '/.gitlab/ci/rspec/postgresql.yml'
+
+.template_rspec: &template_rspec
+  extends:
+    - .env_base
+    - .variables_rspec_slicing
+  script:
+    - bundle exec rake zammad:db:init
+    - echo "RSpec filter:" "$RSPEC_EXAMPLE_MATCHES"
+    - bundle exec rspec --require ./spec/rspec_extensions.rb --example-matches "$RSPEC_EXAMPLE_MATCHES" --exclude-pattern "spec/{system,integration}/**/*_spec.rb" -t ~searchindex --profile 10
+
+# RSpec 3rd party integration tests are independent of the database
+# therefore we need only one job and choose a random database for each run
+# Optionally pass INTEGRATION_TESTS=enabled to run them in private- branch
+
+rspec:integration:
+  stage: test
+  extends:
+    - .env_base
+    - .services_mysql_postgresql_redis_memcached
+    - .rules_integration_manual_start
+  variables:
+    RAILS_ENV: "test"
+  rules:
+    - if: $CI_MERGE_REQUEST_ID
+      when: never
+    - if: '$CI_COMMIT_BRANCH =~ /^private/ && $INTEGRATION_TESTS != "enabled"'
+      when: manual
+      allow_failure: true
+    - when: always
+  script:
+    - bundle exec rake zammad:db:init
+    - bundle exec rspec -t type:integration --profile 10

.gitlab/ci/rspec/mysql.yml

@@ -0,0 +1,31 @@
+rspec:mysql:1:
+  stage: test
+  variables:
+    RSPEC_EXAMPLE_MATCHES: $RSPEC_EXAMPLE_SLICE_1_OF_4
+  extends:
+    - .services_mysql_redis_memcached
+    - .template_rspec
+
+rspec:mysql:2:
+  stage: test
+  variables:
+    RSPEC_EXAMPLE_MATCHES: $RSPEC_EXAMPLE_SLICE_2_OF_4
+  extends:
+    - .services_mysql_redis_memcached
+    - .template_rspec
+
+rspec:mysql:3:
+  stage: test
+  variables:
+    RSPEC_EXAMPLE_MATCHES: $RSPEC_EXAMPLE_SLICE_3_OF_4
+  extends:
+    - .services_mysql_redis_memcached
+    - .template_rspec
+
+rspec:mysql:4:
+  stage: test
+  variables:
+    RSPEC_EXAMPLE_MATCHES: $RSPEC_EXAMPLE_SLICE_4_OF_4
+  extends:
+    - .services_mysql_redis_memcached
+    - .template_rspec

.gitlab/ci/rspec/postgresql.yml

@@ -0,0 +1,31 @@
+rspec:postgresql:1:
+  stage: test
+  variables:
+    RSPEC_EXAMPLE_MATCHES: $RSPEC_EXAMPLE_SLICE_1_OF_4
+  extends:
+    - .services_postgresql_redis_memcached
+    - .template_rspec
+
+rspec:postgresql:2:
+  stage: test
+  variables:
+    RSPEC_EXAMPLE_MATCHES: $RSPEC_EXAMPLE_SLICE_2_OF_4
+  extends:
+    - .services_postgresql_redis_memcached
+    - .template_rspec
+
+rspec:postgresql:3:
+  stage: test
+  variables:
+    RSPEC_EXAMPLE_MATCHES: $RSPEC_EXAMPLE_SLICE_3_OF_4
+  extends:
+    - .services_postgresql_redis_memcached
+    - .template_rspec
+
+rspec:postgresql:4:
+  stage: test
+  variables:
+    RSPEC_EXAMPLE_MATCHES: $RSPEC_EXAMPLE_SLICE_4_OF_4
+  extends:
+    - .services_postgresql_redis_memcached
+    - .template_rspec

.gitlab/ci/unit.yml

@@ -0,0 +1,24 @@
+include:
+  - local: '/.gitlab/ci/unit/mysql.yml'
+  - local: '/.gitlab/ci/unit/postgresql.yml'
+
+.template_unit: &template_unit
+  extends:
+    - .env_base
+  variables:
+    RAILS_ENV: "test"
+  script:
+    - bundle exec rake zammad:db:init
+    - bundle exec rake test:units
+    - bundle exec rails test test/integration/object_manager_test.rb
+    - bundle exec rails test test/integration/package_test.rb
+
+# we need at least one job to store and include this template
+# $IGNORE is not defined
+ignore:
+  stage: test
+  only:
+    variables:
+      - $IGNORE
+  script:
+    - ''

.gitlab/ci/unit/mysql.yml

@@ -0,0 +1,5 @@
+unit:mysql:
+  stage: test
+  extends:
+    - .services_mysql_redis_memcached
+    - .template_unit

.gitlab/ci/unit/postgresql.yml

@@ -0,0 +1,5 @@
+unit:postgresql:
+  stage: test
+  extends:
+    - .services_postgresql_redis_memcached
+    - .template_unit

.gitlab/configure_environment.rb

@@ -0,0 +1,125 @@
+#!/usr/bin/env ruby
+# Copyright (C) 2012-2021 Zammad Foundation, http://zammad-foundation.org/
+
+require 'yaml'
+require 'resolv'
+
+#
+# Configures the CI system
+#   - either (randomly) mysql or postgresql, if it is available
+#   - (randomly) Redis or File as web socket session back end, if Redis is available
+#
+# Database config happens directly in config/database.yml, other settings are written to
+#   .gitlab/environment.env which must be sourced in the CI configuration.
+#
+
+class ConfigureEnvironment
+
+  @env_file_content = <<~ENV_FILE_CONTENT
+    #!/bin/bash
+    FRESHENVFILE=fresh.env && test -f $FRESHENVFILE && source $FRESHENVFILE
+    true
+  ENV_FILE_CONTENT
+
+  def self.configure_redis
+    if ENV['REDIS_URL'].nil? || ENV['REDIS_URL'].empty? # rubocop:disable Rails/Blank
+      puts 'Redis is not available, using File as web socket session store.'
+      return
+    end
+    if [true, false].sample
+      puts 'Using Redis as web socket session store.'
+      return
+    end
+    puts 'Using File as web socket session store.'
+    @env_file_content += "unset REDIS_URL\n"
+  end
+
+  def self.configure_memcached
+    if ENV['MEMCACHE_SERVERS'].nil? || ENV['MEMCACHE_SERVERS'].empty? # rubocop:disable Rails/Blank
+      puts 'Memcached is not available, using File as Rails cache store.'
+      return
+    end
+    if [true, false].sample
+      puts 'Using memcached as Rails cache store.'
+      return
+    end
+    puts "Using Zammad's file store as Rails cache store."
+    @env_file_content += "unset MEMCACHE_SERVERS\n"
+  end
+
+  def self.configure_database # rubocop:disable Metrics/AbcSize, Metrics/CyclomaticComplexity, Metrics/PerceivedComplexity
+
+    if File.exist? File.join(__dir__, '../config/database.yml')
+      puts "'config/database.yml' already exists and will not be changed."
+      return
+    end
+
+    cnf = YAML.load_file(File.join(__dir__, '../config/database/database.yml'))
+    cnf.delete('default')
+
+    database = ENV['ENFORCE_DB_SERVICE']
+
+    # Lookup in /etc/hosts first: gitlab uses that if FF_NETWORK_PER_BUILD is not set.
+    if !database
+      hostsfile = '/etc/hosts'
+      database  = %w[postgresql mysql].shuffle.find do |possible_database|
+        File.foreach(hostsfile).any? { |l| l[possible_database] }
+      end
+    end
+
+    # Lookup via DNS if needed: gitlab uses that if FF_NETWORK_PER_BUILD is enabled.
+    if !database
+      dns = Resolv::DNS.new
+      dns.timeouts = 3
+      database = %w[postgresql mysql].shuffle.find do |possible_database|
+        # Perform a lookup of the database host to check if it is configured as a service.
+        if dns.getaddress possible_database
+          next possible_database
+        end
+      rescue Resolv::ResolvError
+        # Ignore DNS lookup errors
+      end
+    end
+
+    raise "Can't find any supported database." if database.nil?
+
+    puts "Using #{database} as database service."
+
+    db_settings_map = {
+      'postgresql' => {
+        'adapter'  => 'postgresql',
+        'username' => 'zammad',
+        'password' => 'zammad',
+        'host'     => 'postgresql', # db alias from gitlab-ci.yml
+      },
+      'mysql'      => {
+        'adapter'  => 'mysql2',
+        'username' => 'root',
+        'password' => 'zammad',
+        'host'     => 'mysql', # db alias from gitlab-ci.yml
+      }
+    }
+
+    # fetch DB settings from settings map and fallback to postgresql
+    db_settings = db_settings_map.fetch(database) { db_settings_map['postgresql'] }
+
+    %w[development test production].each do |environment|
+      cnf[environment].merge!(db_settings)
+    end
+
+    File.write(File.join(__dir__, '../config/database.yml'), Psych.dump(cnf))
+  end
+
+  def self.write_env_file
+    File.write(File.join(__dir__, 'environment.env'), @env_file_content)
+  end
+
+  def self.run
+    configure_redis
+    configure_memcached
+    configure_database
+    write_env_file
+  end
+end
+
+ConfigureEnvironment.run

.gitlab/dependabot.yml

@@ -0,0 +1,17 @@
+version: 2
+updates:
+  - package-ecosystem: "bundler"
+    directory: "/"
+    schedule:
+      interval: "daily"
+    # Only create pull requests to update lockfiles. Ignore any new versions that would require package manifest changes.
+    versioning-strategy: lockfile-only
+    open-pull-requests-limit: 5
+    pull-request-branch-name:
+      separator: "/"
+    commit-message:
+      prefix: "Maintenance:"
+    assignees:
+      - mg
+    reviewers:
+      - mg

.gitlab/merge_request_templates/Default.md

@@ -0,0 +1,66 @@
+## What does this MR do?
+
+<!-- Is there a lot to say? Consider creating an issue. -->
+
+## Screenshots  <!-- Optional -->
+
+### Before
+
+![alt text](https://example.com/before.png)
+
+### After
+
+![alt text](https://example.com/after.png)
+
+## Notes
+
+* This MR
+  **does**  <!-- KEEP ONLY ONE -->
+  does not  <!-- OF THESE LINES -->
+  change more than 3 files / 100 lines of code.
+
+  <!-- If so, what’s the connection? Or, could you split it into multiple MRs? -->
+
+* This MR
+  **does**  <!-- KEEP ONLY ONE -->
+  does not  <!-- OF THESE LINES -->
+  introduce new methods.
+
+  <!-- If so, are they tested? -->
+
+* This MR
+  **does**  <!-- KEEP ONLY ONE -->
+  does not  <!-- OF THESE LINES -->
+  modify or remove existing methods.
+
+  <!-- If so, did you modify/remove their tests, as well? -->
+
+* This MR
+  **does**  <!-- KEEP ONLY ONE -->
+  does not  <!-- OF THESE LINES -->
+  add to, modify, or remove existing test cases.
+
+  <!-- If so, explain. -->
+
+### Performance Impact  <!-- Optional -->
+
+<!--
+Does your MR optimize (or degrade) performance?
+If so, apply the label and explain here.
+
+Consider that some of OTRS’s customers had
+HUNDREDS of agents, overviews, and groups,
+over 2,000 tickets a day,
+and over 20,000,000 (!) tickets in all.
+How do your performance changes scale on a system of this size?
+
+(Remember, these are not edge cases we can ignore;
+they are really big customers, and we want to keep their business!)
+-->
+
+### Follow-up Required  <!-- Optional -->
+
+<!--
+Does your MR require coordination with the documentation/support teams?
+If so, apply the label and explain here.
+-->

.overcommit.yml

@@ -0,0 +1,44 @@
+CommitMsg:
+  ALL:
+    enabled: false
+  EmptyMessage:
+    enabled: true
+
+PreCommit:
+  ALL:
+    enabled: false
+  RuboCop:
+    enabled: true
+    on_warn: fail # Treat all warnings as failures
+  CoffeeLint:
+    enabled: true
+    on_warn: fail # Treat all warnings as failures
+
+PostCheckout:
+  ALL:
+    enabled: false
+
+PostCommit:
+  ALL:
+    enabled: false
+
+PostMerge:
+  ALL:
+    enabled: false
+
+PostRewrite:
+  ALL:
+    enabled: false
+
+PrePush:
+  ALL:
+    enabled: false
+
+PreRebase:
+  ALL:
+    enabled: false
+
+PrepareCommitMsg:
+  ALL:
+    enabled: false
+

.pkgr.yml

@@ -5,36 +5,109 @@ notifications: false
 targets:
   centos-7:
     dependencies:
+      - curl
+      - elasticsearch
+      - nginx
+      # Only CentOS 7 has the old PostgreSQL 9.2, so explicitly require 9.3 here.
+      - "postgresql-server >= 9.3"
+      - which
+      - epel-release
+      - imlib2
+      - shared-mime-info
+    build_dependencies:
+      - http://download.fedoraproject.org/pub/epel/7/x86_64/Packages/i/imlib2-1.4.5-9.el7.x86_64.rpm
+      - http://download.fedoraproject.org/pub/epel/7/x86_64/Packages/i/imlib2-devel-1.4.5-9.el7.x86_64.rpm
+      - shared-mime-info
+  centos-8:
+    dependencies:
+      - curl
       - elasticsearch
       - nginx
       - postgresql-server
       - which
-  debian-8:
-    dependencies:
-      - elasticsearch
-      - nginx|apache2
-      - postgresql|mysql-server|mariadb-server|sqlite
+      - epel-release
+      - imlib2
+      - shared-mime-info
+    build_dependencies:
+      - http://download.fedoraproject.org/pub/epel/8/Everything/x86_64/Packages/i/imlib2-1.4.9-8.el8.x86_64.rpm
+      - http://download.fedoraproject.org/pub/epel/8/Everything/x86_64/Packages/i/imlib2-devel-1.4.9-8.el8.x86_64.rpm
+      - shared-mime-info
   debian-9:
     dependencies:
-      - elasticsearch
+      - curl
+      - elasticsearch|elasticsearch-oss
       - nginx|apache2
-      - postgresql|mariadb-server|sqlite      
+      - postgresql|mariadb-server
+      - libimlib2
+      - shared-mime-info
+    build_dependencies:
+      - libimlib2
+      - libimlib2-dev
+      - shared-mime-info
+  debian-10:
+    dependencies:
+      - curl
+      - elasticsearch|elasticsearch-oss
+      - nginx|apache2
+      - postgresql|mariadb-server
+      - libimlib2
+      - shared-mime-info
+    build_dependencies:
+      - libimlib2
+      - libimlib2-dev
+      - shared-mime-info
   ubuntu-16.04:
     dependencies:
-      - elasticsearch
+      - curl
+      - elasticsearch|elasticsearch-oss
       - nginx|apache2
-      - postgresql|mysql-server|mariadb-server|sqlite
+      - postgresql|mysql-server|mariadb-server
+      - libimlib2
+      - shared-mime-info
+    build_dependencies:
+      - libimlib2
+      - libimlib2-dev
+      - shared-mime-info
+  ubuntu-18.04:
+    dependencies:
+      - curl
+      - elasticsearch|elasticsearch-oss
+      - nginx|apache2
+      - postgresql|mysql-server|mariadb-server
+      - libimlib2
+      - shared-mime-info
+    build_dependencies:
+      - libimlib2
+      - libimlib2-dev
+      - shared-mime-info
+  ubuntu-20.04:
+    dependencies:
+      - curl
+      - elasticsearch|elasticsearch-oss
+      - nginx|apache2
+      - postgresql|mysql-server|mariadb-server
+      - libimlib2
+      - shared-mime-info
+    build_dependencies:
+      - libimlib2
+      - libimlib2-dev
+      - shared-mime-info
   sles-12:
     dependencies:
+      - curl
       - elasticsearch
       - nginx
       - postgresql-server
+      - libImlib2-1
+      - imlib2
+    build_dependencies:
+      - https://ftp.gwdg.de/pub/opensuse/discontinued/distribution/12.3/repo/oss/suse/x86_64/imlib2-1.4.5-12.1.1.x86_64.rpm
+      - https://ftp.gwdg.de/pub/opensuse/discontinued/distribution/12.3/repo/oss/suse/x86_64/imlib2-devel-1.4.5-12.1.1.x86_64.rpm
+      - https://ftp.gwdg.de/pub/opensuse/discontinued/distribution/12.3/repo/oss/suse/x86_64/imlib2-filters-1.4.5-12.1.1.x86_64.rpm
+      - https://ftp.gwdg.de/pub/opensuse/discontinued/distribution/12.3/repo/oss/suse/x86_64/libImlib2-1-1.4.5-12.1.1.x86_64.rpm
+      - shared-mime-info
 before:
-  - uname -a
-  - ruby -v
-  - env
-  - "cat Gemfile.lock"
-  - contrib/cleanup.sh
+  - contrib/packager.io/before.sh
 after:
   - contrib/packager.io/after.sh
 env:
@@ -43,5 +116,6 @@ env:
   - ZAMMAD_RAILS_PORT=3000
   - ZAMMAD_WEBSOCKET_PORT=6042
 services:
-  - postgres
+  - postgres:13
+before_install: contrib/packager.io/preinstall.sh
 after_install: contrib/packager.io/postinstall.sh

.rubocop.yml

@@ -1,218 +1,5 @@
-# Default enabled cops
-# https://github.com/bbatsov/rubocop/blob/master/config/enabled.yml
-
-AllCops:
-  Exclude:
-    - 'bin/rails'
-    - 'bin/rake'
-    - 'bin/spring'
-    - 'db/schema.rb'
-
-Rails:
-  Enabled: true
-
-# Zammad StyleGuide
-
-Style/FrozenStringLiteralComment:
-  Enabled: false
-
-Metrics/LineLength:
-  Description: 'Limit lines to 80 characters.'
-  StyleGuide: 'https://github.com/bbatsov/ruby-style-guide#80-character-limits'
-  Enabled: false
-
-Style/NegatedIf:
-  Description: >-
-                 Favor unless over if for negative conditions
-                 (or control flow or).
-  StyleGuide: 'https://github.com/bbatsov/ruby-style-guide#unless-for-negatives'
-  Enabled: false
-
-Style/IfUnlessModifier:
-  Description: >-
-                 Favor modifier if/unless usage when you have a
-                 single-line body.
-  StyleGuide: 'https://github.com/bbatsov/ruby-style-guide#if-as-a-modifier'
-  Enabled: false
-
-Style/TrailingCommaInLiteral:
-  Description: 'Checks for trailing comma in array and hash literals.'
-  StyleGuide: 'https://github.com/bbatsov/ruby-style-guide#no-trailing-array-commas'
-  Enabled: false
-
-Style/TrailingCommaInArguments:
-  Description: 'Checks for trailing comma in argument lists.'
-  StyleGuide: 'https://github.com/bbatsov/ruby-style-guide#no-trailing-array-commas'
-  Enabled: false
-
-Style/SpaceInsideParens:
-  Description: 'No spaces after ( or before ).'
-  StyleGuide: 'https://github.com/bbatsov/ruby-style-guide#no-spaces-braces'
-  Enabled: false
-
-Style/SpaceAfterMethodName:
-  Description: >-
-                 Do not put a space between a method name and the opening
-                 parenthesis in a method definition.
-  StyleGuide: 'https://github.com/bbatsov/ruby-style-guide#parens-no-spaces'
-  Enabled: false
-
-Style/LeadingCommentSpace:
-  Description: 'Comments should start with a space.'
-  StyleGuide: 'https://github.com/bbatsov/ruby-style-guide#hash-space'
-  Enabled: false
-
-Style/MethodCallParentheses:
-  Description: 'Do not use parentheses for method calls with no arguments.'
-  StyleGuide: 'https://github.com/bbatsov/ruby-style-guide#no-args-no-parens'
-  Enabled: false
-
-Style/SpaceInsideBrackets:
-  Description: 'No spaces after [ or before ].'
-  StyleGuide: 'https://github.com/bbatsov/ruby-style-guide#no-spaces-braces'
-  Enabled: false
-
-Style/DefWithParentheses:
-  Description: 'Use def with parentheses when there are arguments.'
-  StyleGuide: 'https://github.com/bbatsov/ruby-style-guide#method-parens'
-  Enabled: false
-Style/MethodDefParentheses:
-  Description: >-
-                 Checks if the method definitions have or don't have
-                 parentheses.
-  StyleGuide: 'https://github.com/bbatsov/ruby-style-guide#method-parens'
-  Enabled: false
-
-Style/EmptyLinesAroundClassBody:
-  Description: "Keeps track of empty lines around class bodies."
-  Enabled: false
-
-Style/EmptyLinesAroundMethodBody:
-  Description: "Keeps track of empty lines around method bodies."
-  Enabled: false
-
-Style/EmptyLinesAroundBlockBody:
-  Description: "Keeps track of empty lines around block bodies."
-  Enabled: false
-
-Style/EmptyLinesAroundModuleBody:
-  Description: "Keeps track of empty lines around module bodies."
-  Enabled: false
-
-Style/MultilineBlockChain:
-  Description: 'Avoid multi-line chains of blocks.'
-  StyleGuide: 'https://github.com/bbatsov/ruby-style-guide#single-line-blocks'
-  Enabled: false
-
-Metrics/ClassLength:
-  Description: 'Avoid classes longer than 100 lines of code.'
-  Enabled: false
-
-Metrics/MethodLength:
-  Description: 'Avoid methods longer than 10 lines of code.'
-  StyleGuide: 'https://github.com/bbatsov/ruby-style-guide#short-methods'
-  Enabled: false
-
-Style/BlockComments:
-  Description: 'Do not use block comments.'
-  StyleGuide: 'https://github.com/bbatsov/ruby-style-guide#no-block-comments'
-  Enabled: false
-
-Style/PerlBackrefs:
-  Description: 'Avoid Perl-style regex back references.'
-  StyleGuide: 'https://github.com/bbatsov/ruby-style-guide#no-perl-regexp-last-matchers'
-  Enabled: false
-
-Style/SelfAssignment:
-  Description: >-
-                 Checks for places where self-assignment shorthand should have
-                 been used.
-  StyleGuide: 'https://github.com/bbatsov/ruby-style-guide#self-assignment'
-  Enabled: false
-
-Style/BracesAroundHashParameters:
-  Description: 'Enforce braces style around hash parameters.'
-  Enabled: false
-
-Rails/FindEach:
-  Description: 'Prefer all.find_each over all.find.'
-  Enabled: false
-
-Rails/HasAndBelongsToMany:
-  Description: 'Prefer has_many :through to has_and_belongs_to_many.'
-#  StyleGuide: 'https://github.com/bbatsov/rails-style-guide#has-many-through'
-  Enabled: false
-
-Style/ClassAndModuleChildren:
-  Description: 'Checks style of children classes and modules.'
-  Enabled: false
-
-Style/FileName:
-  Description: 'Use snake_case for source file names.'
-  StyleGuide: 'https://github.com/bbatsov/ruby-style-guide#snake-case-files'
-  Enabled: true
-  Exclude:
-    - 'script/websocket-server.rb'
-
-
-# 2.0
-
-Metrics/PerceivedComplexity:
-  Description: >-
-                 A complexity metric geared towards measuring complexity for a
-                 human reader.
-  Enabled: false
-
-Metrics/AbcSize:
-  Description: >-
-                 A calculated magnitude based on number of assignments,
-                 branches, and conditions.
-  Enabled: false
-
-Metrics/CyclomaticComplexity:
-  Description: >-
-                 A complexity metric that is strongly correlated to the number
-                 of test cases needed to validate a method.
-  Enabled: false
-
-Metrics/BlockNesting:
-  Description: 'Avoid excessive block nesting'
-  StyleGuide: 'https://github.com/bbatsov/ruby-style-guide#three-is-the-number-thou-shalt-count'
-  Enabled: false
-
-Metrics/ModuleLength:
-  Description: 'Avoid modules longer than 100 lines of code.'
-  Enabled: false
-
-# TODO
-
-Style/Documentation:
-  Description: 'Document classes and non-namespace modules.'
-  Enabled: false
-
-Lint/UselessAssignment:
-  Enabled: false
-
-Style/ExtraSpacing:
-  Description: 'Do not use unnecessary spacing.'
-  Enabled: false
-
-# Broken!!!! Generates broken code since "String".downcase == "strinG".downcase is not equals "String".casecmp("strinG") but "String".casecmp("strinG") == 0 !!!
-Performance/Casecmp:
-  Description: 'Use `casecmp` rather than `downcase ==`.'
-  Reference: 'https://github.com/JuanitoFatas/fast-ruby#stringcasecmp-vs-stringdowncase---code'
-  Enabled: false
-
-# RSpec tests
-Style/NumericPredicate:
-  Description: >-
-                 Checks for the use of predicate- or comparison methods for
-                 numeric comparisons.
-  StyleGuide: '#predicate-methods'
-  # This will change to a new method call which isn't guaranteed to be on the
-  # object. Switching these methods has to be done with knowledge of the types
-  # of the variables which rubocop doesn't have.
-  AutoCorrect: false
-  Enabled: true
-  Exclude:
-    - "**/*_spec.rb"
+# this is just a slim wrapper to:
+# a) don't spam the root directory with rubocop files
+# b) work around an issue with absolute excludes and custom development (https://github.com/rubocop-hq/rubocop/issues/4621)
+inherit_from:
+  - .rubocop/default.yml

.rubocop/cop/zammad/correct_migration_timestamp.rb

@@ -0,0 +1,35 @@
+# Copyright (C) 2012-2021 Zammad Foundation, http://zammad-foundation.org/
+
+module RuboCop
+  module Cop
+    module Zammad
+      # This cop checks if migration file name begins with a valid timestamp
+      # https://github.com/zammad/zammad/issues/3702
+      class CorrectMigrationTimestamp < Base
+        MSG = 'Migration filename must begin with a valid timestamp'.freeze
+
+        def on_new_investigation
+          file_path = processed_source.file_path
+
+          return if !migration?(file_path)
+          return if config.file_to_exclude?(file_path) || config.allowed_camel_case_file?(file_path)
+          return if filename_good?(file_path)
+
+          add_global_offense(MSG)
+        end
+
+        private
+
+        def migration?(file_path)
+          match_path? %r{(?<!spec/)db/(migrate|addon/[^/]+)/.+\.rb}, file_path
+        end
+
+        def filename_good?(file_path)
+          File
+            .basename(file_path)
+            .match? %r{^20\d{12}_}
+        end
+      end
+    end
+  end
+end

.rubocop/cop/zammad/exists_condition.rb

@@ -0,0 +1,122 @@
+# Copyright (C) 2012-2021 Zammad Foundation, http://zammad-foundation.org/
+
+module RuboCop
+  module Cop
+    module Zammad
+      # This cop is used to identify usages of `find_by` in conditions and
+      # changes them to use `exists?` instead.
+      #
+      # @example
+      #   # bad
+      #   if User.find_by(name: 'Rubocop')
+      #   if !User.find_by(name: 'Rubocop')
+      #   unless User.find_by(name: 'Rubocop')
+      #   if find_by(name: 'Rubocop')
+      #   if !find_by(name: 'Rubocop')
+      #   unless find_by(name: 'Rubocop')
+      #
+      #   # good
+      #   if User.exists?(name: 'Rubocop')
+      #   if !User.exists?(name: 'Rubocop')
+      #   unless User.exists?(name: 'Rubocop')
+      #   if exists?(name: 'Rubocop')
+      #   if !exists?(name: 'Rubocop')
+      #   unless exists?(name: 'Rubocop')
+      class ExistsCondition < Base
+
+        def_node_matcher :find_by_condition?, <<-PATTERN
+          {
+            $(send $_ :find_by ...)
+            (send $(send $_ :find_by ...) :!)
+          }
+        PATTERN
+
+        MSG = 'Use `%<prefer>s` instead of `%<current>s`.'.freeze
+
+        def on_if(node)
+          check_for_find_by(node)
+        end
+
+        def on_while(node)
+          check_for_find_by(node)
+        end
+
+        def on_while_post(node)
+          check_for_find_by(node)
+        end
+
+        def on_until(node)
+          check_for_find_by(node)
+        end
+
+        def on_until_post(node)
+          check_for_find_by(node)
+        end
+
+        def autocorrect(node)
+          lambda do |corrector|
+            corrector.replace(node.loc.selector, 'exists?')
+          end
+        end
+
+        private
+
+        def check_for_find_by(node)
+          cond = condition(node)
+          handle_node(cond)
+        end
+
+        def check_node(node)
+          return if !node
+
+          if keyword_bang?(node)
+            receiver, = *node
+
+            handle_node(receiver)
+          elsif node.operator_keyword?
+            node.each_child_node { |op| handle_node(op) }
+          elsif node.begin_type? && node.children.one?
+            handle_node(node.children.first)
+          end
+        end
+
+        def keyword_bang?(node)
+          node.respond_to?(:keyword_bang?) && node.keyword_bang?
+        end
+
+        def handle_node(node)
+          if node.send_type?
+            check_offense(*find_by_condition?(node))
+          elsif %i[and or begin].include?(node.type)
+            check_node(node)
+          end
+        end
+
+        def condition(node)
+          if node.send_type?
+            node.receiver
+          else
+            node.condition
+          end
+        end
+
+        def check_offense(method_call = nil, receiver = nil)
+          return if method_call.nil?
+
+          add_offense(method_call,
+                      message: format(MSG,
+                                      prefer:  replacement(receiver),
+                                      current: current(receiver)))
+        end
+
+        def current(node)
+          node.respond_to?(:source) ? "#{node.source}.find_by" : 'find_by'
+        end
+
+        def replacement(node)
+          node.respond_to?(:source) ? "#{node.source}.exists?" : 'exists?'
+        end
+      end
+    end
+  end
+end

.rubocop/cop/zammad/exists_date_time_precision.rb

@@ -0,0 +1,67 @@
+# Copyright (C) 2012-2021 Zammad Foundation, http://zammad-foundation.org/
+
+module RuboCop
+  module Cop
+    module Zammad
+      class ExistsDateTimePrecision < Cop
+        def_node_matcher :column?, <<-PATTERN
+          $(send _ {:add_column :change_column} (sym _) (sym _) (sym :datetime) ... )
+        PATTERN
+
+        def_node_matcher :column_limit?, <<-PATTERN
+          (send ... (hash <(pair (sym :limit) $(int 3)) ...> ) )
+        PATTERN
+
+        def_node_matcher :table?, <<-PATTERN
+          $(block
+            (send _ {:create_table :alter_table} ... )
+            ...
+          )
+        PATTERN
+
+        def_node_matcher :table_column?, <<-PATTERN
+          $(send (:lvar _) {:timestamps :datetime} ... )
+        PATTERN
+
+        MSG = 'Columns of type :timestamps and :datetime needs to have limit: 3.'.freeze
+
+=begin
+
+This rubocop will match all change_column/add_column/create_table/alter_table statements
+and check if there are :datetime or :timestamps column which do not have the limit: 3 setting.
+
+  good:
+
+    change_column :smime_certificates, :not_after_at, :datetime, limit: 3
+
+    create_table :sessions do |t|
+      t.timestamps limit: 3, null: false
+    end
+
+  bad:
+
+    change_column :smime_certificates, :not_after_at, :datetime, limit: 4
+
+    create_table :sessions do |t|
+      t.timestamps null: false
+    end
+
+=end
+
+        def on_send(node)
+          return add_offense(node) if invalid_column?(node)
+          return add_offense(node) if invalid_table?(node)
+        end
+
+        def invalid_table?(node)
+          table?(node&.parent&.parent) && table_column?(node) && !column_limit?(node)
+        end
+
+        def invalid_column?(node)
+          column?(node) && !column_limit?(node)
+        end
+
+      end
+    end
+  end
+end

.rubocop/cop/zammad/exists_db_strategy.rb

@@ -0,0 +1,45 @@
+# Copyright (C) 2012-2021 Zammad Foundation, http://zammad-foundation.org/
+
+module RuboCop
+  module Cop
+    module Zammad
+      class ExistsDbStrategy < Base
+        def_node_matcher :migration_execute?, <<-PATTERN
+          $(send (const (const _ :ObjectManager ) :Attribute) :migration_execute)
+        PATTERN
+
+        def_node_matcher :create_attribute?, <<-PATTERN
+          $(send _ :create_attribute ...)
+        PATTERN
+
+        def_node_matcher :is_block?, <<-PATTERN
+          $(block ...)
+        PATTERN
+
+        def_node_matcher :has_reset?, <<-PATTERN
+          $(send _ {:describe :context :it} (_ ...) (hash ... (pair (sym :db_strategy) (sym {:reset :reset_all}))))
+        PATTERN
+
+        MSG = 'Add a `db_strategy: :reset` to your context/decribe when you are creating object manager attributes!'.freeze
+
+        def on_send(node)
+          return if !migration_execute?(node) && !create_attribute?(node)
+
+          reset = false
+          node_parent = node.parent
+          until node_parent.nil?
+            if is_block?(node_parent) && has_reset?(node_parent.children[0])
+              reset = true
+              break
+            end
+            node_parent = node_parent.parent
+          end
+
+          return if reset
+
+          add_offense(node)
+        end
+      end
+    end
+  end
+end

.rubocop/cop/zammad/exists_reset_column_information.rb

@@ -0,0 +1,90 @@
+# Copyright (C) 2012-2021 Zammad Foundation, http://zammad-foundation.org/
+
+module RuboCop
+  module Cop
+    module Zammad
+      class ExistsResetColumnInformation < Cop
+        def_node_matcher :table?, <<-PATTERN
+          $(send _ :change_table ... )
+        PATTERN
+
+        def_node_matcher :column?, <<-PATTERN
+          $(send _ {:add_column :change_column :rename_column :remove_column} ... )
+        PATTERN
+
+        def_node_matcher :reset?, <<-PATTERN
+          $( ... :reset_column_information )
+        PATTERN
+
+        def message(class_name)
+          "Changes of the schema need to be followed by a #{class_name}.reset_column_information to have the right state of the db in the migration and future migrations."
+        end
+
+=begin
+
+This rubocop will match all add, change, rename and remove column statements
+and check if there are reset_column_information function calls existing for the model.
+
+  good:
+
+    change_column :smime_certificates, :not_after_at, :datetime, limit: 3
+
+    SMIMECertificate.reset_column_information
+
+  bad:
+
+    change_column :smime_certificates, :not_after_at, :datetime, limit: 3
+
+=end
+
+        def column_classes
+          @column_classes ||= {}
+        end
+
+        def table_classes
+          @table_classes ||= {}
+        end
+
+        def reset_classes
+          @reset_classes ||= {}
+        end
+
+        def column_class(node)
+          node.children[2].children[0].to_s.classify
+        end
+
+        def reset_class(node)
+          node.children[0].children[1].to_s
+        end
+
+        def table_class(node)
+          node.children[2].children[0].to_s.classify
+        end
+
+        def on_send(node)
+          if column?(node)
+            column_classes[column_class(node)] = node
+          elsif table?(node)
+            table_classes[table_class(node)] = node
+          elsif reset?(node)
+            reset_classes[reset_class(node)] = node
+          end
+        end
+
+        def on_investigation_end
+          column_classes.each do |key, value|
+            next if reset_classes.key?(key)
+
+            add_offense(value, message: message(key))
+          end
+          table_classes.each do |key, value|
+            next if reset_classes.key?(key)
+
+            add_offense(value, message: message(key))
+          end
+          super
+        end
+      end
+    end
+  end
+end

.rubocop/cop/zammad/forbid_rand.rb

@@ -0,0 +1,20 @@
+# Copyright (C) 2012-2021 Zammad Foundation, http://zammad-foundation.org/
+
+module RuboCop
+  module Cop
+    module Zammad
+      class ForbidRand < Base
+        MSG = <<~ERROR_MESSAGE.freeze
+          Please avoid 'rand' if possible. It does not guarantee uniqueness which means that there is a risk of collisions. Possible alternatives:
+          - If you need unique values, consider using 'SecureRandom.uuid'.
+          - To randomly select a value from a list, use [].sample.
+          - To generate random test data that does not need to be unique, you can use 'Faker::*'.
+        ERROR_MESSAGE
+
+        def on_send(node)
+          add_offense(node) if node.method_name.eql? :rand
+        end
+      end
+    end
+  end
+end

.rubocop/cop/zammad/have_no_over_not_to.rb

@@ -0,0 +1,63 @@
+# Copyright (C) 2012-2021 Zammad Foundation, http://zammad-foundation.org/
+
+require 'capybara/rspec/matchers'
+
+module RuboCop
+  module Cop
+    module Zammad
+      # This cop is used to identify usages of `have_*` RSpec matcher together with `not_to`.
+      # `have_no_*` with `to` is preferred
+      #
+      # @example
+      #   # bad
+      #   expect(page).not_to have_css('#elem')
+      #
+      #   # good
+      #   expect(page).to have_no_css('#elem')
+      class HaveNoOverNotTo < Base
+        extend AutoCorrector
+
+        MSG = 'Prefer `.to %<replacement>s` over `.not_to %<original>s`.'.freeze
+
+        def_node_matcher :on_have_not_no, '(send (send nil? :expect ...) :not_to (send nil? #matcher_to_replace? ...))'
+
+        def matcher_to_replace?(matcher_name)
+          have_not_no?(matcher_name) && capybara_matcher?(matcher_name)
+        end
+
+        def have_not_no?(matcher_name)  # rubocop:disable Naming/PredicateName
+          matcher_name.match?(%r{^have_(?!no)})
+        end
+
+        def capybara_matcher?(matcher_name)
+          Capybara::RSpecMatchers.instance_methods.include?(matcher_name)
+        end
+
+        def on_send(node)
+          on_have_not_no(node) do
+            add_offense(node, message: message(node)) do |corrector|
+              corrector.replace(original_matcher_node(node).loc.selector, alternative_matcher(node))
+              corrector.replace(node.loc.selector, 'to')
+            end
+          end
+        end
+
+        def original_matcher_node(node)
+          node.children[2]
+        end
+
+        def original_matcher(node)
+          original_matcher_node(node).method_name
+        end
+
+        def alternative_matcher(node)
+          original_matcher(node).to_s.sub 'have_', 'have_no_'
+        end
+
+        def message(node)
+          format(MSG, replacement: alternative_matcher(node), original: original_matcher(node))
+        end
+      end
+    end
+  end
+end

.rubocop/cop/zammad/no_to_sym_on_string.rb

@@ -0,0 +1,42 @@
+# Copyright (C) 2012-2021 Zammad Foundation, http://zammad-foundation.org/
+
+module RuboCop
+  module Cop
+    module Zammad
+      # This cop is used to identify usages of `.to_sym` on Strings and
+      # changes them to use the `:` prefix instead.
+      #
+      # @example
+      #   # bad
+      #   "a-Symbol".to_sym
+      #   'a-Symbol'.to_sym
+      #   "a-#{'Symbol'}".to_sym
+      #
+      #   # good
+      #   :"a-Symbol"
+      #   :'a-Symbol'
+      #   :"a-#{'Symbol'}"
+      class NoToSymOnString < Base
+        extend AutoCorrector
+
+        def_node_matcher :to_sym?, <<-PATTERN
+          {
+            $(send (str ...) :to_sym ...)
+            $(send (dstr ...) :to_sym ...)
+          }
+        PATTERN
+
+        MSG = "Don't use `.to_sym` on String. Prefer `:` prefix instead.".freeze
+
+        def on_send(node)
+          result = *to_sym?(node)
+          return if result.empty?
+
+          add_offense(node, message: MSG) do |corrector|
+            corrector.replace(node, ":#{result.first.source}")
+          end
+        end
+      end
+    end
+  end
+end

.rubocop/cop/zammad/prefer_negated_if_over_unless.rb

@@ -0,0 +1,32 @@
+# Copyright (C) 2012-2021 Zammad Foundation, http://zammad-foundation.org/
+
+module RuboCop
+  module Cop
+    module Zammad
+      # This cop is used to identify usages of `unless` conditionals
+      #
+      # @example
+      #   # bad
+      #   unless statement
+      #   return unless statement
+      #
+      #   # good
+      #   if !statement
+      #   return if !statement
+      class PreferNegatedIfOverUnless < Base
+        include ConfigurableEnforcedStyle
+        include NegativeConditional
+        extend AutoCorrector
+
+        MSG = 'Favor `if !foobar` over `unless foobar` for ' \
+              'negative conditions.'.freeze
+
+        def on_if(node)
+          return if !node.unless?
+
+          add_offense(node, message: MSG)
+        end
+      end
+    end
+  end
+end

.rubocop/cop/zammad/update_copyright.rb

@@ -0,0 +1,75 @@
+# Copyright (C) 2012-2021 Zammad Foundation, http://zammad-foundation.org/
+
+module RuboCop
+  module Cop
+    module Zammad
+      # This cop updates the copyright information or inserts it if needed.
+      class UpdateCopyright < Base
+        include RangeHelp
+        extend AutoCorrector
+
+        MSG = 'Copyright update required (use auto-correct to rectify this).'.freeze
+        COPYRIGHT = "# Copyright (C) 2012-#{Date.today.year} Zammad Foundation, http://zammad-foundation.org/".freeze # rubocop:disable Rails/Date
+
+        def on_new_investigation
+          if processed_source.raw_source.include? '# Copyright (C) 2012-'
+            update_copyright
+          else
+            insert_copyright
+          end
+        end
+
+        def insert_copyright
+          if processed_source.raw_source.start_with? '#!'
+            # Keep shebang line, obviously.
+            comment = processed_source.comments.first
+            add_offense(comment) do |corrector|
+              corrector.insert_after(
+                comment,
+                "\n#{COPYRIGHT}\n"
+              )
+            end
+          else
+            # Insert at the top if there is no shebang.
+            file_start = range_between(0, 0)
+            add_offense(file_start) do |corrector|
+              corrector.insert_before(file_start, "#{COPYRIGHT}\n\n")
+            end
+          end
+        end
+
+        def update_copyright
+          processed_source.comments.each do |comment|
+            break if correct_copyright?(comment)
+            next if !comment.text.include?('# Copyright (C) 2012-') # rubocop:disable Rails/NegateInclude
+
+            add_offense(comment) do |corrector|
+              corrector.replace(
+                comment,
+                replace_with(comment)
+              )
+            end
+
+            break
+          end
+        end
+
+        def correct_copyright?(comment)
+          return false if !comment.text.eql? COPYRIGHT
+
+          newline_after_copyright?(comment)
+        end
+
+        def newline_after_copyright?(comment)
+          processed_source[comment.location.last_line].blank?
+        end
+
+        def replace_with(comment)
+          return COPYRIGHT if newline_after_copyright?(comment)
+
+          "#{COPYRIGHT}\n"
+        end
+      end
+    end
+  end
+end

.rubocop/default.yml

@@ -0,0 +1,322 @@
+# Default enabled cops
+# https://github.com/rubocop-hq/rubocop/blob/master/config/default.yml
+
+require:
+  - rubocop-faker
+  - rubocop-performance
+  - rubocop-rails
+  - rubocop-rspec
+  - ./rubocop_zammad.rb
+
+inherit_from:
+  - todo.yml
+  - todo.rspec.yml
+
+inherit_mode:
+  merge:
+    - Include
+
+AllCops:
+  NewCops: enable
+  DisplayCopNames: true
+  Include:
+    - '.gitlab/**/*.rb'
+    - '.github/**/*.rb'
+    - '.rubocop/**/*.rb'
+  Exclude:
+    - 'bin/*'
+    - 'db/schema.rb'
+    - 'vendor/**/*'
+    - 'node_modules/**/*'
+    - 'public/assets/**/*'
+    - 'public/packs/**/*'
+RSpec:
+  Include:
+    - "**/*_spec.rb"
+    - "**/*_examples.rb"
+
+Rails:
+  Enabled: true
+
+# Zammad StyleGuide
+
+Style/FrozenStringLiteralComment:
+  Enabled: false
+
+Layout/LineLength:
+  Description: 'Limit lines to 80 characters.'
+  StyleGuide: 'https://github.com/bbatsov/ruby-style-guide#80-character-limits'
+  Enabled: false
+
+Style/NegatedIf:
+  Description: >-
+                 Favor unless over if for negative conditions
+                 (or control flow or).
+  StyleGuide: 'https://github.com/bbatsov/ruby-style-guide#unless-for-negatives'
+  Enabled: false
+
+Style/IfUnlessModifier:
+  Description: >-
+                 Favor modifier if/unless usage when you have a
+                 single-line body.
+  StyleGuide: 'https://github.com/bbatsov/ruby-style-guide#if-as-a-modifier'
+  Enabled: false
+
+Style/TrailingCommaInArrayLiteral:
+  Description: 'Checks for trailing comma in array literals.'
+  StyleGuide: '#no-trailing-array-commas'
+  Enabled: false
+
+Style/TrailingCommaInHashLiteral:
+  Description: 'Checks for trailing comma in hash literals.'
+  Enabled: false
+
+Style/TrailingCommaInArguments:
+  Description: 'Checks for trailing comma in argument lists.'
+  StyleGuide: 'https://github.com/bbatsov/ruby-style-guide#no-trailing-array-commas'
+  Enabled: false
+
+Style/RescueStandardError:
+  Description: 'Avoid rescuing without specifying an error class.'
+  Enabled: true
+  EnforcedStyle: implicit
+
+Layout/SpaceInsideReferenceBrackets:
+  Description: 'Checks the spacing inside referential brackets.'
+  Enabled: false
+
+Layout/SpaceInsideArrayLiteralBrackets:
+  Description: 'Checks the spacing inside array literal brackets.'
+  Enabled: false
+
+Style/DefWithParentheses:
+  Description: 'Use def with parentheses when there are arguments.'
+  StyleGuide: 'https://github.com/bbatsov/ruby-style-guide#method-parens'
+  Enabled: false
+
+Layout/HashAlignment:
+  Description: >-
+                 Align the elements of a hash literal if they span more than
+                 one line.
+  Enabled: true
+  EnforcedHashRocketStyle: table
+  EnforcedColonStyle: table
+  EnforcedLastArgumentHashStyle: always_inspect
+
+Layout/EmptyLinesAroundClassBody:
+  Description: "Keeps track of empty lines around class bodies."
+  Enabled: false
+
+Layout/EmptyLinesAroundMethodBody:
+  Description: "Keeps track of empty lines around method bodies."
+  Enabled: false
+
+Layout/EmptyLinesAroundBlockBody:
+  Description: "Keeps track of empty lines around block bodies."
+  Enabled: false
+
+Layout/EmptyLinesAroundModuleBody:
+  Description: "Keeps track of empty lines around module bodies."
+  Enabled: false
+
+Layout/ExtraSpacing:
+  Description: 'Do not use unnecessary spacing.'
+  Enabled: true
+  Exclude:
+    - 'config/routes/**/*'
+    - 'db/migrate/20120101000001_create_base.rb'
+    - 'db/migrate/20120101000010_create_ticket.rb'
+
+Style/MultilineBlockChain:
+  Description: 'Avoid multi-line chains of blocks.'
+  StyleGuide: 'https://github.com/bbatsov/ruby-style-guide#single-line-blocks'
+  Enabled: false
+
+Metrics/ClassLength:
+  Description: 'Avoid classes longer than 100 lines of code.'
+  Enabled: false
+
+Metrics/MethodLength:
+  Description: 'Avoid methods longer than 10 lines of code.'
+  StyleGuide: 'https://github.com/bbatsov/ruby-style-guide#short-methods'
+  Enabled: false
+
+Style/BlockComments:
+  Description: 'Do not use block comments.'
+  StyleGuide: 'https://github.com/bbatsov/ruby-style-guide#no-block-comments'
+  Enabled: false
+
+Style/PerlBackrefs:
+  Description: 'Avoid Perl-style regex back references.'
+  StyleGuide: 'https://github.com/bbatsov/ruby-style-guide#no-perl-regexp-last-matchers'
+  Enabled: false
+
+Rails/ApplicationRecord:
+  Exclude:
+    - 'app/models/application_model.rb'
+    - 'app/models/active_job_lock.rb'
+
+Rails/BulkChangeTable:
+  Description: 'Check whether alter queries are combinable.'
+  Enabled: false
+
+Rails/FindEach:
+  Description: 'Prefer all.find_each over all.find.'
+  Enabled: false
+
+Rails/HasAndBelongsToMany:
+  Description: 'Prefer has_many :through to has_and_belongs_to_many.'
+#  StyleGuide: 'https://github.com/bbatsov/rails-style-guide#has-many-through'
+  Enabled: false
+
+Rails/MatchRoute:
+  Description: >-
+                  Don't use `match` to define any routes unless there is a need to map multiple request types
+                  among [:get, :post, :patch, :put, :delete] to a single action using the `:via` option.
+  StyleGuide: 'https://rails.rubystyle.guide/#no-match-routes'
+  Enabled: false
+
+Rails/SkipsModelValidations:
+  Description: >-
+                 Use methods that skips model validations with caution.
+                 See reference for more information.
+  Reference: 'http://guides.rubyonrails.org/active_record_validations.html#skipping-validations'
+  Enabled: true
+  Exclude:
+    - test/**/*
+    - "**/*_spec.rb"
+    - "**/*_examples.rb"
+
+Style/ClassAndModuleChildren:
+  Description: 'Checks style of children classes and modules.'
+  Enabled: false
+
+Naming/FileName:
+  Description: 'Use snake_case for source file names.'
+  StyleGuide: 'https://github.com/bbatsov/ruby-style-guide#snake-case-files'
+  Enabled: true
+  Exclude:
+    - 'script/websocket-server.rb'
+
+Naming/VariableNumber:
+  Description: 'Use the configured style when numbering variables.'
+  Enabled: false
+
+Naming/MethodParameterName:
+  Description: >-
+                Checks for method parameter names that contain capital letters,
+                end in numbers, or do not meet a minimal length.
+  Enabled: true
+  AllowedNames: e, id, _, ip, to
+
+Lint/BooleanSymbol:
+  Description: 'Check for `:true` and `:false` symbols.'
+  Enabled: true
+  Exclude:
+    - "db/seeds/object_manager_attributes.rb"
+    - "spec/requests/integration/object_manager_attributes_spec.rb"
+    - "test/integration/object_manager_test.rb"
+
+Lint/InterpolationCheck:
+  Description: 'Raise warning for interpolation in single q strs'
+  Enabled: true
+  Exclude:
+    - "test/unit/email_process_auto_response_test.rb"
+    - "test/unit/email_process_bounce_delivery_permanent_failed_test.rb"
+    - "test/unit/email_process_bounce_follow_test.rb"
+    - "test/unit/notification_factory_renderer_test.rb"
+    - "test/unit/notification_factory_template_test.rb"
+    - "test/unit/ticket_trigger_test.rb"
+    - "test/unit/ticket_trigger_recursive_disabled_test.rb"
+
+Style/StringConcatenation:
+  Description: 'Checks for places where string concatenation can be replaced with string interpolation.'
+  StyleGuide: '#string-interpolation'
+  Enabled: true
+  Exclude:
+    - "config/routes/**/*"
+
+Style/RegexpLiteral:
+  Description: 'This cop enforces using // or %r around regular expressions.'
+  EnforcedStyle: percent_r
+
+Style/RedundantBegin:
+  Description: 'This cop checks for redundant `begin` blocks.'
+  Enabled: false
+
+Rails/EnvironmentVariableAccess:
+  Description: 'This cop looks for direct access to environment variables through the ENV variable within the application code.'
+  Enabled: true
+  AllowReads: true
+
+Rails/Output:
+  Exclude:
+    - "lib/tasks/**/*"
+  Include:
+    - "**/*_spec.rb"
+
+# RSpec tests
+Style/NumericPredicate:
+  Description: >-
+                 Checks for the use of predicate- or comparison methods for
+                 numeric comparisons.
+  StyleGuide: '#predicate-methods'
+  # This will change to a new method call which isn't guaranteed to be on the
+  # object. Switching these methods has to be done with knowledge of the types
+  # of the variables which rubocop doesn't have.
+  AutoCorrect: false
+  Enabled: true
+  Exclude:
+    - "**/*_spec.rb"
+
+Lint/AmbiguousBlockAssociation:
+  Description: >-
+                 Checks for ambiguous block association with method when param
+                 passed without parentheses.
+  StyleGuide: '#syntax'
+  Enabled: true
+  Exclude:
+    - "spec/support/*.rb"
+    - "**/*_spec.rb"
+    - "**/*_examples.rb"
+
+Layout/MultilineMethodCallIndentation:
+  Description: >-
+                 Checks the indentation of the method name part in method calls
+                 that span more than one line.
+  EnforcedStyle: indented
+  Include:
+    - "**/*_spec.rb"
+
+Lint/UnusedMethodArgument:
+  AllowUnusedKeywordArguments: true
+
+RSpec/NestedGroups:
+  Max: 6
+
+RSpec/Rails/AvoidSetupHook:
+  Exclude:
+    - "test/**/*"
+
+Zammad/PreferNegatedIfOverUnless:
+  Exclude:
+    - 'bin/rspec'
+
+Zammad/ExistsDateTimePrecision:
+  Include:
+    - "db/migrate/*.rb"
+    - "**/db/addon/**/*.rb"
+
+Zammad/ExistsResetColumnInformation:
+  Include:
+    - "db/migrate/*.rb"
+    - "**/db/addon/**/*.rb"
+  Exclude:
+    - 'db/migrate/201*_*.rb'
+    - 'db/migrate/2020*_*.rb'
+
+Zammad/ExistsDbStrategy:
+  Include:
+    - "spec/**/*.rb"
+  Exclude:
+    - spec/support/capybara/common_actions.rb

.rubocop/rubocop_zammad.rb

@@ -0,0 +1,12 @@
+# Copyright (C) 2012-2021 Zammad Foundation, http://zammad-foundation.org/
+
+require_relative 'cop/zammad/exists_condition'
+require_relative 'cop/zammad/exists_date_time_precision'
+require_relative 'cop/zammad/exists_db_strategy'
+require_relative 'cop/zammad/exists_reset_column_information'
+require_relative 'cop/zammad/correct_migration_timestamp'
+require_relative 'cop/zammad/have_no_over_not_to'
+require_relative 'cop/zammad/no_to_sym_on_string'
+require_relative 'cop/zammad/prefer_negated_if_over_unless'
+require_relative 'cop/zammad/update_copyright'
+require_relative 'cop/zammad/forbid_rand'

.rubocop/todo.rspec.yml

@@ -0,0 +1,683 @@
+RSpec/AnyInstance:
+  Exclude:
+    - 'spec/lib/import/otrs/article_spec.rb'
+    - 'spec/lib/import/otrs/customer_spec.rb'
+    - 'spec/lib/import/otrs/customer_user_spec.rb'
+    - 'spec/lib/import/otrs/priority_spec.rb'
+    - 'spec/lib/import/otrs/queue_spec.rb'
+    - 'spec/lib/import/otrs/state_spec.rb'
+    - 'spec/lib/import/otrs/ticket_spec.rb'
+    - 'spec/lib/import/otrs/user_spec.rb'
+    - 'spec/models/import_job_spec.rb'
+
+RSpec/BeforeAfterAll:
+  Exclude:
+    - 'spec/spec_helper.rb'
+    - 'spec/rails_helper.rb'
+    - 'spec/support/**/*.rb'
+    - 'spec/lib/sequencer/unit/import/zendesk/ticket/comment/attachment/request_spec.rb'
+    - 'spec/lib/sequencer/unit/import/zendesk/ticket/comment/source_based_spec.rb'
+    - 'spec/models/translation_spec.rb'
+
+RSpec/ContextWording:
+  Exclude:
+    - 'spec/db/migrate/active_job_lock_cleanup_job_scheduler_spec.rb'
+    - 'spec/db/migrate/check_for_object_attributes_spec.rb'
+    - 'spec/db/migrate/forget_insecure_sessions_spec.rb'
+    - 'spec/db/migrate/issue_1219_zhtw_locale_typo_spec.rb'
+    - 'spec/db/migrate/issue_1905_exchange_login_from_remote_id_spec.rb'
+    - 'spec/db/migrate/issue_1977_remove_invalid_user_foreign_keys_spec.rb'
+    - 'spec/db/migrate/issue_2333_object_country_already_exists_spec.rb'
+    - 'spec/db/migrate/issue_2345_es_attachment_max_size_in_mb_setting_lower_default_spec.rb'
+    - 'spec/db/migrate/issue_2368_add_indices_to_histories_and_tickets_spec.rb'
+    - 'spec/db/migrate/issue_2541_fix_notification_email_without_body_spec.rb'
+    - 'spec/jobs/communicate_twitter_job_spec.rb'
+    - 'spec/jobs/concerns/has_active_job_lock_spec.rb'
+    - 'spec/jobs/concerns/has_collection_update_spec.rb'
+    - 'spec/jobs/concerns/has_ticket_create_screen_impact_spec.rb'
+    - 'spec/jobs/imap_authentication_migration_cleanup_job_spec.rb'
+    - 'spec/jobs/ticket_article_communicate_email_job_spec.rb'
+    - 'spec/lib/application_handle_info_spec.rb'
+    - 'spec/lib/core_ext/string_spec.rb'
+    - 'spec/lib/external_credential/google_spec.rb'
+    - 'spec/lib/external_credential/microsoft365_spec.rb'
+    - 'spec/lib/html_sanitizer_spec.rb'
+    - 'spec/lib/import/exchange/folder_spec.rb'
+    - 'spec/lib/import/helper_spec.rb'
+    - 'spec/lib/import/ldap_spec.rb'
+    - 'spec/lib/import/otrs/article_spec.rb'
+    - 'spec/lib/import/otrs/customer_spec.rb'
+    - 'spec/lib/import/otrs/customer_user_spec.rb'
+    - 'spec/lib/import/otrs/priority_spec.rb'
+    - 'spec/lib/import/otrs/queue_spec.rb'
+    - 'spec/lib/import/otrs/requester_spec.rb'
+    - 'spec/lib/import/otrs/state_factory_spec.rb'
+    - 'spec/lib/import/otrs/state_spec.rb'
+    - 'spec/lib/import/otrs/ticket_spec.rb'
+    - 'spec/lib/import/otrs/user_spec.rb'
+    - 'spec/lib/ldap/group_spec.rb'
+    - 'spec/lib/ldap/user_spec.rb'
+    - 'spec/lib/ldap_spec.rb'
+    - 'spec/lib/notification_factory/mailer_spec.rb'
+    - 'spec/lib/notification_factory/slack_spec.rb'
+    - 'spec/lib/notification_factory/template_spec.rb'
+    - 'spec/lib/notification_factory_spec.rb'
+    - 'spec/lib/password_hash_spec.rb'
+    - 'spec/lib/search_index_backend_spec.rb'
+    - 'spec/lib/secure_mailing/smime_spec.rb'
+    - 'spec/lib/sequencer/sequence/import/ldap/users_spec.rb'
+    - 'spec/lib/sequencer/unit/import/common/model/associations/assign_spec.rb'
+    - 'spec/lib/sequencer/unit/import/common/model/save_spec.rb'
+    - 'spec/lib/sequencer/unit/import/common/object_attribute/sanitized_name_spec.rb'
+    - 'spec/lib/sequencer/unit/import/ldap/user/attributes/role_ids/unassigned_spec.rb'
+    - 'spec/lib/sequencer/unit/import/zendesk/sub_sequence/base_examples.rb'
+    - 'spec/lib/sequencer/unit/import/zendesk/ticket/comment/source_based_spec.rb'
+    - 'spec/lib/sessions/backend/base_spec.rb'
+    - 'spec/lib/sessions/backend/ticket_overview_list_spec.rb'
+    - 'spec/lib/signature_detection_spec.rb'
+    - 'spec/lib/stats/ticket_waiting_time_spec.rb'
+    - 'spec/lib/zammad/application/initializer/session_store_spec.rb'
+    - 'spec/models/application_model/can_assets_examples.rb'
+    - 'spec/models/application_model/can_latest_change_examples.rb'
+    - 'spec/models/application_model/can_lookup_examples.rb'
+    - 'spec/models/application_model/checks_import_examples.rb'
+    - 'spec/models/calendar_spec.rb'
+    - 'spec/models/channel/driver/twitter_spec.rb'
+    - 'spec/models/channel/email_parser_spec.rb'
+    - 'spec/models/channel/filter/follow_up_merged_spec.rb'
+    - 'spec/models/channel/filter/follow_up_possible_check_spec.rb'
+    - 'spec/models/channel/filter/match/email_regex_spec.rb'
+    - 'spec/models/channel/filter/out_of_office_check_spec.rb'
+    - 'spec/models/concerns/can_csv_import_examples.rb'
+    - 'spec/models/concerns/checks_kb_client_notification_examples.rb'
+    - 'spec/models/concerns/has_collection_update_examples.rb'
+    - 'spec/models/concerns/has_group_relation_definition_examples.rb'
+    - 'spec/models/concerns/has_groups_examples.rb'
+    - 'spec/models/concerns/has_groups_permissions_examples.rb'
+    - 'spec/models/concerns/has_history_examples.rb'
+    - 'spec/models/concerns/has_roles_examples.rb'
+    - 'spec/models/concerns/has_search_index_backend_examples.rb'
+    - 'spec/models/concerns/has_ticket_create_screen_impact_examples.rb'
+    - 'spec/models/cti/caller_id_spec.rb'
+    - 'spec/models/cti/driver/base_spec.rb'
+    - 'spec/models/cti/log_spec.rb'
+    - 'spec/models/email_address_spec.rb'
+    - 'spec/models/history_spec.rb'
+    - 'spec/models/job_spec.rb'
+    - 'spec/models/knowledge_base/answer/translation/search_with_attachment_spec.rb'
+    - 'spec/models/knowledge_base/category_spec.rb'
+    - 'spec/models/knowledge_base/menu_item_spec.rb'
+    - 'spec/models/knowledge_base_spec.rb'
+    - 'spec/models/object_lookup_spec.rb'
+    - 'spec/models/object_manager/attribute/validation/future_past_spec.rb'
+    - 'spec/models/object_manager/attribute/validation/min_max_spec.rb'
+    - 'spec/models/object_manager/attribute/validation/required_spec.rb'
+    - 'spec/models/object_manager/attribute/validation_spec.rb'
+    - 'spec/models/object_manager/attribute_spec.rb'
+    - 'spec/models/observer/ticket/article/communicate_twitter_spec.rb'
+    - 'spec/models/overview_spec.rb'
+    - 'spec/models/role_spec.rb'
+    - 'spec/models/scheduler_spec.rb'
+    - 'spec/models/smime_certificate_spec.rb'
+    - 'spec/models/store/file_spec.rb'
+    - 'spec/models/store/provider/file_spec.rb'
+    - 'spec/models/store_spec.rb'
+    - 'spec/models/tag/item_spec.rb'
+    - 'spec/models/tag_spec.rb'
+    - 'spec/models/taskbar_spec.rb'
+    - 'spec/models/ticket/article_spec.rb'
+    - 'spec/models/ticket/number/date_spec.rb'
+    - 'spec/models/ticket/number/increment_spec.rb'
+    - 'spec/models/ticket/state_spec.rb'
+    - 'spec/models/ticket_spec.rb'
+    - 'spec/models/token_spec.rb'
+    - 'spec/models/translation_spec.rb'
+    - 'spec/models/trigger/sms_spec.rb'
+    - 'spec/models/trigger_spec.rb'
+    - 'spec/models/type_lookup_spec.rb'
+    - 'spec/models/user/has_ticket_create_screen_impact_examples.rb'
+    - 'spec/models/user_device_spec.rb'
+    - 'spec/models/user_spec.rb'
+    - 'spec/policies/ticket_policy_spec.rb'
+    - 'spec/policies/user_policy_spec.rb'
+    - 'spec/requests/cors_preflight_check_spec.rb'
+    - 'spec/requests/error_spec.rb'
+    - 'spec/requests/external_credentials_spec.rb'
+    - 'spec/requests/integration/check_mk_spec.rb'
+    - 'spec/requests/integration/gmail_spec.rb'
+    - 'spec/requests/integration/microsoft365_spec.rb'
+    - 'spec/requests/integration/object_manager_attributes_spec.rb'
+    - 'spec/requests/integration/smime_spec.rb'
+    - 'spec/requests/knowledge_base/attachments_spec.rb'
+    - 'spec/requests/knowledge_base/search_with_details_spec.rb'
+    - 'spec/requests/session_spec.rb'
+    - 'spec/requests/tag_spec.rb'
+    - 'spec/requests/ticket/article_spec.rb'
+    - 'spec/requests/ticket_spec.rb'
+    - 'spec/requests/time_accounting_spec.rb'
+    - 'spec/requests/upload_cache_spec.rb'
+    - 'spec/requests/user/permission_spec.rb'
+    - 'spec/requests/user_spec.rb'
+    - 'spec/system/**/*'
+
+RSpec/ExampleLength:
+  Exclude:
+    - 'spec/db/migrate/20171023000001_fixed_store_upgrade_ror_45_spec.rb'
+    - 'spec/db/migrate/check_for_object_attributes_spec.rb'
+    - 'spec/db/migrate/issue_1660_fix_tree_select_configurations_spec.rb'
+    - 'spec/db/migrate/issue_1905_exchange_login_from_remote_id_spec.rb'
+    - 'spec/db/migrate/issue_1977_remove_invalid_user_foreign_keys_spec.rb'
+    - 'spec/db/migrate/issue_2867_footer_header_public_link_spec.rb'
+    - 'spec/db/migrate/object_manager_attribute_date_remove_future_past_spec.rb'
+    - 'spec/db/migrate/rename_locale_on_users_spec.rb'
+    - 'spec/jobs/communicate_twitter_job_spec.rb'
+    - 'spec/jobs/concerns/has_active_job_lock_spec.rb'
+    - 'spec/jobs/migrate_ldap_samaccountname_to_uid_job_spec.rb'
+    - 'spec/jobs/ticket_user_ticket_counter_job_spec.rb'
+    - 'spec/jobs/user_device_log_job_spec.rb'
+    - 'spec/lib/auto_wizard_spec.rb'
+    - 'spec/lib/core_ext/string_spec.rb'
+    - 'spec/lib/external_credential/google_spec.rb'
+    - 'spec/lib/external_credential/microsoft365_spec.rb'
+    - 'spec/lib/external_sync_spec.rb'
+    - 'spec/lib/import/import_job_backend_examples.rb'
+    - 'spec/lib/import/ldap_spec.rb'
+    - 'spec/lib/import/otrs/dynamic_field/checkbox_spec.rb'
+    - 'spec/lib/import/otrs/dynamic_field/date_spec.rb'
+    - 'spec/lib/import/otrs/dynamic_field/date_time_spec.rb'
+    - 'spec/lib/import/otrs/dynamic_field/dropdown_spec.rb'
+    - 'spec/lib/import/otrs/dynamic_field/multiselect_spec.rb'
+    - 'spec/lib/import/otrs/dynamic_field/text_area_spec.rb'
+    - 'spec/lib/import/otrs/dynamic_field/text_spec.rb'
+    - 'spec/lib/import/otrs/history/article_spec.rb'
+    - 'spec/lib/import/otrs/history/move_spec.rb'
+    - 'spec/lib/import/otrs/history/new_ticket_spec.rb'
+    - 'spec/lib/import/otrs/history/priority_update_spec.rb'
+    - 'spec/lib/import/otrs/history/state_update_spec.rb'
+    - 'spec/lib/import/otrs/priority_factory_spec.rb'
+    - 'spec/lib/import/otrs/state_factory_spec.rb'
+    - 'spec/lib/import/otrs/sys_config_factory_spec.rb'
+    - 'spec/lib/import/zendesk/object_attribute/checkbox_spec.rb'
+    - 'spec/lib/import/zendesk/object_attribute/date_spec.rb'
+    - 'spec/lib/import/zendesk/object_attribute/decimal_spec.rb'
+    - 'spec/lib/import/zendesk/object_attribute/dropdown_spec.rb'
+    - 'spec/lib/import/zendesk/object_attribute/integer_spec.rb'
+    - 'spec/lib/import/zendesk/object_attribute/regexp_spec.rb'
+    - 'spec/lib/import/zendesk/object_attribute/tagger_spec.rb'
+    - 'spec/lib/import/zendesk/object_attribute/text_spec.rb'
+    - 'spec/lib/import/zendesk/object_attribute/textarea_spec.rb'
+    - 'spec/lib/ldap/group_spec.rb'
+    - 'spec/lib/ldap/user_spec.rb'
+    - 'spec/lib/ldap_spec.rb'
+    - 'spec/lib/notification_factory/mailer_spec.rb'
+    - 'spec/lib/notification_factory/renderer_spec.rb'
+    - 'spec/lib/notification_factory/slack_spec.rb'
+    - 'spec/lib/report/ticket_generic_time_spec.rb'
+    - 'spec/lib/search_index_backend_spec.rb'
+    - 'spec/lib/secure_mailing/smime_spec.rb'
+    - 'spec/lib/sequencer/sequence/import/ldap/users_spec.rb'
+    - 'spec/lib/sequencer/unit/common/attribute_mapper_spec.rb'
+    - 'spec/lib/sequencer/unit/import/common/mapping/flat_keys_spec.rb'
+    - 'spec/lib/sequencer/unit/import/common/model/attributes/remote_id_spec.rb'
+    - 'spec/lib/sequencer/unit/import/common/model/lookup/external_sync_spec.rb'
+    - 'spec/lib/sequencer/unit/import/common/remote_id/case_sensitive_spec.rb'
+    - 'spec/lib/sequencer/unit/import/ldap/user/attributes/role_ids/signup_spec.rb'
+    - 'spec/lib/sequencer/unit/import/ldap/user/lookup/attributes_spec.rb'
+    - 'spec/lib/sequencer/unit/import/ldap/user/mapping_spec.rb'
+    - 'spec/lib/sequencer/unit/import/zendesk/sub_sequence/base_examples.rb'
+    - 'spec/lib/sessions/backend/ticket_overview_list_spec.rb'
+    - 'spec/lib/sessions/event/chat_session_start_spec.rb'
+    - 'spec/lib/sessions/event/chat_transfer_spec.rb'
+    - 'spec/lib/signature_detection_spec.rb'
+    - 'spec/lib/upload_cache_spec.rb'
+    - 'spec/lib/user_info_spec.rb'
+    - 'spec/models/application_model/can_lookup_examples.rb'
+    - 'spec/models/calendar_spec.rb'
+    - 'spec/models/channel/driver/imap_spec.rb'
+    - 'spec/models/channel/driver/sms/twilio_spec.rb'
+    - 'spec/models/channel/driver/twitter_spec.rb'
+    - 'spec/models/channel/email_parser_spec.rb'
+    - 'spec/models/channel/filter/follow_up_merged_spec.rb'
+    - 'spec/models/concerns/has_collection_update_examples.rb'
+    - 'spec/models/concerns/has_group_relation_definition_examples.rb'
+    - 'spec/models/concerns/has_groups_examples.rb'
+    - 'spec/models/concerns/has_roles_examples.rb'
+    - 'spec/models/concerns/has_tags_examples.rb'
+    - 'spec/models/cti/caller_id_spec.rb'
+    - 'spec/models/cti/log_spec.rb'
+    - 'spec/models/history_spec.rb'
+    - 'spec/models/import_job_spec.rb'
+    - 'spec/models/object_manager/attribute_spec.rb'
+    - 'spec/models/overview_spec.rb'
+    - 'spec/models/recent_view_spec.rb'
+    - 'spec/models/role_group_spec.rb'
+    - 'spec/models/role_spec.rb'
+    - 'spec/models/scheduler_spec.rb'
+    - 'spec/models/sla/has_escalation_calculation_impact_examples.rb'
+    - 'spec/models/store/file_spec.rb'
+    - 'spec/models/store/provider/file_spec.rb'
+    - 'spec/models/store_spec.rb'
+    - 'spec/models/taskbar_spec.rb'
+    - 'spec/models/ticket/article_spec.rb'
+    - 'spec/models/ticket/article/has_ticket_contact_attributes_impact_examples.rb'
+    - 'spec/models/ticket/escalation_examples.rb'
+    - 'spec/models/ticket/overviews_spec.rb'
+    - 'spec/models/ticket_spec.rb'
+    - 'spec/models/translation_spec.rb'
+    - 'spec/models/trigger_spec.rb'
+    - 'spec/models/user_spec.rb'
+    - 'spec/requests/admin/knowledge_base/public_menu_spec.rb'
+    - 'spec/requests/api_auth_from_spec.rb'
+    - 'spec/requests/api_auth_spec.rb'
+    - 'spec/requests/calendar_spec.rb'
+    - 'spec/requests/external_credentials_spec.rb'
+    - 'spec/requests/form_spec.rb'
+    - 'spec/requests/integration/check_mk_spec.rb'
+    - 'spec/requests/integration/cti_spec.rb'
+    - 'spec/requests/integration/idoit_spec.rb'
+    - 'spec/requests/integration/github_spec.rb'
+    - 'spec/requests/integration/gitlab_spec.rb'
+    - 'spec/requests/integration/monitoring_spec.rb'
+    - 'spec/requests/integration/object_manager_attributes_spec.rb'
+    - 'spec/requests/integration/placetel_spec.rb'
+    - 'spec/requests/integration/sipgate_spec.rb'
+    - 'spec/requests/integration/smime_spec.rb'
+    - 'spec/requests/integration/telegram_spec.rb'
+    - 'spec/requests/integration/twilio_sms_spec.rb'
+    - 'spec/requests/integration/message_bird_sms_spec.rb'
+    - 'spec/requests/integration/user_device_spec.rb'
+    - 'spec/requests/knowledge_base/answer_attachments_cloning_spec.rb'
+    - 'spec/requests/links_spec.rb'
+    - 'spec/requests/long_polling_spec.rb'
+    - 'spec/requests/o_auth_spec.rb'
+    - 'spec/requests/organization_spec.rb'
+    - 'spec/requests/overview_spec.rb'
+    - 'spec/requests/package_spec.rb'
+    - 'spec/requests/report_spec.rb'
+    - 'spec/requests/search_spec.rb'
+    - 'spec/requests/settings_spec.rb'
+    - 'spec/requests/sla_spec.rb'
+    - 'spec/requests/taskbar_spec.rb'
+    - 'spec/requests/text_module_spec.rb'
+    - 'spec/requests/ticket/article_attachments_spec.rb'
+    - 'spec/requests/ticket/article_spec.rb'
+    - 'spec/requests/ticket/escalation_spec.rb'
+    - 'spec/requests/ticket_spec.rb'
+    - 'spec/requests/time_accounting_spec.rb'
+    - 'spec/requests/user/organization_spec.rb'
+    - 'spec/requests/user/permission_spec.rb'
+    - 'spec/requests/user_spec.rb'
+    - 'spec/scripts/websocket_server_spec.rb'
+    - 'spec/system/**/*'
+
+RSpec/ExpectActual:
+  Exclude:
+    - 'spec/routing/**/*'
+    - 'spec/requests/integration/monitoring_spec.rb'
+    - 'spec/requests/integration/object_manager_attributes_spec.rb'
+    - 'spec/requests/integration/twilio_sms_spec.rb'
+    - 'spec/requests/integration/message_bird_sms_spec.rb'
+    - 'spec/requests/integration/user_device_spec.rb'
+    - 'spec/requests/organization_spec.rb'
+    - 'spec/requests/ticket/article_attachments_spec.rb'
+    - 'spec/requests/user/organization_spec.rb'
+    - 'spec/requests/user_spec.rb'
+
+RSpec/ExpectInHook:
+  Exclude:
+    - 'spec/models/calendar_spec.rb'
+    - 'spec/models/concerns/has_search_index_backend_examples.rb'
+    - 'spec/models/ticket/article_spec.rb'
+
+RSpec/FilePath:
+  Exclude:
+    - 'spec/db/migrate/20171023000001_fixed_store_upgrade_ror_45_spec.rb'
+    - 'spec/db/migrate/issue_*_spec.rb'
+    - 'spec/jobs/issue_*_spec.rb'
+    - 'spec/lib/import/base_factory_spec.rb'
+    - 'spec/models/knowledge_base/answer/translation/search_with_attachment_spec.rb'
+    - 'spec/models/trigger/sms_spec.rb'
+
+RSpec/InstanceVariable:
+  Exclude:
+    - 'spec/lib/notification_factory/renderer_spec.rb'
+    - 'spec/models/import_job_spec.rb'
+    - 'spec/models/scheduler_spec.rb'
+    - 'spec/requests/api_auth_from_spec.rb'
+    - 'spec/requests/integration/monitoring_spec.rb'
+    - 'spec/requests/integration/sipgate_spec.rb'
+    - 'spec/requests/organization_spec.rb'
+    - 'spec/requests/report_spec.rb'
+    - 'spec/requests/text_module_spec.rb'
+    - 'spec/requests/ticket/article_attachments_spec.rb'
+    - 'spec/requests/user_spec.rb'
+
+RSpec/LetSetup:
+  Exclude:
+    - 'spec/jobs/communicate_twitter_job_spec.rb'
+    - 'spec/jobs/ticket_online_notification_seen_job_spec.rb'
+    - 'spec/lib/external_credential/google_spec.rb'
+    - 'spec/lib/external_credential/microsoft365_spec.rb'
+    - 'spec/lib/secure_mailing/smime_spec.rb'
+    - 'spec/lib/sessions/backend/ticket_overview_list_spec.rb'
+    - 'spec/models/channel/driver/twitter_spec.rb'
+    - 'spec/models/channel/email_parser_spec.rb'
+    - 'spec/models/cti/caller_id_spec.rb'
+    - 'spec/models/cti/driver/base_spec.rb'
+    - 'spec/models/cti/log_spec.rb'
+    - 'spec/models/organization_spec.rb'
+    - 'spec/models/role_group_spec.rb'
+    - 'spec/models/tag_spec.rb'
+    - 'spec/models/ticket/article_spec.rb'
+    - 'spec/models/trigger_spec.rb'
+    - 'spec/models/user_group_spec.rb'
+    - 'spec/requests/external_credentials_spec.rb'
+    - 'spec/requests/integration/cti_spec.rb'
+    - 'spec/requests/integration/idoit_spec.rb'
+    - 'spec/requests/integration/monitoring_spec.rb'
+    - 'spec/requests/integration/placetel_spec.rb'
+    - 'spec/requests/integration/sipgate_spec.rb'
+    - 'spec/requests/search_spec.rb'
+    - 'spec/requests/ticket/escalation_spec.rb'
+    - 'spec/requests/time_accounting_spec.rb'
+    - 'spec/requests/user/organization_spec.rb'
+    - 'spec/requests/user_spec.rb'
+
+RSpec/MessageSpies:
+  Exclude:
+    - 'spec/db/migrate/check_for_object_attributes_spec.rb'
+    - 'spec/db/migrate/issue_1660_fix_tree_select_configurations_spec.rb'
+    - 'spec/db/migrate/issue_1905_exchange_login_from_remote_id_spec.rb'
+    - 'spec/db/migrate/object_manager_attribute_date_remove_future_past_spec.rb'
+    - 'spec/jobs/app_version_restart_job_spec.rb'
+    - 'spec/jobs/search_index_job_spec.rb'
+    - 'spec/jobs/sla_ticket_rebuild_escalation_job_spec.rb'
+    - 'spec/lib/import/base_factory_examples.rb'
+    - 'spec/lib/import/helper_spec.rb'
+    - 'spec/lib/import/otrs/article/attachment_factory_spec.rb'
+    - 'spec/lib/import/otrs/article_customer_spec.rb'
+    - 'spec/lib/import/otrs/article_spec.rb'
+    - 'spec/lib/import/otrs/customer_spec.rb'
+    - 'spec/lib/import/otrs/customer_user_spec.rb'
+    - 'spec/lib/import/otrs/dynamic_field_examples.rb'
+    - 'spec/lib/import/otrs/dynamic_field_factory_spec.rb'
+    - 'spec/lib/import/otrs/dynamic_field_spec.rb'
+    - 'spec/lib/import/otrs/history_examples.rb'
+    - 'spec/lib/import/otrs/priority_factory_spec.rb'
+    - 'spec/lib/import/otrs/priority_spec.rb'
+    - 'spec/lib/import/otrs/queue_spec.rb'
+    - 'spec/lib/import/otrs/requester_spec.rb'
+    - 'spec/lib/import/otrs/state_factory_spec.rb'
+    - 'spec/lib/import/otrs/state_spec.rb'
+    - 'spec/lib/import/otrs/ticket_spec.rb'
+    - 'spec/lib/import/otrs/user_factory_spec.rb'
+    - 'spec/lib/import/otrs/user_spec.rb'
+    - 'spec/lib/import/zendesk/object_attribute/base_examples.rb'
+    - 'spec/lib/import/zendesk/object_attribute/checkbox_spec.rb'
+    - 'spec/lib/import/zendesk/object_attribute/date_spec.rb'
+    - 'spec/lib/import/zendesk/object_attribute/decimal_spec.rb'
+    - 'spec/lib/import/zendesk/object_attribute/dropdown_spec.rb'
+    - 'spec/lib/import/zendesk/object_attribute/integer_spec.rb'
+    - 'spec/lib/import/zendesk/object_attribute/regexp_spec.rb'
+    - 'spec/lib/import/zendesk/object_attribute/tagger_spec.rb'
+    - 'spec/lib/import/zendesk/object_attribute/text_spec.rb'
+    - 'spec/lib/import/zendesk/object_attribute/textarea_spec.rb'
+    - 'spec/lib/ldap/group_spec.rb'
+    - 'spec/lib/ldap/guid_spec.rb'
+    - 'spec/lib/ldap/user_spec.rb'
+    - 'spec/lib/ldap_spec.rb'
+    - 'spec/lib/sequencer/sequence/import/ldap/users_spec.rb'
+    - 'spec/lib/sequencer/unit/common/attribute_mapper_spec.rb'
+    - 'spec/lib/sequencer/unit/import/common/mapping/flat_keys_spec.rb'
+    - 'spec/lib/sequencer/unit/import/common/model/attributes/remote_id_spec.rb'
+    - 'spec/lib/sequencer/unit/import/common/model/reset_primary_key_sequence_spec.rb'
+    - 'spec/lib/sequencer/unit/import/common/model/save_spec.rb'
+    - 'spec/lib/sequencer/unit/import/common/object_attribute/sanitized_name_spec.rb'
+    - 'spec/lib/sequencer/unit/import/zendesk/sub_sequence/base_examples.rb'
+    - 'spec/lib/sequencer/unit/import/zendesk/ticket/comment/attachment/request_spec.rb'
+    - 'spec/models/application_model/can_lookup_examples.rb'
+    - 'spec/models/channel/driver/twitter_spec.rb'
+    - 'spec/models/channel/email_parser_spec.rb'
+    - 'spec/models/concerns/has_groups_examples.rb'
+    - 'spec/models/concerns/has_history_examples.rb'
+    - 'spec/models/concerns/has_roles_examples.rb'
+    - 'spec/models/concerns/has_tags_examples.rb'
+    - 'spec/models/cti/caller_id_spec.rb'
+    - 'spec/models/cti/log_spec.rb'
+    - 'spec/models/import_job_spec.rb'
+    - 'spec/models/object_manager/attribute/validation/backend_spec.rb'
+    - 'spec/models/object_manager/attribute/validation_spec.rb'
+    - 'spec/models/observer/ticket/article/communicate_twitter_spec.rb'
+    - 'spec/models/scheduler_spec.rb'
+    - 'spec/models/ticket/number_spec.rb'
+    - 'spec/models/ticket_spec.rb'
+    - 'spec/models/user_spec.rb'
+    - 'spec/system/system/translations_spec.rb'
+
+RSpec/MultipleExpectations:
+  Exclude:
+    - 'spec/db/migrate/20171023000001_fixed_store_upgrade_ror_45_spec.rb'
+    - 'spec/db/migrate/check_for_object_attributes_spec.rb'
+    - 'spec/db/migrate/issue_1660_fix_tree_select_configurations_spec.rb'
+    - 'spec/db/migrate/issue_1905_exchange_login_from_remote_id_spec.rb'
+    - 'spec/db/migrate/object_manager_attribute_date_remove_future_past_spec.rb'
+    - 'spec/db/migrate/rename_locale_on_users_spec.rb'
+    - 'spec/jobs/communicate_twitter_job_spec.rb'
+    - 'spec/jobs/concerns/has_active_job_lock_spec.rb'
+    - 'spec/jobs/migrate_ldap_samaccountname_to_uid_job_spec.rb'
+    - 'spec/jobs/search_index_job_spec.rb'
+    - 'spec/jobs/ticket_user_ticket_counter_job_spec.rb'
+    - 'spec/lib/cache_spec.rb'
+    - 'spec/lib/core_ext/string_spec.rb'
+    - 'spec/lib/email_address_validation_spec.rb'
+    - 'spec/lib/external_sync_spec.rb'
+    - 'spec/lib/html_sanitizer_spec.rb'
+    - 'spec/lib/import/base_factory_examples.rb'
+    - 'spec/lib/import/helper_spec.rb'
+    - 'spec/lib/import/import_job_backend_examples.rb'
+    - 'spec/lib/import/ldap_spec.rb'
+    - 'spec/lib/import/otrs/article_customer_spec.rb'
+    - 'spec/lib/import/otrs/customer_spec.rb'
+    - 'spec/lib/import/otrs/dynamic_field_spec.rb'
+    - 'spec/lib/import/otrs/history_examples.rb'
+    - 'spec/lib/import/otrs/priority_factory_spec.rb'
+    - 'spec/lib/import/otrs/requester_spec.rb'
+    - 'spec/lib/import/otrs/state_factory_spec.rb'
+    - 'spec/lib/import/zendesk/object_attribute/base_examples.rb'
+    - 'spec/lib/import/zendesk/object_attribute/checkbox_spec.rb'
+    - 'spec/lib/import/zendesk/object_attribute/date_spec.rb'
+    - 'spec/lib/import/zendesk/object_attribute/decimal_spec.rb'
+    - 'spec/lib/import/zendesk/object_attribute/dropdown_spec.rb'
+    - 'spec/lib/import/zendesk/object_attribute/integer_spec.rb'
+    - 'spec/lib/import/zendesk/object_attribute/regexp_spec.rb'
+    - 'spec/lib/import/zendesk/object_attribute/tagger_spec.rb'
+    - 'spec/lib/import/zendesk/object_attribute/text_spec.rb'
+    - 'spec/lib/import/zendesk/object_attribute/textarea_spec.rb'
+    - 'spec/lib/ldap/group_spec.rb'
+    - 'spec/lib/ldap/guid_spec.rb'
+    - 'spec/lib/ldap/user_spec.rb'
+    - 'spec/lib/ldap_spec.rb'
+    - 'spec/lib/notification_factory/mailer_spec.rb'
+    - 'spec/lib/password_hash_spec.rb'
+    - 'spec/lib/secure_mailing/smime_spec.rb'
+    - 'spec/lib/sequencer/sequence/import/ldap/users_spec.rb'
+    - 'spec/lib/sequencer/unit/common/attribute_mapper_spec.rb'
+    - 'spec/lib/sequencer/unit/import/common/mapping/flat_keys_spec.rb'
+    - 'spec/lib/sequencer/unit/import/common/model/associations/assign_spec.rb'
+    - 'spec/lib/sequencer/unit/import/common/model/attributes/remote_id_spec.rb'
+    - 'spec/lib/sequencer/unit/import/common/object_attribute/sanitized_name_spec.rb'
+    - 'spec/lib/sequencer/unit/import/ldap/user/attributes/role_ids/unassigned_spec.rb'
+    - 'spec/lib/sequencer/unit/import/ldap/users/lost/deactivate_spec.rb'
+    - 'spec/lib/sequencer/unit/import/zendesk/sub_sequence/base_examples.rb'
+    - 'spec/lib/sessions/event/chat_session_start_spec.rb'
+    - 'spec/lib/sessions/event/chat_transfer_spec.rb'
+    - 'spec/lib/upload_cache_spec.rb'
+    - 'spec/lib/user_info_spec.rb'
+    - 'spec/models/application_model/can_lookup_examples.rb'
+    - 'spec/models/calendar_spec.rb'
+    - 'spec/models/channel/driver/sms/twilio_spec.rb'
+    - 'spec/models/channel/driver/twitter_spec.rb'
+    - 'spec/models/channel/email_parser_spec.rb'
+    - 'spec/models/concerns/has_groups_examples.rb'
+    - 'spec/models/concerns/has_history_examples.rb'
+    - 'spec/models/cti/caller_id_spec.rb'
+    - 'spec/models/cti/log_spec.rb'
+    - 'spec/models/history_spec.rb'
+    - 'spec/models/import_job_spec.rb'
+    - 'spec/models/job_spec.rb'
+    - 'spec/models/object_lookup_spec.rb'
+    - 'spec/models/object_manager/attribute/validation/backend_spec.rb'
+    - 'spec/models/object_manager/attribute/validation_spec.rb'
+    - 'spec/models/object_manager/attribute_spec.rb'
+    - 'spec/models/overview_spec.rb'
+    - 'spec/models/scheduler_spec.rb'
+    - 'spec/models/session_spec.rb'
+    - 'spec/models/sla/has_escalation_calculation_impact_examples.rb'
+    - 'spec/models/smime_certificate_spec.rb'
+    - 'spec/models/store/file_spec.rb'
+    - 'spec/models/store/provider/file_spec.rb'
+    - 'spec/models/store_spec.rb'
+    - 'spec/models/taskbar_spec.rb'
+    - 'spec/models/ticket/article_spec.rb'
+    - 'spec/models/ticket/article/has_ticket_contact_attributes_impact_examples.rb'
+    - 'spec/models/ticket/escalation_examples.rb'
+    - 'spec/models/ticket/number/increment_spec.rb'
+    - 'spec/models/ticket/number_spec.rb'
+    - 'spec/models/ticket/overviews_spec.rb'
+    - 'spec/models/ticket_spec.rb'
+    - 'spec/models/translation_spec.rb'
+    - 'spec/models/trigger_spec.rb'
+    - 'spec/models/type_lookup_spec.rb'
+    - 'spec/models/user_spec.rb'
+    - 'spec/requests/api_auth_from_spec.rb'
+    - 'spec/requests/api_auth_spec.rb'
+    - 'spec/requests/calendar_spec.rb'
+    - 'spec/requests/error_spec.rb'
+    - 'spec/requests/external_credentials_spec.rb'
+    - 'spec/requests/form_spec.rb'
+    - 'spec/requests/integration/check_mk_spec.rb'
+    - 'spec/requests/integration/cti_spec.rb'
+    - 'spec/requests/integration/idoit_spec.rb'
+    - 'spec/requests/integration/github_spec.rb'
+    - 'spec/requests/integration/gitlab_spec.rb'
+    - 'spec/requests/integration/monitoring_spec.rb'
+    - 'spec/requests/integration/object_manager_attributes_spec.rb'
+    - 'spec/requests/integration/placetel_spec.rb'
+    - 'spec/requests/integration/sipgate_spec.rb'
+    - 'spec/requests/integration/smime_spec.rb'
+    - 'spec/requests/integration/telegram_spec.rb'
+    - 'spec/requests/integration/twilio_sms_spec.rb'
+    - 'spec/requests/integration/message_bird_sms_spec.rb'
+    - 'spec/requests/integration/user_device_spec.rb'
+    - 'spec/requests/links_spec.rb'
+    - 'spec/requests/long_polling_spec.rb'
+    - 'spec/requests/o_auth_spec.rb'
+    - 'spec/requests/organization_spec.rb'
+    - 'spec/requests/overview_spec.rb'
+    - 'spec/requests/package_spec.rb'
+    - 'spec/requests/report_spec.rb'
+    - 'spec/requests/search_spec.rb'
+    - 'spec/requests/session_spec.rb'
+    - 'spec/requests/settings_spec.rb'
+    - 'spec/requests/sla_spec.rb'
+    - 'spec/requests/tag_spec.rb'
+    - 'spec/requests/taskbar_spec.rb'
+    - 'spec/requests/text_module_spec.rb'
+    - 'spec/requests/ticket/article_attachments_spec.rb'
+    - 'spec/requests/ticket/article_spec.rb'
+    - 'spec/requests/ticket/escalation_spec.rb'
+    - 'spec/requests/ticket_spec.rb'
+    - 'spec/requests/time_accounting_spec.rb'
+    - 'spec/requests/user/organization_spec.rb'
+    - 'spec/requests/user/permission_spec.rb'
+    - 'spec/requests/user_spec.rb'
+    - 'spec/system/**/*'
+
+RSpec/NamedSubject:
+  Exclude:
+    - 'spec/db/migrate/issue_2019_fix_double_domain_links_in_trigger_emails_spec.rb'
+    - 'spec/db/migrate/issue_2541_fix_notification_email_without_body_spec.rb'
+    - 'spec/lib/core_ext/string_spec.rb'
+    - 'spec/lib/import/exchange/folder_spec.rb'
+    - 'spec/lib/ldap/user_spec.rb'
+    - 'spec/lib/sequencer/unit/import/ldap/user/attributes/role_ids/unassigned_spec.rb'
+    - 'spec/lib/sessions/backend/activity_stream_spec.rb'
+    - 'spec/lib/upload_cache_spec.rb'
+    - 'spec/models/channel/filter/match/email_regex_spec.rb'
+    - 'spec/models/http_log_spec.rb'
+    - 'spec/models/object_manager/attribute/validation/backend_spec.rb'
+    - 'spec/models/object_manager/attribute/validation/future_past_spec.rb'
+    - 'spec/models/object_manager/attribute/validation/required_spec.rb'
+    - 'spec/models/object_manager/attribute/validation_spec.rb'
+    - 'spec/models/object_manager/attribute_spec.rb'
+
+RSpec/NestedGroups:
+  Exclude:
+    - 'app/models/user/avatar.rb'
+    - 'spec/lib/secure_mailing/smime_spec.rb'
+    - 'spec/models/channel/driver/twitter_spec.rb'
+    - 'spec/models/channel/email_parser_spec.rb'
+    - 'spec/models/job_spec.rb'
+    - 'spec/models/store/file_spec.rb'
+    - 'spec/models/store/provider/file_spec.rb'
+    - 'spec/models/store_spec.rb'
+    - 'spec/models/token_spec.rb'
+    - 'spec/models/trigger_spec.rb'
+    - 'spec/models/user/has_ticket_create_screen_impact_examples.rb'
+    - 'spec/models/user_spec.rb'
+    - 'spec/requests/links_spec.rb'
+    - 'spec/system/ticket/create_spec.rb'
+
+RSpec/RepeatedDescription:
+  Exclude:
+    - 'spec/models/translation_spec.rb'
+    - 'spec/requests/form_spec.rb'
+    - 'spec/requests/ticket_spec.rb'
+
+RSpec/ScatteredLet:
+  Exclude:
+    - 'spec/models/job_spec.rb'
+    - 'spec/models/ticket_spec.rb'
+    - 'spec/requests/integration/twitter_webhook_spec.rb'
+
+RSpec/ScatteredSetup:
+  Exclude:
+    - 'spec/models/ticket_spec.rb'
+    - 'spec/models/user_spec.rb'
+    - 'spec/requests/upload_cache_spec.rb'
+
+RSpec/SubjectStub:
+  Exclude:
+    - 'spec/lib/import/exchange/folder_spec.rb'
+    - 'spec/models/concerns/has_groups_examples.rb'
+    - 'spec/models/concerns/has_roles_examples.rb'
+    - 'spec/models/job_spec.rb'
+    - 'spec/models/object_manager/attribute/validation/future_past_spec.rb'
+    - 'spec/models/object_manager/attribute/validation/required_spec.rb'
+
+RSpec/VerifiedDoubles:
+  Exclude:
+    - 'spec/db/migrate/issue_2460_fix_corrupted_twitter_ids_spec.rb'
+    - 'spec/jobs/communicate_twitter_job_spec.rb'
+    - 'spec/lib/external_sync_spec.rb'
+    - 'spec/lib/import/zendesk/object_attribute/base_examples.rb'
+    - 'spec/lib/import/zendesk/object_attribute/checkbox_spec.rb'
+    - 'spec/lib/import/zendesk/object_attribute/date_spec.rb'
+    - 'spec/lib/import/zendesk/object_attribute/decimal_spec.rb'
+    - 'spec/lib/import/zendesk/object_attribute/dropdown_spec.rb'
+    - 'spec/lib/import/zendesk/object_attribute/integer_spec.rb'
+    - 'spec/lib/import/zendesk/object_attribute/regexp_spec.rb'
+    - 'spec/lib/import/zendesk/object_attribute/tagger_spec.rb'
+    - 'spec/lib/import/zendesk/object_attribute/text_spec.rb'
+    - 'spec/lib/import/zendesk/object_attribute/textarea_spec.rb'
+    - 'spec/lib/ldap_spec.rb'
+    - 'spec/lib/sequencer/sequence/import/ldap/users_spec.rb'
+    - 'spec/lib/sequencer/unit/import/zendesk/sub_sequence/base_examples.rb'
+    - 'spec/lib/sequencer/unit/import/zendesk/ticket/comment/attachment/request_spec.rb'
+    - 'spec/lib/sequencer/unit/import/zendesk/ticket/comment/source_based_spec.rb'
+    - 'spec/models/ticket/number_spec.rb'
+
+RSpec/MultipleMemoizedHelpers:
+  Description: Checks if example groups contain too many `let` and `subject` calls.
+  Enabled: false
+  StyleGuide: https://www.rubydoc.info/gems/rubocop-rspec/RuboCop/Cop/RSpec/MultipleMemoizedHelpers

.rubocop/todo.yml

@@ -0,0 +1,951 @@
+Style/Documentation:
+  Enabled: false
+
+Lint/MissingCopEnableDirective:
+  Exclude:
+    - 'lib/import/factory.rb'
+    - 'lib/import/helper.rb'
+    - 'lib/import/otrs/async.rb'
+    - 'lib/import/otrs/history.rb'
+    - 'lib/import/otrs/priority_factory.rb'
+    - 'lib/import/otrs/state_factory.rb'
+    - 'lib/import/otrs/user_factory.rb'
+    - 'lib/import/transaction_factory.rb'
+
+Metrics/AbcSize:
+  Exclude:
+    - 'app/controllers/activity_stream_controller.rb'
+    - 'app/controllers/application_controller/authenticates.rb'
+    - 'app/controllers/application_controller/handles_devices.rb'
+    - 'app/controllers/application_controller/handles_errors.rb'
+    - 'app/controllers/application_controller/has_user.rb'
+    - 'app/controllers/application_controller/logs_http_access.rb'
+    - 'app/controllers/application_controller/prevents_csrf.rb'
+    - 'app/controllers/application_controller/renders_models.rb'
+    - 'app/controllers/applications_controller.rb'
+    - 'app/controllers/attachments_controller.rb'
+    - 'app/controllers/channels_email_controller.rb'
+    - 'app/controllers/channels_google_controller.rb'
+    - 'app/controllers/channels_microsoft365_controller.rb'
+    - 'app/controllers/channels_sms_controller.rb'
+    - 'app/controllers/channels_telegram_controller.rb'
+    - 'app/controllers/channels_twitter_controller.rb'
+    - 'app/controllers/concerns/checks_user_attributes_by_current_user_permission.rb'
+    - 'app/controllers/concerns/creates_ticket_articles.rb'
+    - 'app/controllers/concerns/ticket_stats.rb'
+    - 'app/controllers/first_steps_controller.rb'
+    - 'app/controllers/form_controller.rb'
+    - 'app/controllers/getting_started_controller.rb'
+    - 'app/controllers/import_otrs_controller.rb'
+    - 'app/controllers/import_zendesk_controller.rb'
+    - 'app/controllers/import_freshdesk_controller.rb'
+    - 'app/controllers/integration/check_mk_controller.rb'
+    - 'app/controllers/integration/cti_controller.rb'
+    - 'app/controllers/integration/idoit_controller.rb'
+    - 'app/controllers/integration/placetel_controller.rb'
+    - 'app/controllers/integration/sipgate_controller.rb'
+    - 'app/controllers/integration/smime_controller.rb'
+    - 'app/controllers/knowledge_base/answers_controller.rb'
+    - 'app/controllers/knowledge_base/categories_controller.rb'
+    - 'app/controllers/knowledge_base/manage_controller.rb'
+    - 'app/controllers/knowledge_base/public/answers_controller.rb'
+    - 'app/controllers/knowledge_base/public/categories_controller.rb'
+    - 'app/controllers/knowledge_base/search_controller.rb'
+    - 'app/controllers/knowledge_bases_controller.rb'
+    - 'app/controllers/links_controller.rb'
+    - 'app/controllers/long_polling_controller.rb'
+    - 'app/controllers/monitoring_controller.rb'
+    - 'app/controllers/object_manager_attributes_controller.rb'
+    - 'app/controllers/online_notifications_controller.rb'
+    - 'app/controllers/organizations_controller.rb'
+    - 'app/controllers/recent_view_controller.rb'
+    - 'app/controllers/reports_controller.rb'
+    - 'app/controllers/search_controller.rb'
+    - 'app/controllers/sessions_controller.rb'
+    - 'app/controllers/settings_controller.rb'
+    - 'app/controllers/text_modules_controller.rb'
+    - 'app/controllers/ticket_articles_controller.rb'
+    - 'app/controllers/ticket_overviews_controller.rb'
+    - 'app/controllers/tickets_controller.rb'
+    - 'app/controllers/time_accountings_controller.rb'
+    - 'app/controllers/upload_caches_controller.rb'
+    - 'app/controllers/user_access_token_controller.rb'
+    - 'app/controllers/user_devices_controller.rb'
+    - 'app/controllers/users_controller.rb'
+    - 'app/helpers/knowledge_base_rich_text_helper.rb'
+    - 'app/jobs/collection_update_job.rb'
+    - 'app/jobs/communicate_facebook_job.rb'
+    - 'app/jobs/communicate_sms_job.rb'
+    - 'app/jobs/communicate_telegram_job.rb'
+    - 'app/jobs/communicate_twitter_job.rb'
+    - 'app/jobs/concerns/has_active_job_lock.rb'
+    - 'app/jobs/imap_authentication_migration_cleanup_job.rb'
+    - 'app/jobs/migrate_ldap_samaccountname_to_uid_job.rb'
+    - 'app/jobs/ticket_article_communicate_email_job.rb'
+    - 'app/jobs/ticket_user_ticket_counter_job.rb'
+    - 'app/models/activity_stream.rb'
+    - 'app/models/activity_stream/assets.rb'
+    - 'app/models/application_model/can_activity_stream_log.rb'
+    - 'app/models/application_model/can_assets.rb'
+    - 'app/models/application_model/can_associations.rb'
+    - 'app/models/application_model/can_cleanup_param.rb'
+    - 'app/models/application_model/can_creates_and_updates.rb'
+    - 'app/models/application_model/can_lookup.rb'
+    - 'app/models/application_model/can_lookup_search_index_attributes.rb'
+    - 'app/models/application_model/checks_attribute_values_and_length.rb'
+    - 'app/models/application_model/checks_user_columns_fillup.rb'
+    - 'app/models/application_model/has_attachments.rb'
+    - 'app/models/application_model/has_cache.rb'
+    - 'app/models/authorization.rb'
+    - 'app/models/avatar.rb'
+    - 'app/models/calendar.rb'
+    - 'app/models/channel.rb'
+    - 'app/models/channel/assets.rb'
+    - 'app/models/channel/driver/facebook.rb'
+    - 'app/models/channel/driver/imap.rb'
+    - 'app/models/channel/driver/pop3.rb'
+    - 'app/models/channel/driver/sendmail.rb'
+    - 'app/models/channel/driver/smtp.rb'
+    - 'app/models/channel/driver/twitter.rb'
+    - 'app/models/channel/email_build.rb'
+    - 'app/models/channel/email_parser.rb'
+    - 'app/models/channel/filter/auto_response_check.rb'
+    - 'app/models/channel/filter/bounce_delivery_permanent_failed.rb'
+    - 'app/models/channel/filter/bounce_follow_up_check.rb'
+    - 'app/models/channel/filter/database.rb'
+    - 'app/models/channel/filter/follow_up_check.rb'
+    - 'app/models/channel/filter/follow_up_merged.rb'
+    - 'app/models/channel/filter/follow_up_possible_check.rb'
+    - 'app/models/channel/filter/identify_sender.rb'
+    - 'app/models/channel/filter/monitoring_base.rb'
+    - 'app/models/channel/filter/out_of_office_check.rb'
+    - 'app/models/channel/filter/own_notification_loop_detection.rb'
+    - 'app/models/channel/filter/reply_to_based_sender.rb'
+    - 'app/models/channel/filter/sender_is_system_address.rb'
+    - 'app/models/chat.rb'
+    - 'app/models/chat/session.rb'
+    - 'app/models/chat/session/assets.rb'
+    - 'app/models/chat/session/search.rb'
+    - 'app/models/concerns/can_clone_attachments.rb'
+    - 'app/models/concerns/can_csv_import.rb'
+    - 'app/models/concerns/checks_condition_validation.rb'
+    - 'app/models/concerns/has_group_relation_definition.rb'
+    - 'app/models/concerns/has_groups.rb'
+    - 'app/models/concerns/has_history.rb'
+    - 'app/models/concerns/has_rich_text.rb'
+    - 'app/models/concerns/has_search_index_backend.rb'
+    - 'app/models/concerns/has_search_sortable.rb'
+    - 'app/models/cti/caller_id.rb'
+    - 'app/models/cti/driver/base.rb'
+    - 'app/models/cti/driver/placetel.rb'
+    - 'app/models/cti/driver/sipgate_io.rb'
+    - 'app/models/cti/log.rb'
+    - 'app/models/external_sync.rb'
+    - 'app/models/history.rb'
+    - 'app/models/import_job.rb'
+    - 'app/models/job.rb'
+    - 'app/models/job/assets.rb'
+    - 'app/models/karma/activity_log.rb'
+    - 'app/models/knowledge_base.rb'
+    - 'app/models/knowledge_base/answer.rb'
+    - 'app/models/knowledge_base/category.rb'
+    - 'app/models/knowledge_base/search.rb'
+    - 'app/models/link.rb'
+    - 'app/models/object_manager/attribute.rb'
+    - 'app/models/online_notification.rb'
+    - 'app/models/online_notification/assets.rb'
+    - 'app/models/organization/assets.rb'
+    - 'app/models/organization/search.rb'
+    - 'app/models/overview.rb'
+    - 'app/models/overview/assets.rb'
+    - 'app/models/package.rb'
+    - 'app/models/package/migration.rb'
+    - 'app/models/postmaster_filter.rb'
+    - 'app/models/recent_view.rb'
+    - 'app/models/recent_view/assets.rb'
+    - 'app/models/report.rb'
+    - 'app/models/role.rb'
+    - 'app/models/role/assets.rb'
+    - 'app/models/scheduler.rb'
+    - 'app/models/setting.rb'
+    - 'app/models/sla/assets.rb'
+    - 'app/models/smime_certificate.rb'
+    - 'app/models/store.rb'
+    - 'app/models/store/file.rb'
+    - 'app/models/store/provider/file.rb'
+    - 'app/models/tag.rb'
+    - 'app/models/tag/item.rb'
+    - 'app/models/taskbar.rb'
+    - 'app/models/text_module.rb'
+    - 'app/models/ticket.rb'
+    - 'app/models/ticket/article.rb'
+    - 'app/models/ticket/article/adds_metadata_email.rb'
+    - 'app/models/ticket/article/adds_metadata_general.rb'
+    - 'app/models/ticket/article/adds_metadata_origin_by_id.rb'
+    - 'app/models/ticket/article/assets.rb'
+    - 'app/models/ticket/article/enqueue_communicate_email_job.rb'
+    - 'app/models/ticket/article/enqueue_communicate_facebook_job.rb'
+    - 'app/models/ticket/article/enqueue_communicate_sms_job.rb'
+    - 'app/models/ticket/article/enqueue_communicate_telegram_job.rb'
+    - 'app/models/ticket/article/enqueue_communicate_twitter_job.rb'
+    - 'app/models/ticket/article/has_ticket_contact_attributes_impact.rb'
+    - 'app/models/ticket/article/resets_ticket_state.rb'
+    - 'app/models/ticket/assets.rb'
+    - 'app/models/ticket/escalation.rb'
+    - 'app/models/ticket/number/date.rb'
+    - 'app/models/ticket/number/increment.rb'
+    - 'app/models/ticket/overviews.rb'
+    - 'app/models/ticket/priority.rb'
+    - 'app/models/ticket/screen_options.rb'
+    - 'app/models/ticket/search.rb'
+    - 'app/models/ticket/search_index.rb'
+    - 'app/models/ticket/sets_last_owner_update_time.rb'
+    - 'app/models/ticket/state.rb'
+    - 'app/models/ticket/subject.rb'
+    - 'app/models/ticket/touches_associations.rb'
+    - 'app/models/token.rb'
+    - 'app/models/transaction.rb'
+    - 'app/models/transaction/clearbit_enrichment.rb'
+    - 'app/models/transaction/cti_caller_id_detection.rb'
+    - 'app/models/transaction/karma.rb'
+    - 'app/models/transaction/notification.rb'
+    - 'app/models/transaction/signature_detection.rb'
+    - 'app/models/transaction/slack.rb'
+    - 'app/models/translation.rb'
+    - 'app/models/trigger/assets.rb'
+    - 'app/models/user.rb'
+    - 'app/models/user/assets.rb'
+    - 'app/models/user/performs_geo_lookup.rb'
+    - 'app/models/user/search.rb'
+    - 'app/models/user/search_index.rb'
+    - 'app/models/user_device.rb'
+    - 'app/policies/controllers/external_credentials_controller_policy.rb'
+    - 'app/policies/ticket/article_policy.rb'
+    - 'app/policies/ticket_policy.rb'
+    - 'db/migrate/20120101000001_create_base.rb'
+    - 'db/migrate/20120101000010_create_ticket.rb'
+    - 'db/migrate/20150979000001_update_timestamps.rb'
+    - 'db/migrate/20160217000001_object_manager_update_user.rb'
+    - 'db/migrate/20161101131409_create_doorkeeper_tables.rb'
+    - 'db/migrate/20161117000001_job_unable_to_create_issue_432.rb'
+    - 'db/migrate/20161117000002_ticket_number_generator_issue_427.rb'
+    - 'db/migrate/20170113000001_object_manager_attribute_create_middle.rb'
+    - 'db/migrate/20170113000002_slack_group_config_issue_587.rb'
+    - 'db/migrate/20170116000001_add_ticket_time_accounting_373.rb'
+    - 'db/migrate/20170116000002_fixed_typos_622.rb'
+    - 'db/migrate/20170207081400_ticket_state_priority_defaults.rb'
+    - 'db/migrate/20170403000001_fixed_admin_user_permission_920.rb'
+    - 'db/migrate/20170419000001_ldap_support.rb'
+    - 'db/migrate/20170419000002_overview_role_ids.rb'
+    - 'db/migrate/20170516000001_trigger_recipient_update.rb'
+    - 'db/migrate/20170608151442_enhanced_permissions.rb'
+    - 'db/migrate/20170713000002_ticket_zoom_setting2.rb'
+    - 'db/migrate/20170905140038_cti_log_preferences_migration.rb'
+    - 'db/migrate/20170910000002_out_of_office2.rb'
+    - 'db/migrate/20171023000001_fixed_store_upgrade_ror_45.rb'
+    - 'db/migrate/20180226085743_issue_1660_fix_tree_select_configurations.rb'
+    - 'db/migrate/20180410000001_cleanup_user_preferences_notification_sound2.rb'
+    - 'db/migrate/20180426134922_issue_1977_remove_invalid_user_foreign_keys.rb'
+    - 'db/migrate/20180716060129_issue_2019_fix_double_domain_links_in_trigger_emails.rb'
+    - 'db/migrate/20180806000001_fixed_twitter_ticket_article_preferences7.rb'
+    - 'db/migrate/20180809000001_cti_generic_api.rb'
+    - 'db/migrate/20181017000001_cti_generic_api2.rb'
+    - 'db/migrate/20181123000000_issue_2368_add_indices_to_histories_and_tickets.rb'
+    - 'db/migrate/20190408000001_issue_2541_fix_notification_email_without_body.rb'
+    - 'db/migrate/20190409000001_setting_ticket_overview_priority_icon_and_color.rb'
+    - 'db/migrate/20190531180304_initialize_knowledge_base.rb'
+    - 'db/migrate/20190724000001_rename_reserved_words.rb'
+    - 'db/migrate/20191107050249_issue_2460_fix_corrupted_twitter_ids.rb'
+    - 'db/migrate/20200121000001_smime_support.rb'
+    - 'lib/auto_wizard.rb'
+    - 'lib/calendar_subscriptions.rb'
+    - 'lib/calendar_subscriptions/tickets.rb'
+    - 'lib/core_ext/active_record/connection_adapters/postgresql/schema_statements.rb'
+    - 'lib/core_ext/string.rb'
+    - 'lib/email_helper/probe.rb'
+    - 'lib/email_helper/verify.rb'
+    - 'lib/enrichment/clearbit/user.rb'
+    - 'lib/excel_sheet.rb'
+    - 'lib/excel_sheet/ticket.rb'
+    - 'lib/external_credential/facebook.rb'
+    - 'lib/external_credential/google.rb'
+    - 'lib/external_credential/microsoft365.rb'
+    - 'lib/external_credential/twitter.rb'
+    - 'lib/facebook.rb'
+    - 'lib/fill_db.rb'
+    - 'lib/html_sanitizer.rb'
+    - 'lib/idoit.rb'
+    - 'lib/import/exchange/item_attributes.rb'
+    - 'lib/import/otrs.rb'
+    - 'lib/import/otrs/article/attachment_factory.rb'
+    - 'lib/import/otrs/async.rb'
+    - 'lib/import/otrs/requester.rb'
+    - 'lib/import/otrs/state_factory.rb'
+    - 'lib/import/otrs/user.rb'
+    - 'lib/knowledge_base/menu_item_update_action.rb'
+    - 'lib/ldap/group.rb'
+    - 'lib/ldap/user.rb'
+    - 'lib/models.rb'
+    - 'lib/notification_factory/mailer.rb'
+    - 'lib/notification_factory/renderer.rb'
+    - 'lib/notification_factory/slack.rb'
+    - 'lib/push_messages.rb'
+    - 'lib/report/article_by_type_sender.rb'
+    - 'lib/report/base.rb'
+    - 'lib/report/ticket_backlog.rb'
+    - 'lib/report/ticket_first_solution.rb'
+    - 'lib/report/ticket_generic_time.rb'
+    - 'lib/report/ticket_moved.rb'
+    - 'lib/report/ticket_reopened.rb'
+    - 'lib/search_index_backend.rb'
+    - 'lib/secure_mailing/smime/incoming.rb'
+    - 'lib/secure_mailing/smime/outgoing.rb'
+    - 'lib/secure_mailing/smime/retry.rb'
+    - 'lib/sequencer.rb'
+    - 'lib/sequencer/state.rb'
+    - 'lib/sequencer/unit/exchange/folders/id_path_map.rb'
+    - 'lib/sequencer/unit/import/common/model/associations/extract.rb'
+    - 'lib/sequencer/unit/import/exchange/attribute_examples.rb'
+    - 'lib/sequencer/unit/import/exchange/folder_contacts/sub_sequence.rb'
+    - 'lib/sequencer/unit/import/ldap/user/attributes/role_ids/unassigned.rb'
+    - 'lib/sequencer/unit/import/ldap/users/sub_sequence.rb'
+    - 'lib/sequencer/unit/import/zendesk/sub_sequence/base.rb'
+    - 'lib/sequencer/unit/import/zendesk/ticket/comment/mapping.rb'
+    - 'lib/sequencer/unit/import/zendesk/ticket/mapping.rb'
+    - 'lib/sequencer/unit/import/zendesk/user/mapping.rb'
+    - 'lib/sequencer/units/attributes.rb'
+    - 'lib/service/geo_calendar/zammad.rb'
+    - 'lib/service/geo_ip/zammad.rb'
+    - 'lib/service/geo_location/gmaps.rb'
+    - 'lib/session_helper/collection_base.rb'
+    - 'lib/session_helper/collection_ticket.rb'
+    - 'lib/sessions.rb'
+    - 'lib/sessions/backend/activity_stream.rb'
+    - 'lib/sessions/backend/base.rb'
+    - 'lib/sessions/backend/ticket_overview_list.rb'
+    - 'lib/sessions/client.rb'
+    - 'lib/sessions/event.rb'
+    - 'lib/sessions/event/broadcast.rb'
+    - 'lib/sessions/event/chat_session_close.rb'
+    - 'lib/sessions/event/chat_session_init.rb'
+    - 'lib/sessions/event/chat_session_start.rb'
+    - 'lib/sessions/event/chat_session_update.rb'
+    - 'lib/sessions/event/chat_status_customer.rb'
+    - 'lib/sessions/event/login.rb'
+    - 'lib/sessions/event/spool.rb'
+    - 'lib/sessions/node.rb'
+    - 'lib/signature_detection.rb'
+    - 'lib/static_assets.rb'
+    - 'lib/stats.rb'
+    - 'lib/stats/ticket_channel_distribution.rb'
+    - 'lib/stats/ticket_escalation.rb'
+    - 'lib/stats/ticket_in_process.rb'
+    - 'lib/stats/ticket_load_measure.rb'
+    - 'lib/stats/ticket_reopen.rb'
+    - 'lib/stats/ticket_response_time.rb'
+    - 'lib/stats/ticket_waiting_time.rb'
+    - 'lib/tasks/search_index_es.rake'
+    - 'lib/telegram.rb'
+    - 'lib/transaction_dispatcher.rb'
+    - 'lib/twitter_sync.rb'
+    - 'lib/user_agent.rb'
+    - 'lib/websocket_server.rb'
+    - 'spec/**/*'
+    - 'test/**/*'
+
+Metrics/BlockLength:
+  Exclude:
+    - 'Gemfile'
+    - 'app/controllers/application_controller/authenticates.rb'
+    - 'app/controllers/reports_controller.rb'
+    - 'app/controllers/time_accountings_controller.rb'
+    - 'app/models/application_model/can_assets.rb'
+    - 'app/models/application_model/can_associations.rb'
+    - 'app/models/application_model/can_cleanup_param.rb'
+    - 'app/models/application_model/can_creates_and_updates.rb'
+    - 'app/models/application_model/can_lookup.rb'
+    - 'app/models/channel.rb'
+    - 'app/models/channel/driver/imap.rb'
+    - 'app/models/channel/driver/pop3.rb'
+    - 'app/models/channel/email_parser.rb'
+    - 'app/models/channel/filter/bounce_delivery_permanent_failed.rb'
+    - 'app/models/channel/filter/database.rb'
+    - 'app/models/channel/filter/identify_sender.rb'
+    - 'app/models/chat/session/search.rb'
+    - 'app/models/concerns/can_be_published.rb'
+    - 'app/models/concerns/can_clone_attachments.rb'
+    - 'app/models/concerns/can_csv_import.rb'
+    - 'app/models/concerns/has_groups.rb'
+    - 'app/models/concerns/has_history.rb'
+    - 'app/models/concerns/has_rich_text.rb'
+    - 'app/models/concerns/has_search_sortable.rb'
+    - 'app/models/job.rb'
+    - 'app/models/karma/activity_log.rb'
+    - 'app/models/knowledge_base/search.rb'
+    - 'app/models/object_manager/attribute.rb'
+    - 'app/models/observer/transaction.rb'
+    - 'app/models/organization/search.rb'
+    - 'app/models/package.rb'
+    - 'app/models/package/migration.rb'
+    - 'app/models/scheduler.rb'
+    - 'app/models/ticket.rb'
+    - 'app/models/ticket/overviews.rb'
+    - 'app/models/ticket/search.rb'
+    - 'app/models/ticket/search_index.rb'
+    - 'app/models/transaction/notification.rb'
+    - 'app/models/transaction/slack.rb'
+    - 'app/models/user/search.rb'
+    - 'config/environments/development.rb'
+    - 'config/initializers/omniauth.rb'
+    - 'config/routes/knowledge_base.rb'
+    - 'config/routes/user.rb'
+    - 'config/routes/test.rb'
+    - 'config/routes/ticket.rb'
+    - 'db/migrate/20120101000001_create_base.rb'
+    - 'db/migrate/20120101000010_create_ticket.rb'
+    - 'db/migrate/20180806000001_fixed_twitter_ticket_article_preferences7.rb'
+    - 'lib/can_be_published/state_machine.rb'
+    - 'lib/core_ext/string.rb'
+    - 'lib/email_helper.rb'
+    - 'lib/facebook.rb'
+    - 'lib/fill_db.rb'
+    - 'lib/html_sanitizer.rb'
+    - 'lib/notification_factory/renderer.rb'
+    - 'lib/report/ticket_first_solution.rb'
+    - 'lib/report/ticket_generic_time.rb'
+    - 'lib/report/ticket_moved.rb'
+    - 'lib/report/ticket_reopened.rb'
+    - 'lib/search_index_backend.rb'
+    - 'lib/sessions.rb'
+    - 'lib/sessions/backend/ticket_overview_list.rb'
+    - 'lib/sessions/client.rb'
+    - 'lib/tasks/search_index_es.rake'
+    - 'lib/tasks/zammad/ci/service/puma/start.rake'
+    - 'lib/transaction_dispatcher.rb'
+    - 'lib/twitter_sync.rb'
+    - 'script/websocket-server.rb'
+    - 'spec/**/*'
+    - 'test/**/*'
+
+Metrics/BlockNesting:
+  Exclude:
+    - 'app/controllers/import_otrs_controller.rb'
+    - 'app/controllers/time_accountings_controller.rb'
+    - 'app/models/avatar.rb'
+    - 'app/models/channel/filter/identify_sender.rb'
+    - 'app/models/chat.rb'
+    - 'app/models/concerns/has_history.rb'
+    - 'app/models/object_manager/attribute.rb'
+    - 'app/models/ticket.rb'
+    - 'app/models/transaction/karma.rb'
+    - 'app/models/transaction/notification.rb'
+    - 'app/models/transaction/slack.rb'
+    - 'lib/html_sanitizer.rb'
+    - 'lib/notification_factory/mailer.rb'
+    - 'lib/search_index_backend.rb'
+    - 'lib/twitter_sync.rb'
+    - 'test/browser_test_helper.rb'
+
+Metrics/CyclomaticComplexity:
+  Exclude:
+    - 'app/models/ticket.rb'
+    - 'app/controllers/application_controller/authenticates.rb'
+    - 'app/controllers/application_controller/handles_devices.rb'
+    - 'app/controllers/application_controller/handles_errors.rb'
+    - 'app/controllers/application_controller/logs_http_access.rb'
+    - 'app/controllers/application_controller/renders_models.rb'
+    - 'app/controllers/channels_email_controller.rb'
+    - 'app/controllers/channels_google_controller.rb'
+    - 'app/controllers/channels_microsoft365_controller.rb'
+    - 'app/controllers/channels_twitter_controller.rb'
+    - 'app/controllers/concerns/checks_user_attributes_by_current_user_permission.rb'
+    - 'app/controllers/concerns/creates_ticket_articles.rb'
+    - 'app/controllers/first_steps_controller.rb'
+    - 'app/controllers/form_controller.rb'
+    - 'app/controllers/getting_started_controller.rb'
+    - 'app/controllers/import_otrs_controller.rb'
+    - 'app/controllers/import_zendesk_controller.rb'
+    - 'app/controllers/import_freshdesk_controller.rb'
+    - 'app/controllers/integration/check_mk_controller.rb'
+    - 'app/controllers/integration/smime_controller.rb'
+    - 'app/controllers/knowledge_base/public/categories_controller.rb'
+    - 'app/controllers/knowledge_base/search_controller.rb'
+    - 'app/controllers/long_polling_controller.rb'
+    - 'app/controllers/monitoring_controller.rb'
+    - 'app/controllers/object_manager_attributes_controller.rb'
+    - 'app/controllers/organizations_controller.rb'
+    - 'app/controllers/reports_controller.rb'
+    - 'app/controllers/search_controller.rb'
+    - 'app/controllers/sessions_controller.rb'
+    - 'app/controllers/ticket_articles_controller.rb'
+    - 'app/controllers/tickets_controller.rb'
+    - 'app/controllers/time_accountings_controller.rb'
+    - 'app/controllers/user_access_token_controller.rb'
+    - 'app/controllers/users_controller.rb'
+    - 'app/jobs/collection_update_job.rb'
+    - 'app/jobs/communicate_facebook_job.rb'
+    - 'app/jobs/communicate_sms_job.rb'
+    - 'app/jobs/communicate_telegram_job.rb'
+    - 'app/jobs/communicate_twitter_job.rb'
+    - 'app/jobs/ticket_article_communicate_email_job.rb'
+    - 'app/jobs/ticket_create_screen_job.rb'
+    - 'app/jobs/ticket_user_ticket_counter_job.rb'
+    - 'app/models/activity_stream/assets.rb'
+    - 'app/models/application_model/can_assets.rb'
+    - 'app/models/application_model/can_associations.rb'
+    - 'app/models/application_model/can_cleanup_param.rb'
+    - 'app/models/application_model/can_creates_and_updates.rb'
+    - 'app/models/application_model/can_lookup_search_index_attributes.rb'
+    - 'app/models/application_model/checks_attribute_values_and_length.rb'
+    - 'app/models/application_model/checks_user_columns_fillup.rb'
+    - 'app/models/application_model/has_attachments.rb'
+    - 'app/models/authorization.rb'
+    - 'app/models/avatar.rb'
+    - 'app/models/calendar.rb'
+    - 'app/models/channel.rb'
+    - 'app/models/channel/assets.rb'
+    - 'app/models/channel/driver/facebook.rb'
+    - 'app/models/channel/driver/imap.rb'
+    - 'app/models/channel/driver/pop3.rb'
+    - 'app/models/channel/driver/smtp.rb'
+    - 'app/models/channel/driver/twitter.rb'
+    - 'app/models/channel/email_build.rb'
+    - 'app/models/channel/email_parser.rb'
+    - 'app/models/channel/filter/auto_response_check.rb'
+    - 'app/models/channel/filter/bounce_delivery_permanent_failed.rb'
+    - 'app/models/channel/filter/bounce_follow_up_check.rb'
+    - 'app/models/channel/filter/database.rb'
+    - 'app/models/channel/filter/follow_up_check.rb'
+    - 'app/models/channel/filter/follow_up_merged.rb'
+    - 'app/models/channel/filter/identify_sender.rb'
+    - 'app/models/channel/filter/monitoring_base.rb'
+    - 'app/models/channel/filter/out_of_office_check.rb'
+    - 'app/models/channel/filter/sender_is_system_address.rb'
+    - 'app/models/chat.rb'
+    - 'app/models/chat/session.rb'
+    - 'app/models/chat/session/assets.rb'
+    - 'app/models/concerns/can_clone_attachments.rb'
+    - 'app/models/concerns/can_csv_import.rb'
+    - 'app/models/concerns/has_history.rb'
+    - 'app/models/concerns/has_rich_text.rb'
+    - 'app/models/concerns/has_search_index_backend.rb'
+    - 'app/models/concerns/has_search_sortable.rb'
+    - 'app/models/cti/caller_id.rb'
+    - 'app/models/cti/driver/base.rb'
+    - 'app/models/cti/driver/placetel.rb'
+    - 'app/models/cti/driver/sipgate_io.rb'
+    - 'app/models/cti/log.rb'
+    - 'app/models/external_sync.rb'
+    - 'app/models/history.rb'
+    - 'app/models/job.rb'
+    - 'app/models/job/assets.rb'
+    - 'app/models/karma/activity_log.rb'
+    - 'app/models/knowledge_base.rb'
+    - 'app/models/object_manager/attribute.rb'
+    - 'app/models/observer/transaction.rb'
+    - 'app/models/online_notification/assets.rb'
+    - 'app/models/organization/assets.rb'
+    - 'app/models/organization/search.rb'
+    - 'app/models/overview/assets.rb'
+    - 'app/models/package.rb'
+    - 'app/models/package/migration.rb'
+    - 'app/models/recent_view/assets.rb'
+    - 'app/models/role.rb'
+    - 'app/models/role/assets.rb'
+    - 'app/models/scheduler.rb'
+    - 'app/models/setting.rb'
+    - 'app/models/sla/assets.rb'
+    - 'app/models/store.rb'
+    - 'app/models/taskbar.rb'
+    - 'app/models/ticket/article.rb'
+    - 'app/models/ticket/article/adds_metadata_email.rb'
+    - 'app/models/ticket/article/adds_metadata_general.rb'
+    - 'app/models/ticket/article/adds_metadata_origin_by_id.rb'
+    - 'app/models/ticket/article/assets.rb'
+    - 'app/models/ticket/article/enqueue_communicate_email_job.rb'
+    - 'app/models/ticket/article/enqueue_communicate_facebook_job.rb'
+    - 'app/models/ticket/article/enqueue_communicate_sms_job.rb'
+    - 'app/models/ticket/article/enqueue_communicate_twitter_job.rb'
+    - 'app/models/ticket/article/has_ticket_contact_attributes_impact.rb'
+    - 'app/models/ticket/article/resets_ticket_state.rb'
+    - 'app/models/ticket/assets.rb'
+    - 'app/models/ticket/escalation.rb'
+    - 'app/models/ticket/number/date.rb'
+    - 'app/models/ticket/overviews.rb'
+    - 'app/models/ticket/screen_options.rb'
+    - 'app/models/ticket/search.rb'
+    - 'app/models/ticket/search_index.rb'
+    - 'app/models/ticket/sets_last_owner_update_time.rb'
+    - 'app/models/ticket/state.rb'
+    - 'app/models/ticket/touches_associations.rb'
+    - 'app/models/token.rb'
+    - 'app/models/transaction/clearbit_enrichment.rb'
+    - 'app/models/transaction/karma.rb'
+    - 'app/models/transaction/notification.rb'
+    - 'app/models/transaction/signature_detection.rb'
+    - 'app/models/transaction/slack.rb'
+    - 'app/models/translation.rb'
+    - 'app/models/trigger/assets.rb'
+    - 'app/models/user.rb'
+    - 'app/models/user/assets.rb'
+    - 'app/models/user/performs_geo_lookup.rb'
+    - 'app/models/user/search.rb'
+    - 'app/models/user/search_index.rb'
+    - 'app/models/user_device.rb'
+    - 'app/policies/ticket/article_policy.rb'
+    - 'db/migrate/20170207081400_ticket_state_priority_defaults.rb'
+    - 'db/migrate/20170403000001_fixed_admin_user_permission_920.rb'
+    - 'db/migrate/20170516000001_trigger_recipient_update.rb'
+    - 'db/migrate/20170905140038_cti_log_preferences_migration.rb'
+    - 'db/migrate/20171023000001_fixed_store_upgrade_ror_45.rb'
+    - 'db/migrate/20180410000001_cleanup_user_preferences_notification_sound2.rb'
+    - 'db/migrate/20180502015927_issue_1219_zhtw_locale_typo.rb'
+    - 'db/migrate/20180806000001_fixed_twitter_ticket_article_preferences7.rb'
+    - 'db/migrate/20181017000001_cti_generic_api2.rb'
+    - 'db/migrate/20190408000001_issue_2541_fix_notification_email_without_body.rb'
+    - 'db/migrate/20190724000001_rename_reserved_words.rb'
+    - 'lib/auto_wizard.rb'
+    - 'lib/core_ext/string.rb'
+    - 'lib/email_helper/probe.rb'
+    - 'lib/enrichment/clearbit/user.rb'
+    - 'lib/excel_sheet.rb'
+    - 'lib/external_credential/facebook.rb'
+    - 'lib/external_credential/google.rb'
+    - 'lib/external_credential/microsoft365.rb'
+    - 'lib/external_credential/twitter.rb'
+    - 'lib/facebook.rb'
+    - 'lib/fill_db.rb'
+    - 'lib/html_sanitizer.rb'
+    - 'lib/import/otrs/requester.rb'
+    - 'lib/import/otrs/user.rb'
+    - 'lib/ldap/group.rb'
+    - 'lib/ldap/user.rb'
+    - 'lib/models.rb'
+    - 'lib/notification_factory/mailer.rb'
+    - 'lib/notification_factory/renderer.rb'
+    - 'lib/report/article_by_type_sender.rb'
+    - 'lib/report/base.rb'
+    - 'lib/report/ticket_first_solution.rb'
+    - 'lib/report/ticket_generic_time.rb'
+    - 'lib/report/ticket_moved.rb'
+    - 'lib/report/ticket_reopened.rb'
+    - 'lib/search_index_backend.rb'
+    - 'lib/secure_mailing/smime/incoming.rb'
+    - 'lib/sequencer/unit/import/zendesk/sub_sequence/base.rb'
+    - 'lib/service/geo_ip/zammad.rb'
+    - 'lib/session_helper/collection_base.rb'
+    - 'lib/session_helper/collection_ticket.rb'
+    - 'lib/sessions.rb'
+    - 'lib/sessions/backend/activity_stream.rb'
+    - 'lib/sessions/backend/ticket_overview_list.rb'
+    - 'lib/sessions/client.rb'
+    - 'lib/sessions/event/broadcast.rb'
+    - 'lib/sessions/event/chat_session_close.rb'
+    - 'lib/sessions/event/chat_session_update.rb'
+    - 'lib/sessions/event/chat_status_customer.rb'
+    - 'lib/sessions/node.rb'
+    - 'lib/signature_detection.rb'
+    - 'lib/stats.rb'
+    - 'lib/stats/ticket_channel_distribution.rb'
+    - 'lib/stats/ticket_load_measure.rb'
+    - 'lib/stats/ticket_reopen.rb'
+    - 'lib/stats/ticket_waiting_time.rb'
+    - 'lib/tasks/search_index_es.rake'
+    - 'lib/telegram.rb'
+    - 'lib/transaction_dispatcher.rb'
+    - 'lib/twitter_sync.rb'
+    - 'lib/user_agent.rb'
+    - 'lib/websocket_server.rb'
+    - 'test/**/*'
+
+Metrics/ModuleLength:
+  Exclude:
+    - 'app/controllers/application_controller/authenticates.rb'
+    - 'app/controllers/application_controller/renders_models.rb'
+    - 'app/models/application_model/can_assets.rb'
+    - 'app/models/application_model/can_associations.rb'
+    - 'app/models/application_model/can_creates_and_updates.rb'
+    - 'app/models/channel/email_build.rb'
+    - 'app/models/channel/filter/identify_sender.rb'
+    - 'app/models/concerns/can_be_published.rb'
+    - 'app/models/concerns/can_csv_import.rb'
+    - 'app/models/concerns/has_groups.rb'
+    - 'app/models/concerns/has_history.rb'
+    - 'app/models/concerns/has_rich_text.rb'
+    - 'app/models/concerns/has_search_index_backend.rb'
+    - 'app/models/concerns/has_search_sortable.rb'
+    - 'app/models/ticket/escalation.rb'
+    - 'app/models/ticket/overviews.rb'
+    - 'app/models/ticket/screen_options.rb'
+    - 'app/models/ticket/search.rb'
+    - 'app/models/user/search.rb'
+    - 'lib/auto_wizard.rb'
+    - 'lib/fill_db.rb'
+    - 'lib/import/otrs.rb'
+    - 'lib/sessions.rb'
+    - 'lib/sessions/node.rb'
+    - 'lib/signature_detection.rb'
+    - 'lib/static_assets.rb'
+    - 'lib/transaction_dispatcher.rb'
+    - 'spec/support/capybara/common_actions.rb'
+
+Metrics/PerceivedComplexity:
+  Exclude:
+    - 'app/controllers/application_controller/authenticates.rb'
+    - 'app/controllers/application_controller/handles_devices.rb'
+    - 'app/controllers/application_controller/handles_errors.rb'
+    - 'app/controllers/application_controller/logs_http_access.rb'
+    - 'app/controllers/channels_email_controller.rb'
+    - 'app/controllers/channels_google_controller.rb'
+    - 'app/controllers/channels_microsoft365_controller.rb'
+    - 'app/controllers/concerns/creates_ticket_articles.rb'
+    - 'app/controllers/first_steps_controller.rb'
+    - 'app/controllers/form_controller.rb'
+    - 'app/controllers/getting_started_controller.rb'
+    - 'app/controllers/import_otrs_controller.rb'
+    - 'app/controllers/integration/check_mk_controller.rb'
+    - 'app/controllers/integration/smime_controller.rb'
+    - 'app/controllers/knowledge_base/search_controller.rb'
+    - 'app/controllers/long_polling_controller.rb'
+    - 'app/controllers/monitoring_controller.rb'
+    - 'app/controllers/object_manager_attributes_controller.rb'
+    - 'app/controllers/organizations_controller.rb'
+    - 'app/controllers/reports_controller.rb'
+    - 'app/controllers/search_controller.rb'
+    - 'app/controllers/sessions_controller.rb'
+    - 'app/controllers/ticket_articles_controller.rb'
+    - 'app/controllers/tickets_controller.rb'
+    - 'app/controllers/time_accountings_controller.rb'
+    - 'app/controllers/users_controller.rb'
+    - 'app/jobs/collection_update_job.rb'
+    - 'app/jobs/communicate_facebook_job.rb'
+    - 'app/jobs/communicate_sms_job.rb'
+    - 'app/jobs/communicate_telegram_job.rb'
+    - 'app/jobs/communicate_twitter_job.rb'
+    - 'app/jobs/ticket_article_communicate_email_job.rb'
+    - 'app/models/activity_stream/assets.rb'
+    - 'app/models/application_model/can_assets.rb'
+    - 'app/models/application_model/can_associations.rb'
+    - 'app/models/application_model/can_cleanup_param.rb'
+    - 'app/models/application_model/can_creates_and_updates.rb'
+    - 'app/models/application_model/checks_attribute_values_and_length.rb'
+    - 'app/models/application_model/checks_user_columns_fillup.rb'
+    - 'app/models/application_model/has_attachments.rb'
+    - 'app/models/application_model/can_lookup_search_index_attributes.rb'
+    - 'app/models/authorization.rb'
+    - 'app/models/avatar.rb'
+    - 'app/models/calendar.rb'
+    - 'app/models/channel.rb'
+    - 'app/models/channel/assets.rb'
+    - 'app/models/channel/driver/facebook.rb'
+    - 'app/models/channel/driver/imap.rb'
+    - 'app/models/channel/driver/pop3.rb'
+    - 'app/models/channel/driver/smtp.rb'
+    - 'app/models/channel/driver/twitter.rb'
+    - 'app/models/channel/email_build.rb'
+    - 'app/models/channel/email_parser.rb'
+    - 'app/models/channel/filter/auto_response_check.rb'
+    - 'app/models/channel/filter/bounce_delivery_permanent_failed.rb'
+    - 'app/models/channel/filter/bounce_follow_up_check.rb'
+    - 'app/models/channel/filter/database.rb'
+    - 'app/models/channel/filter/follow_up_check.rb'
+    - 'app/models/channel/filter/identify_sender.rb'
+    - 'app/models/channel/filter/monitoring_base.rb'
+    - 'app/models/channel/filter/out_of_office_check.rb'
+    - 'app/models/channel/filter/sender_is_system_address.rb'
+    - 'app/models/chat.rb'
+    - 'app/models/chat/session.rb'
+    - 'app/models/chat/session/assets.rb'
+    - 'app/models/concerns/can_clone_attachments.rb'
+    - 'app/models/concerns/can_csv_import.rb'
+    - 'app/models/concerns/has_history.rb'
+    - 'app/models/concerns/has_rich_text.rb'
+    - 'app/models/concerns/has_search_index_backend.rb'
+    - 'app/models/concerns/has_search_sortable.rb'
+    - 'app/models/cti/caller_id.rb'
+    - 'app/models/cti/driver/base.rb'
+    - 'app/models/cti/driver/placetel.rb'
+    - 'app/models/cti/driver/sipgate_io.rb'
+    - 'app/models/cti/log.rb'
+    - 'app/models/external_sync.rb'
+    - 'app/models/history.rb'
+    - 'app/models/job.rb'
+    - 'app/models/job/assets.rb'
+    - 'app/models/karma/activity_log.rb'
+    - 'app/models/knowledge_base.rb'
+    - 'app/models/object_manager/attribute.rb'
+    - 'app/models/observer/transaction.rb'
+    - 'app/models/online_notification/assets.rb'
+    - 'app/models/organization/assets.rb'
+    - 'app/models/organization/search.rb'
+    - 'app/models/overview/assets.rb'
+    - 'app/models/package.rb'
+    - 'app/models/package/migration.rb'
+    - 'app/models/recent_view/assets.rb'
+    - 'app/models/role.rb'
+    - 'app/models/role/assets.rb'
+    - 'app/models/scheduler.rb'
+    - 'app/models/setting.rb'
+    - 'app/models/sla/assets.rb'
+    - 'app/models/taskbar.rb'
+    - 'app/models/ticket.rb'
+    - 'app/models/ticket/article.rb'
+    - 'app/models/ticket/article/adds_metadata_email.rb'
+    - 'app/models/ticket/article/adds_metadata_general.rb'
+    - 'app/models/ticket/article/adds_metadata_origin_by_id.rb'
+    - 'app/models/ticket/article/assets.rb'
+    - 'app/models/ticket/article/enqueue_communicate_email_job.rb'
+    - 'app/models/ticket/article/enqueue_communicate_facebook_job.rb'
+    - 'app/models/ticket/article/enqueue_communicate_twitter_job.rb'
+    - 'app/models/ticket/article/has_ticket_contact_attributes_impact.rb'
+    - 'app/models/ticket/article/resets_ticket_state.rb'
+    - 'app/models/ticket/escalation.rb'
+    - 'app/models/ticket/number/date.rb'
+    - 'app/models/ticket/overviews.rb'
+    - 'app/models/ticket/screen_options.rb'
+    - 'app/models/ticket/search.rb'
+    - 'app/models/ticket/search_index.rb'
+    - 'app/models/ticket/sets_last_owner_update_time.rb'
+    - 'app/models/ticket/touches_associations.rb'
+    - 'app/models/token.rb'
+    - 'app/models/transaction/clearbit_enrichment.rb'
+    - 'app/models/transaction/karma.rb'
+    - 'app/models/transaction/notification.rb'
+    - 'app/models/transaction/signature_detection.rb'
+    - 'app/models/transaction/slack.rb'
+    - 'app/models/translation.rb'
+    - 'app/models/trigger/assets.rb'
+    - 'app/models/user.rb'
+    - 'app/models/user/assets.rb'
+    - 'app/models/user/performs_geo_lookup.rb'
+    - 'app/models/user/search.rb'
+    - 'app/models/user/search_index.rb'
+    - 'app/models/user_device.rb'
+    - 'app/policies/ticket/article_policy.rb'
+    - 'db/migrate/20170207081400_ticket_state_priority_defaults.rb'
+    - 'db/migrate/20170403000001_fixed_admin_user_permission_920.rb'
+    - 'db/migrate/20170516000001_trigger_recipient_update.rb'
+    - 'db/migrate/20171023000001_fixed_store_upgrade_ror_45.rb'
+    - 'db/migrate/20180502015927_issue_1219_zhtw_locale_typo.rb'
+    - 'db/migrate/20180502015927_issue_1219_zhtw_locale_typo.rb'
+    - 'db/migrate/20180806000001_fixed_twitter_ticket_article_preferences7.rb'
+    - 'db/migrate/20181017000001_cti_generic_api2.rb'
+    - 'db/migrate/20190408000001_issue_2541_fix_notification_email_without_body.rb'
+    - 'db/migrate/20190724000001_rename_reserved_words.rb'
+    - 'lib/auto_wizard.rb'
+    - 'lib/core_ext/string.rb'
+    - 'lib/email_helper/probe.rb'
+    - 'lib/enrichment/clearbit/user.rb'
+    - 'lib/excel_sheet.rb'
+    - 'lib/external_credential/facebook.rb'
+    - 'lib/external_credential/google.rb'
+    - 'lib/external_credential/microsoft365.rb'
+    - 'lib/external_credential/twitter.rb'
+    - 'lib/facebook.rb'
+    - 'lib/fill_db.rb'
+    - 'lib/html_sanitizer.rb'
+    - 'lib/import/exchange/item_attributes.rb'
+    - 'lib/import/otrs/user.rb'
+    - 'lib/ldap/user.rb'
+    - 'lib/models.rb'
+    - 'lib/notification_factory/mailer.rb'
+    - 'lib/notification_factory/renderer.rb'
+    - 'lib/report/article_by_type_sender.rb'
+    - 'lib/report/base.rb'
+    - 'lib/report/ticket_first_solution.rb'
+    - 'lib/report/ticket_generic_time.rb'
+    - 'lib/report/ticket_moved.rb'
+    - 'lib/report/ticket_reopened.rb'
+    - 'lib/search_index_backend.rb'
+    - 'lib/secure_mailing/smime/incoming.rb'
+    - 'lib/service/geo_ip/zammad.rb'
+    - 'lib/session_helper/collection_base.rb'
+    - 'lib/session_helper/collection_ticket.rb'
+    - 'lib/sessions.rb'
+    - 'lib/sessions/backend/activity_stream.rb'
+    - 'lib/sessions/backend/ticket_overview_list.rb'
+    - 'lib/sessions/client.rb'
+    - 'lib/sessions/event/broadcast.rb'
+    - 'lib/sessions/event/chat_session_close.rb'
+    - 'lib/sessions/event/chat_session_update.rb'
+    - 'lib/sessions/event/chat_status_customer.rb'
+    - 'lib/signature_detection.rb'
+    - 'lib/stats.rb'
+    - 'lib/stats/ticket_channel_distribution.rb'
+    - 'lib/stats/ticket_in_process.rb'
+    - 'lib/stats/ticket_load_measure.rb'
+    - 'lib/stats/ticket_reopen.rb'
+    - 'lib/stats/ticket_response_time.rb'
+    - 'lib/stats/ticket_waiting_time.rb'
+    - 'lib/tasks/search_index_es.rake'
+    - 'lib/telegram.rb'
+    - 'lib/transaction_dispatcher.rb'
+    - 'lib/twitter_sync.rb'
+    - 'lib/user_agent.rb'
+    - 'test/browser/admin_object_manager_test.rb'
+    - 'test/browser/keyboard_shortcuts_test.rb'
+    - 'test/browser_test_helper.rb'
+    - 'test/integration/slack_test.rb'
+
+Rails/AssertNot:
+  Exclude:
+    - 'test/browser/admin_permissions_granular_vs_full_test.rb'
+
+Rails/CreateTableWithTimestamps:
+  Exclude:
+    - 'db/migrate/20120101000001_create_base.rb'
+    - 'db/migrate/20120101000010_create_ticket.rb'
+    - 'db/migrate/20170419000002_overview_role_ids.rb'
+    - 'db/migrate/20170608151442_enhanced_permissions.rb'
+
+Rails/HasManyOrHasOneDependent:
+  Exclude:
+    - 'app/models/chat/session.rb'
+    - 'app/models/concerns/has_groups.rb'
+    - 'app/models/email_address.rb'
+    - 'app/models/organization.rb'
+    - 'app/models/signature.rb'
+    - 'app/models/ticket/state_type.rb'
+    - 'app/models/user.rb'
+
+Style/OptionalBooleanParameter:
+  Exclude:
+    - 'app/models/application_model/can_activity_stream_log.rb'
+    - 'app/models/application_model/can_cleanup_param.rb'
+    - 'app/models/avatar.rb'
+    - 'app/models/channel.rb'
+    - 'app/models/channel/driver/facebook.rb'
+    - 'app/models/channel/driver/sendmail.rb'
+    - 'app/models/channel/driver/sms/massenversand.rb'
+    - 'app/models/channel/driver/sms/message_bird.rb'
+    - 'app/models/channel/driver/sms/twilio.rb'
+    - 'app/models/channel/driver/smtp.rb'
+    - 'app/models/channel/driver/telegram.rb'
+    - 'app/models/channel/driver/twitter.rb'
+    - 'app/models/channel/email_build.rb'
+    - 'app/models/channel/email_parser.rb'
+    - 'app/models/chat/session.rb'
+    - 'app/models/concerns/has_history.rb'
+    - 'app/models/job.rb'
+    - 'app/models/karma/activity_log.rb'
+    - 'app/models/object_manager/attribute.rb'
+    - 'app/models/package.rb'
+    - 'app/models/scheduler.rb'
+    - 'app/models/setting.rb'
+    - 'app/models/store/file.rb'
+    - 'app/models/text_module.rb'
+    - 'app/models/ticket/escalation.rb'
+    - 'app/models/translation.rb'
+    - 'app/models/user.rb'
+    - 'lib/app_version.rb'
+    - 'lib/core_ext/string.rb'
+    - 'lib/external_credential/facebook.rb'
+    - 'lib/external_credential/google.rb'
+    - 'lib/external_credential/microsoft365.rb'
+    - 'lib/external_credential/twitter.rb'
+    - 'lib/html_sanitizer.rb'
+    - 'lib/models.rb'
+    - 'lib/sessions/backend/ticket_overview_list.rb'
+    - 'lib/sessions/node.rb'
+    - 'spec/support/system_init_done.rb'
+    - 'test/browser_test_helper.rb'

.ruby-version

@@ -1 +1 @@
-2.4.1
+2.7.4

.travis.yml

@@ -1,62 +0,0 @@
-dist: trusty
-sudo: required
-group: deprecated
-notifications:
-  email:
-    - me+tv@zammad.com
-env:
-  - DB=mysql
-  - DB=postgresql
-addons:
-  postgresql: "9.4"
-  apt:
-    packages:
-    - mysql-server-5.6
-    - mysql-client-core-5.6
-    - mysql-client-5.6
-services:
-  - postgresql
-  - mysql
-language: ruby
-rvm:
-  - 2.4.1
-before_install:
-  - git fetch --unshallow
-  - sudo apt-get -qq update
-  - sudo apt-get install -y curl git-core patch build-essential bison zlib1g-dev libssl-dev libxml2-dev libxml2-dev sqlite3 libsqlite3-dev autotools-dev libxslt1-dev libyaml-0-2 autoconf automake libreadline6-dev libyaml-dev libtool libgmp-dev libgdbm-dev libncurses5-dev pkg-config libffi-dev libmysqlclient-dev postfix
-  - if [ "${DB}" = "mysql" ]; then mysql -u root -e "CREATE USER 'some_user'@'localhost' IDENTIFIED BY 'some_pass';"; fi
-  - if [ "${DB}" = "mysql" ]; then mysql -u root -e "GRANT ALL PRIVILEGES ON *.* TO 'some_user'@'localhost';"; fi
-  - if [ "${DB}" = "mysql" ]; then cp config/database.yml.test-mysql config/database.yml; fi
-  - if [ "${DB}" = "postgresql" ]; then psql -c 'create database zammad_test;' -U postgres; fi
-  - if [ "${DB}" = "postgresql" ]; then cp config/database.yml.test-postgresql config/database.yml; fi
-  - export RAILS_ENV=test
-  - export ZAMMAD_VERSION=$(git describe --tags | sed -e 's/-[a-z0-9]\{8,\}.*//g')
-install:
-  - if [ "${DB}" = "mysql" ]; then bundle install --without postgres; fi
-  - if [ "${DB}" = "postgresql" ]; then bundle install; fi
-script:
-  - bundle exec rubocop
-  - rake db:create
-  - rake db:migrate
-  - rake db:seed
-  - rake test:units
-  - rake test:controllers
-  - rake assets:precompile
-  - rake db:drop
-  - rake db:create
-  - rake db:migrate
-  - rake db:seed
-  - ruby -I test/ test/integration/auto_wizard_test.rb
-  - rake db:drop
-  - rake db:create
-  - rake db:migrate
-  - rake db:seed
-  - ruby -I test/ test/integration/geo_location_test.rb
-  - ruby -I test/ test/integration/geo_calendar_test.rb
-  - ruby -I test/ test/integration/user_agent_test.rb
-  - ruby -I test/ test/integration/user_device_controller_test.rb
-  - ruby -I test/ test/integration/sipgate_controller_test.rb
-  - rake db:drop
-after_success:
-  - if [ "${DB}" = "mysql" ]; then contrib/travis-ci.org/trigger-docker-build.sh; fi
-  - if [ "${DB}" = "mysql" ]; then contrib/travis-ci.org/trigger-docker-compose-build.sh; fi

CHANGELOG.md

@@ -1,16 +1,186 @@
 # Change Log
 
-## [2.1.0](https://github.com/zammad/zammad/tree/2.1.0) (2017-xx-xx)
-[Full Changelog](https://github.com/zammad/zammad/compare/2.0.0...2.1.0)
+## [5.0.0](https://github.com/zammad/zammad/tree/5.0.0) (2021-10-05)
+[Full Changelog](https://github.com/zammad/zammad/compare/4.1.0...5.0.0)
 
 **Implemented enhancements:**
-
-
-
+- Core Workflow: Add organization condition attributes for object User [3779](https://github.com/zammad/zammad/issues/3779) [[enhancement](https://github.com/zammad/zammad/labels/enhancement)] [[prioritised by payment](https://github.com/zammad/zammad/labels/prioritised by payment)]
+- No script content (e. g. javascript) in emails [3365](https://github.com/zammad/zammad/issues/3365) [[enhancement](https://github.com/zammad/zammad/labels/enhancement)] [[prioritised by payment](https://github.com/zammad/zammad/labels/prioritised by payment)] [[mail processing](https://github.com/zammad/zammad/labels/mail processing)]
+- Read-only custom objects  [2102](https://github.com/zammad/zammad/issues/2102) [[enhancement](https://github.com/zammad/zammad/labels/enhancement)] [[prioritised by payment](https://github.com/zammad/zammad/labels/prioritised by payment)] [[object manager attribute](https://github.com/zammad/zammad/labels/object manager attribute)] [[core workflows](https://github.com/zammad/zammad/labels/core workflows)]
+- Granular admin permission for google channel is missing [3194](https://github.com/zammad/zammad/issues/3194) [[enhancement](https://github.com/zammad/zammad/labels/enhancement)]
+- Use country codes (e.g. `DE` or `ES`) for knowledgebase answer selection [3574](https://github.com/zammad/zammad/issues/3574) [[enhancement](https://github.com/zammad/zammad/labels/enhancement)] [[knowledge base](https://github.com/zammad/zammad/labels/knowledge base)]
+- New email account expert view cannot be opened without filling in all fields [3137](https://github.com/zammad/zammad/issues/3137) [[enhancement](https://github.com/zammad/zammad/labels/enhancement)] [[UX/UI](https://github.com/zammad/zammad/labels/UX/UI)]
+- Don't provide option to create API-Token if authentication via API token is disabled [3168](https://github.com/zammad/zammad/issues/3168) [[enhancement](https://github.com/zammad/zammad/labels/enhancement)] [[UX/UI](https://github.com/zammad/zammad/labels/UX/UI)]
+- Define default "stay on tab" / "close tab" behavior [257](https://github.com/zammad/zammad/issues/257) [[enhancement](https://github.com/zammad/zammad/labels/enhancement)] [[prioritised by payment](https://github.com/zammad/zammad/labels/prioritised by payment)]
+- Space after ticket hook in ticket/zoom [3265](https://github.com/zammad/zammad/issues/3265) [[enhancement](https://github.com/zammad/zammad/labels/enhancement)] [[UX/UI](https://github.com/zammad/zammad/labels/UX/UI)] [[ticket](https://github.com/zammad/zammad/labels/ticket)]
+- Enhance LDAP login to not affect "failed logins" [2389](https://github.com/zammad/zammad/issues/2389) [[enhancement](https://github.com/zammad/zammad/labels/enhancement)] [[LDAP](https://github.com/zammad/zammad/labels/LDAP)] [[prioritised by payment](https://github.com/zammad/zammad/labels/prioritised by payment)]
+- Detect Jira follow-ups [3695](https://github.com/zammad/zammad/issues/3695) [[enhancement](https://github.com/zammad/zammad/labels/enhancement)] [[prioritised by payment](https://github.com/zammad/zammad/labels/prioritised by payment)] [[mail processing](https://github.com/zammad/zammad/labels/mail processing)]
+- csv import example file download (organizations) is empty [3514](https://github.com/zammad/zammad/issues/3514) [[enhancement](https://github.com/zammad/zammad/labels/enhancement)]
+- Add bulk option to extended search [445](https://github.com/zammad/zammad/issues/445) [[enhancement](https://github.com/zammad/zammad/labels/enhancement)] [[prioritised by payment](https://github.com/zammad/zammad/labels/prioritised by payment)]
+- MessageBird integration [3672](https://github.com/zammad/zammad/issues/3672) [[enhancement](https://github.com/zammad/zammad/labels/enhancement)] [[channel](https://github.com/zammad/zammad/labels/channel)] [[prioritised by payment](https://github.com/zammad/zammad/labels/prioritised by payment)]
+- Add attachment via Trigger and scheduler if wanted by admin [2485](https://github.com/zammad/zammad/issues/2485) [[enhancement](https://github.com/zammad/zammad/labels/enhancement)] [[admin area](https://github.com/zammad/zammad/labels/admin area)] [[trigger](https://github.com/zammad/zammad/labels/trigger)] [[prioritised by payment](https://github.com/zammad/zammad/labels/prioritised by payment)]
+- Tag KB Answers [2612](https://github.com/zammad/zammad/issues/2612) [[enhancement](https://github.com/zammad/zammad/labels/enhancement)] [[knowledge base](https://github.com/zammad/zammad/labels/knowledge base)]
+- Backtrace lines pollute log [3556](https://github.com/zammad/zammad/issues/3556) [[enhancement](https://github.com/zammad/zammad/labels/enhancement)] [[authentication](https://github.com/zammad/zammad/labels/authentication)]
+- Visualise locked users in UI and make them unlock-able for admin [2565](https://github.com/zammad/zammad/issues/2565) [[enhancement](https://github.com/zammad/zammad/labels/enhancement)] [[prioritised by payment](https://github.com/zammad/zammad/labels/prioritised by payment)]
+- Representation of inactive customers and orgnizations [3302](https://github.com/zammad/zammad/issues/3302) [[enhancement](https://github.com/zammad/zammad/labels/enhancement)] [[UX/UI](https://github.com/zammad/zammad/labels/UX/UI)] [[prioritised by payment](https://github.com/zammad/zammad/labels/prioritised by payment)]
+- No possibility to enforce auto response if one of the blocking auto response mail header exists [3667](https://github.com/zammad/zammad/issues/3667) [[enhancement](https://github.com/zammad/zammad/labels/enhancement)] [[prioritised by payment](https://github.com/zammad/zammad/labels/prioritised by payment)] [[mail processing](https://github.com/zammad/zammad/labels/mail processing)]
+- REST doc of Online Notification controler is outdated/wrong and expand param is missing.  [3635](https://github.com/zammad/zammad/issues/3635) [[enhancement](https://github.com/zammad/zammad/labels/enhancement)]
+- Scroll background instead of foreground [978](https://github.com/zammad/zammad/issues/978) [[enhancement](https://github.com/zammad/zammad/labels/enhancement)] [[UX/UI](https://github.com/zammad/zammad/labels/UX/UI)] [[frontend / JS app](https://github.com/zammad/zammad/labels/frontend / JS app)]
+- Log if a active user (in UI) has been logged out due to SessionTimeout [3614](https://github.com/zammad/zammad/issues/3614) [[enhancement](https://github.com/zammad/zammad/labels/enhancement)]
+- The rake task `zammad:package:migrate` does not execute migrations for linked packages. [3606](https://github.com/zammad/zammad/issues/3606) [[enhancement](https://github.com/zammad/zammad/labels/enhancement)] [[developer experience](https://github.com/zammad/zammad/labels/developer experience)]
+- Accept 2xx as response for requests in UserAgent [3573](https://github.com/zammad/zammad/pull/3573) [[enhancement](https://github.com/zammad/zammad/labels/enhancement)]
+- Don't fail job is `deletable_id` is no longer available [3536](https://github.com/zammad/zammad/issues/3536) [[enhancement](https://github.com/zammad/zammad/labels/enhancement)] [[data privacy](https://github.com/zammad/zammad/labels/data privacy)]
+- Add console output for searchindex rebuild status [3562](https://github.com/zammad/zammad/issues/3562) [[enhancement](https://github.com/zammad/zammad/labels/enhancement)]
+- Display minutes for session timeouts instead of seconds [3575](https://github.com/zammad/zammad/issues/3575) [[enhancement](https://github.com/zammad/zammad/labels/enhancement)] [[UX/UI](https://github.com/zammad/zammad/labels/UX/UI)] [[admin area](https://github.com/zammad/zammad/labels/admin area)]
 
 **Fixed bugs:**
-
-
-
-
-\* *This Change Log was automatically generated by [github_changelog_generator](https://github.com/skywinder/Github-Changelog-Generator)*
+-  Inconstant alignment in the listing of attachments/submit button in new article area [3773](https://github.com/zammad/zammad/issues/3773) [[bug](https://github.com/zammad/zammad/labels/bug)]
+- Improve contrasts in answer search for articles [3783](https://github.com/zammad/zammad/issues/3783) [[bug](https://github.com/zammad/zammad/labels/bug)] [[UX/UI](https://github.com/zammad/zammad/labels/UX/UI)] [[knowledge base](https://github.com/zammad/zammad/labels/knowledge base)]
+- escaped 'Set fixed' workflows don't refresh set values on active ticket sessions [3757](https://github.com/zammad/zammad/issues/3757) [[bug](https://github.com/zammad/zammad/labels/bug)] [[core workflows](https://github.com/zammad/zammad/labels/core workflows)]
+- ObjectManager Attribute without screen attribute causes CoreWorkflows migration to fail [3781](https://github.com/zammad/zammad/issues/3781) [[bug](https://github.com/zammad/zammad/labels/bug)] [[migration / update](https://github.com/zammad/zammad/labels/migration / update)]
+- Zammad preflight check warning output causes Syntax-Error in postinstall.sh and failing installation [2674](https://github.com/zammad/zammad/issues/2674) [[bug](https://github.com/zammad/zammad/labels/bug)] [[migration / update](https://github.com/zammad/zammad/labels/migration / update)]
+- Shared organization issue (Create your first ticket) [2780](https://github.com/zammad/zammad/issues/2780) [[bug](https://github.com/zammad/zammad/labels/bug)] [[UX/UI](https://github.com/zammad/zammad/labels/UX/UI)] [[ticket](https://github.com/zammad/zammad/labels/ticket)]
+- Force users to reload after system migration [3776](https://github.com/zammad/zammad/issues/3776) [[bug](https://github.com/zammad/zammad/labels/bug)] [[UX/UI](https://github.com/zammad/zammad/labels/UX/UI)] [[prioritised by payment](https://github.com/zammad/zammad/labels/prioritised by payment)]
+- Unable to cancel attachment upload [2351](https://github.com/zammad/zammad/issues/2351) [[bug](https://github.com/zammad/zammad/labels/bug)] [[UX/UI](https://github.com/zammad/zammad/labels/UX/UI)]
+- [BUG] miss spell in db/migrate/20210923172256_issue_2619_kb_header_link_color.rb [3777](https://github.com/zammad/zammad/issues/3777) [[bug](https://github.com/zammad/zammad/labels/bug)] [[blocker](https://github.com/zammad/zammad/labels/blocker)] [[migration / update](https://github.com/zammad/zammad/labels/migration / update)]
+- KB header and footer link-color not changeable [2619](https://github.com/zammad/zammad/issues/2619) [[prioritised by payment](https://github.com/zammad/zammad/labels/prioritised by payment)] [[knowledge base](https://github.com/zammad/zammad/labels/knowledge base)] [[specification required](https://github.com/zammad/zammad/labels/specification required)] [[theming / skinning](https://github.com/zammad/zammad/labels/theming / skinning)]
+- Syntax errors break scheduler job for good [3028](https://github.com/zammad/zammad/issues/3028) [[bug](https://github.com/zammad/zammad/labels/bug)]
+- Existing tickets: New article modal with padding-left: 0; padding-right: 0; [3772](https://github.com/zammad/zammad/issues/3772) [[bug](https://github.com/zammad/zammad/labels/bug)] [[UX/UI](https://github.com/zammad/zammad/labels/UX/UI)] [[regression](https://github.com/zammad/zammad/labels/regression)]
+- Possible race condition causing OTRS import to fail [3765](https://github.com/zammad/zammad/issues/3765) [[bug](https://github.com/zammad/zammad/labels/bug)] [[import](https://github.com/zammad/zammad/labels/import)]
+- Incorrect alignment in the listing of attachments when creating a ticket [3746](https://github.com/zammad/zammad/issues/3746) [[bug](https://github.com/zammad/zammad/labels/bug)]
+- Saved conditions break on selections without reloading [3758](https://github.com/zammad/zammad/issues/3758) [[bug](https://github.com/zammad/zammad/labels/bug)] [[core workflows](https://github.com/zammad/zammad/labels/core workflows)]
+- Misleading view of user icons which are on vacation and disabled  [3075](https://github.com/zammad/zammad/issues/3075) [[bug](https://github.com/zammad/zammad/labels/bug)] [[UX/UI](https://github.com/zammad/zammad/labels/UX/UI)] [[ticket](https://github.com/zammad/zammad/labels/ticket)]
+- User with user_id 1 is show in admin interface (which should not) [3755](https://github.com/zammad/zammad/issues/3755) [[bug](https://github.com/zammad/zammad/labels/bug)] [[blocker](https://github.com/zammad/zammad/labels/blocker)]
+- Unable to close tickets in certran cases if core workflow is used [3710](https://github.com/zammad/zammad/issues/3710) [[bug](https://github.com/zammad/zammad/labels/bug)] [[UX/UI](https://github.com/zammad/zammad/labels/UX/UI)] [[core workflows](https://github.com/zammad/zammad/labels/core workflows)]
+- Login failed after upgrade to zammad 5.0 [3759](https://github.com/zammad/zammad/issues/3759) [[bug](https://github.com/zammad/zammad/labels/bug)] [[blocker](https://github.com/zammad/zammad/labels/blocker)] [[migration / update](https://github.com/zammad/zammad/labels/migration / update)]
+- Unable to create a ticket in web app if default for additional boolean value is FALSE [3762](https://github.com/zammad/zammad/issues/3762) [[bug](https://github.com/zammad/zammad/labels/bug)] [[prioritised by payment](https://github.com/zammad/zammad/labels/prioritised by payment)]
+- User search / selection does not always work if you want to correct your search [3696](https://github.com/zammad/zammad/issues/3696) [[bug](https://github.com/zammad/zammad/labels/bug)] [[UX/UI](https://github.com/zammad/zammad/labels/UX/UI)] [[prioritised by payment](https://github.com/zammad/zammad/labels/prioritised by payment)]
+- Unable to create new organization [3751](https://github.com/zammad/zammad/issues/3751) [[bug](https://github.com/zammad/zammad/labels/bug)] [[core workflows](https://github.com/zammad/zammad/labels/core workflows)]
+- Core Workflow "is not" operator is working unexpected [3752](https://github.com/zammad/zammad/issues/3752) [[bug](https://github.com/zammad/zammad/labels/bug)] [[core workflows](https://github.com/zammad/zammad/labels/core workflows)]
+- scrollPageHeader disappears when answering via email [3736](https://github.com/zammad/zammad/issues/3736) [[bug](https://github.com/zammad/zammad/labels/bug)] [[UX/UI](https://github.com/zammad/zammad/labels/UX/UI)]
+- Scheduler ignores "disable notifications == no" [3684](https://github.com/zammad/zammad/issues/3684) [[bug](https://github.com/zammad/zammad/labels/bug)] [[notification](https://github.com/zammad/zammad/labels/notification)] [[prioritised by payment](https://github.com/zammad/zammad/labels/prioritised by payment)]
+- Notes on existing ticks are discarded by editing profile settings [3088](https://github.com/zammad/zammad/issues/3088) [[bug](https://github.com/zammad/zammad/labels/bug)] [[UX/UI](https://github.com/zammad/zammad/labels/UX/UI)]
+- Owner selection empty or pending reminder data picker not shown if customer field has content but no customer is selected (in ticket create screen) [3743](https://github.com/zammad/zammad/issues/3743) [[bug](https://github.com/zammad/zammad/labels/bug)] [[core workflows](https://github.com/zammad/zammad/labels/core workflows)]
+- Removal of Microsoft365-Channel not possible via UI when having no email address relation [3741](https://github.com/zammad/zammad/issues/3741) [[bug](https://github.com/zammad/zammad/labels/bug)] [[channel](https://github.com/zammad/zammad/labels/channel)]
+- Removal of Google-Channel not possible via UI when having a normal email channel of same account [3203](https://github.com/zammad/zammad/issues/3203) [[bug](https://github.com/zammad/zammad/labels/bug)] [[UX/UI](https://github.com/zammad/zammad/labels/UX/UI)] [[channel](https://github.com/zammad/zammad/labels/channel)]
+- Core-Workflow: Option manipulation of boolean attributes not possible [3740](https://github.com/zammad/zammad/issues/3740) [[bug](https://github.com/zammad/zammad/labels/bug)] [[core workflows](https://github.com/zammad/zammad/labels/core workflows)]
+- Core Workflow: Show hidden attributes on group selection (ticket edit) [3739](https://github.com/zammad/zammad/issues/3739) [[bug](https://github.com/zammad/zammad/labels/bug)] [[core workflows](https://github.com/zammad/zammad/labels/core workflows)]
+- OTRS migration doesn't import article creation time [3235](https://github.com/zammad/zammad/issues/3235) [[bug](https://github.com/zammad/zammad/labels/bug)] [[import](https://github.com/zammad/zammad/labels/import)]
+- Spaces stay URL-encoded when going back to search results on KB for agents [3378](https://github.com/zammad/zammad/issues/3378) [[bug](https://github.com/zammad/zammad/labels/bug)] [[UX/UI](https://github.com/zammad/zammad/labels/UX/UI)] [[knowledge base](https://github.com/zammad/zammad/labels/knowledge base)]
+- Not working unpack of mail body if decrypted body is in signed-data attachment [3705](https://github.com/zammad/zammad/issues/3705) [[bug](https://github.com/zammad/zammad/labels/bug)] [[mail processing](https://github.com/zammad/zammad/labels/mail processing)]
+- It should be possible to show attributes which are configured `shown` false [3726](https://github.com/zammad/zammad/issues/3726) [[bug](https://github.com/zammad/zammad/labels/bug)] [[prioritised by payment](https://github.com/zammad/zammad/labels/prioritised by payment)] [[core workflows](https://github.com/zammad/zammad/labels/core workflows)]
+- admin.core_workflow permission is missing [3732](https://github.com/zammad/zammad/issues/3732) [[bug](https://github.com/zammad/zammad/labels/bug)] [[core workflows](https://github.com/zammad/zammad/labels/core workflows)]
+- AttributeManager doesn't display boolean default values within the UI [3271](https://github.com/zammad/zammad/issues/3271) [[bug](https://github.com/zammad/zammad/labels/bug)] [[UX/UI](https://github.com/zammad/zammad/labels/UX/UI)] [[object manager attribute](https://github.com/zammad/zammad/labels/object manager attribute)]
+- Spaces in front of mentions can cause partly content removal [3717](https://github.com/zammad/zammad/issues/3717) [[bug](https://github.com/zammad/zammad/labels/bug)] [[UX/UI](https://github.com/zammad/zammad/labels/UX/UI)] [[prioritised by payment](https://github.com/zammad/zammad/labels/prioritised by payment)]
+- Drop files here not disappearing after dropping a file [3725](https://github.com/zammad/zammad/issues/3725) [[bug](https://github.com/zammad/zammad/labels/bug)] [[regression](https://github.com/zammad/zammad/labels/regression)]
+- ⚙ -> Manage -> Calendars -> Edit: "Subscribe to public holidays in" sorted wrong [2528](https://github.com/zammad/zammad/issues/2528) [[bug](https://github.com/zammad/zammad/labels/bug)] [[UX/UI](https://github.com/zammad/zammad/labels/UX/UI)]
+- Pending reminder notifications are not sent if ticket is opened in tab [2931](https://github.com/zammad/zammad/issues/2931) [[bug](https://github.com/zammad/zammad/labels/bug)] [[ticket](https://github.com/zammad/zammad/labels/ticket)] [[prioritised by payment](https://github.com/zammad/zammad/labels/prioritised by payment)] [[frontend / JS app](https://github.com/zammad/zammad/labels/frontend / JS app)]
+- Fields are falsey displayed as mandatory if they contain historic screen values [3721](https://github.com/zammad/zammad/issues/3721) [[bug](https://github.com/zammad/zammad/labels/bug)] [[prioritised by payment](https://github.com/zammad/zammad/labels/prioritised by payment)] [[core workflows](https://github.com/zammad/zammad/labels/core workflows)]
+- `ticket.customer_id` is `current_user` breaks email fetching [3503](https://github.com/zammad/zammad/issues/3503) [[bug](https://github.com/zammad/zammad/labels/bug)] [[channel](https://github.com/zammad/zammad/labels/channel)] [[ticket](https://github.com/zammad/zammad/labels/ticket)]
+- Scheduler jobs don't ensure current ticket information if they're running a long time [3329](https://github.com/zammad/zammad/issues/3329) [[bug](https://github.com/zammad/zammad/labels/bug)] [[prioritised by payment](https://github.com/zammad/zammad/labels/prioritised by payment)]
+- groups selection for customer panel is not working anymore (with core workflows) [3713](https://github.com/zammad/zammad/issues/3713) [[bug](https://github.com/zammad/zammad/labels/bug)] [[core workflows](https://github.com/zammad/zammad/labels/core workflows)]
+- Scheduler Time offset [457](https://github.com/zammad/zammad/issues/457) [[bug](https://github.com/zammad/zammad/labels/bug)] [[trigger](https://github.com/zammad/zammad/labels/trigger)] [[prioritised by payment](https://github.com/zammad/zammad/labels/prioritised by payment)]
+- "Warten auf Erinnerung" - Inconsistent timestamps [2366](https://github.com/zammad/zammad/issues/2366) [[bug](https://github.com/zammad/zammad/labels/bug)]
+- Ical escaltion update the calendar entry to 2:00 am [2157](https://github.com/zammad/zammad/issues/2157) [[bug](https://github.com/zammad/zammad/labels/bug)] [[notification](https://github.com/zammad/zammad/labels/notification)] [[prioritised by payment](https://github.com/zammad/zammad/labels/prioritised by payment)]
+- Inheritance of out of office settings [3694](https://github.com/zammad/zammad/issues/3694) [[bug](https://github.com/zammad/zammad/labels/bug)] [[prioritised by payment](https://github.com/zammad/zammad/labels/prioritised by payment)]
+- Core worflow perform action "select" should not make multiple values selectable [3712](https://github.com/zammad/zammad/issues/3712) [[bug](https://github.com/zammad/zammad/labels/bug)] [[UX/UI](https://github.com/zammad/zammad/labels/UX/UI)] [[core workflows](https://github.com/zammad/zammad/labels/core workflows)]
+- Setting for CheckMK not saved in zammad [3707](https://github.com/zammad/zammad/issues/3707) [[bug](https://github.com/zammad/zammad/labels/bug)]
+- Any user can be set as a replacement for out of office [2293](https://github.com/zammad/zammad/issues/2293) [[bug](https://github.com/zammad/zammad/labels/bug)] [[personal settings/menu](https://github.com/zammad/zammad/labels/personal settings/menu)] [[prioritised by payment](https://github.com/zammad/zammad/labels/prioritised by payment)]
+- Core Workflow Implementation [3709](https://github.com/zammad/zammad/issues/3709) [[feature backlog](https://github.com/zammad/zammad/labels/feature backlog)] [[prioritised by payment](https://github.com/zammad/zammad/labels/prioritised by payment)] [[core](https://github.com/zammad/zammad/labels/core)] [[core workflows](https://github.com/zammad/zammad/labels/core workflows)]
+- Can't remove auto assignment timeout [2544](https://github.com/zammad/zammad/issues/2544) [[bug](https://github.com/zammad/zammad/labels/bug)] [[UX/UI](https://github.com/zammad/zammad/labels/UX/UI)] [[prioritised by payment](https://github.com/zammad/zammad/labels/prioritised by payment)]
+- Assign Follow ups has no affect [2455](https://github.com/zammad/zammad/issues/2455) [[bug](https://github.com/zammad/zammad/labels/bug)] [[ticket](https://github.com/zammad/zammad/labels/ticket)] [[prioritised by payment](https://github.com/zammad/zammad/labels/prioritised by payment)]
+- The calendar shows Chilean holidays one day in advance [3706](https://github.com/zammad/zammad/issues/3706) [[bug](https://github.com/zammad/zammad/labels/bug)] [[UX/UI](https://github.com/zammad/zammad/labels/UX/UI)] [[regression](https://github.com/zammad/zammad/labels/regression)]
+- Organization removal does not clear organization_id from Tickets [3703](https://github.com/zammad/zammad/issues/3703) [[bug](https://github.com/zammad/zammad/labels/bug)] [[prioritised by payment](https://github.com/zammad/zammad/labels/prioritised by payment)] [[regression](https://github.com/zammad/zammad/labels/regression)]
+- Merge not possible with not set, required attributes [2634](https://github.com/zammad/zammad/issues/2634) [[bug](https://github.com/zammad/zammad/labels/bug)] [[ticket](https://github.com/zammad/zammad/labels/ticket)] [[prioritised by payment](https://github.com/zammad/zammad/labels/prioritised by payment)] [[object manager attribute](https://github.com/zammad/zammad/labels/object manager attribute)]
+- Merging tickets doesn’t trigger notification for target ticket [3105](https://github.com/zammad/zammad/issues/3105) [[bug](https://github.com/zammad/zammad/labels/bug)] [[notification](https://github.com/zammad/zammad/labels/notification)] [[ticket](https://github.com/zammad/zammad/labels/ticket)]
+- One of DB migrations timestamp breaks migrations queue [3702](https://github.com/zammad/zammad/issues/3702) [[bug](https://github.com/zammad/zammad/labels/bug)]
+- Tags in ticket create screen displayed wrong [3701](https://github.com/zammad/zammad/issues/3701) [[bug](https://github.com/zammad/zammad/labels/bug)] [[UX/UI](https://github.com/zammad/zammad/labels/UX/UI)] [[regression](https://github.com/zammad/zammad/labels/regression)] [[knowledge base](https://github.com/zammad/zammad/labels/knowledge base)]
+- Custom date attributes provide inconsistent sorting within grouping [3663](https://github.com/zammad/zammad/issues/3663) [[bug](https://github.com/zammad/zammad/labels/bug)] [[overviews](https://github.com/zammad/zammad/labels/overviews)] [[prioritised by payment](https://github.com/zammad/zammad/labels/prioritised by payment)]
+- Mix of binary encoded ISO-8859-1 data in header fields (e.g. to) fails mail processing [3697](https://github.com/zammad/zammad/issues/3697) [[bug](https://github.com/zammad/zammad/labels/bug)] [[prioritised by payment](https://github.com/zammad/zammad/labels/prioritised by payment)] [[mail processing](https://github.com/zammad/zammad/labels/mail processing)]
+- Zammad sends mails even though there is no email address visible in TO or CC fields (any more) [3554](https://github.com/zammad/zammad/issues/3554) [[bug](https://github.com/zammad/zammad/labels/bug)] [[UX/UI](https://github.com/zammad/zammad/labels/UX/UI)]
+- Error 500 / zammad {"error":" 123456 is out of range for ActiveModel::Type::Integer with limit 4 bytes"} [3647](https://github.com/zammad/zammad/issues/3647) [[bug](https://github.com/zammad/zammad/labels/bug)]
+- Default value not set for attributes of type input, select, tree_select, richtext, textarea, checkbox [1653](https://github.com/zammad/zammad/issues/1653) [[bug](https://github.com/zammad/zammad/labels/bug)] [[prioritised by payment](https://github.com/zammad/zammad/labels/prioritised by payment)] [[object manager attribute](https://github.com/zammad/zammad/labels/object manager attribute)]
+- When replying, quote article content only [3539](https://github.com/zammad/zammad/issues/3539) [[bug](https://github.com/zammad/zammad/labels/bug)] [[UX/UI](https://github.com/zammad/zammad/labels/UX/UI)] [[prioritised by payment](https://github.com/zammad/zammad/labels/prioritised by payment)]
+- Trigger ignores changes on some Ticket attributes [3428](https://github.com/zammad/zammad/issues/3428) [[bug](https://github.com/zammad/zammad/labels/bug)] [[trigger](https://github.com/zammad/zammad/labels/trigger)]
+- KB search does not allow pagination on endpoint [3068](https://github.com/zammad/zammad/issues/3068) [[bug](https://github.com/zammad/zammad/labels/bug)] [[API](https://github.com/zammad/zammad/labels/API)] [[search](https://github.com/zammad/zammad/labels/search)] [[prioritised by payment](https://github.com/zammad/zammad/labels/prioritised by payment)] [[knowledge base](https://github.com/zammad/zammad/labels/knowledge base)]
+- “You have not created a ticket yet” shown but I already have closed tickets [3053](https://github.com/zammad/zammad/issues/3053) [[bug](https://github.com/zammad/zammad/labels/bug)] [[UX/UI](https://github.com/zammad/zammad/labels/UX/UI)] [[overviews](https://github.com/zammad/zammad/labels/overviews)] [[prioritised by payment](https://github.com/zammad/zammad/labels/prioritised by payment)] [[🚧 refactoring 2.0 🚧](https://github.com/zammad/zammad/labels/🚧 refactoring 2.0 🚧)]
+- Support HTML5 'required' attribute in forms [1890](https://github.com/zammad/zammad/pull/1890)
+- Freshdesk import works not with more then 30_000 tickets [3681](https://github.com/zammad/zammad/issues/3681) [[bug](https://github.com/zammad/zammad/labels/bug)] [[import](https://github.com/zammad/zammad/labels/import)]
+- Pagination for knowledge base answer sorting breaks sorting [3660](https://github.com/zammad/zammad/issues/3660) [[bug](https://github.com/zammad/zammad/labels/bug)] [[UX/UI](https://github.com/zammad/zammad/labels/UX/UI)] [[admin area](https://github.com/zammad/zammad/labels/admin area)] [[knowledge base](https://github.com/zammad/zammad/labels/knowledge base)]
+- Zendesk-Import `Connection reset by peer` cancels import [3583](https://github.com/zammad/zammad/issues/3583) [[bug](https://github.com/zammad/zammad/labels/bug)] [[import](https://github.com/zammad/zammad/labels/import)] [[waiting for feedback](https://github.com/zammad/zammad/labels/waiting for feedback)]
+- Prefer HTTP standard header "From" over custom "X-On-Behalf-Of" for impersonation [3113](https://github.com/zammad/zammad/issues/3113) [[API](https://github.com/zammad/zammad/labels/API)] [[help appreciated](https://github.com/zammad/zammad/labels/help appreciated)] [[authentication](https://github.com/zammad/zammad/labels/authentication)] [[hacktoberfest](https://github.com/zammad/zammad/labels/hacktoberfest)] [[:construction: refactoring :construction:](https://github.com/zammad/zammad/labels/:construction: refactoring :construction:)] [[specification required](https://github.com/zammad/zammad/labels/specification required)] [[good first issue](https://github.com/zammad/zammad/labels/good first issue)] [[deprecation](https://github.com/zammad/zammad/labels/deprecation)]
+- Do not send `domain` and migrate `domain` out of Google and Microsoft 365 channels [3669](https://github.com/zammad/zammad/issues/3669) [[bug](https://github.com/zammad/zammad/labels/bug)] [[channel](https://github.com/zammad/zammad/labels/channel)] [[prioritised by payment](https://github.com/zammad/zammad/labels/prioritised by payment)]
+- high organization user count relates to bad performance [3648](https://github.com/zammad/zammad/issues/3648) [[bug](https://github.com/zammad/zammad/labels/bug)] [[UX/UI](https://github.com/zammad/zammad/labels/UX/UI)] [[prioritised by payment](https://github.com/zammad/zammad/labels/prioritised by payment)] [[performance](https://github.com/zammad/zammad/labels/performance)]
+- Removing organizations removes user and ticket as well [3688](https://github.com/zammad/zammad/issues/3688) [[bug](https://github.com/zammad/zammad/labels/bug)] [[prioritised by payment](https://github.com/zammad/zammad/labels/prioritised by payment)]
+- Wrong user is used when "X-On-Behalf-Of” header value is an email that starts with digits [2851](https://github.com/zammad/zammad/issues/2851) [[bug](https://github.com/zammad/zammad/labels/bug)] [[API](https://github.com/zammad/zammad/labels/API)]
+- Allow out of office for one day without setting two days [3590](https://github.com/zammad/zammad/issues/3590) [[bug](https://github.com/zammad/zammad/labels/bug)] [[personal settings/menu](https://github.com/zammad/zammad/labels/personal settings/menu)]
+- FreshDesk Import doesn't pull in auto-assign domain(s) for organizations [3687](https://github.com/zammad/zammad/issues/3687) [[bug](https://github.com/zammad/zammad/labels/bug)] [[import](https://github.com/zammad/zammad/labels/import)]
+- FreshDesk Import brings in all users as inactive [3689](https://github.com/zammad/zammad/issues/3689) [[bug](https://github.com/zammad/zammad/labels/bug)] [[import](https://github.com/zammad/zammad/labels/import)]
+- KB Public UI icons are misspaced  [3680](https://github.com/zammad/zammad/issues/3680) [[bug](https://github.com/zammad/zammad/labels/bug)] [[knowledge base](https://github.com/zammad/zammad/labels/knowledge base)]
+- FreshDesk Import Error - undefined method `body' for 10:Integer [3661](https://github.com/zammad/zammad/issues/3661) [[bug](https://github.com/zammad/zammad/labels/bug)] [[import](https://github.com/zammad/zammad/labels/import)]
+- Cannot select multiple tickets in ticket overview with shift+click in Firefox [3449](https://github.com/zammad/zammad/issues/3449) [[bug](https://github.com/zammad/zammad/labels/bug)] [[UX/UI](https://github.com/zammad/zammad/labels/UX/UI)] [[overviews](https://github.com/zammad/zammad/labels/overviews)]
+- "Drop files here" drag area not always hiding [3460](https://github.com/zammad/zammad/issues/3460) [[bug](https://github.com/zammad/zammad/labels/bug)] [[UX/UI](https://github.com/zammad/zammad/labels/UX/UI)] [[help appreciated](https://github.com/zammad/zammad/labels/help appreciated)]
+- CTI Callerlog signaling hides "+" for new ticket if more than one user is found [2930](https://github.com/zammad/zammad/issues/2930) [[bug](https://github.com/zammad/zammad/labels/bug)] [[UX/UI](https://github.com/zammad/zammad/labels/UX/UI)] [[prioritised by payment](https://github.com/zammad/zammad/labels/prioritised by payment)] [[frontend / JS app](https://github.com/zammad/zammad/labels/frontend / JS app)]
+- Zendesk URL check fails with Net::HTTPForbidden 403 error [3679](https://github.com/zammad/zammad/issues/3679) [[bug](https://github.com/zammad/zammad/labels/bug)] [[import](https://github.com/zammad/zammad/labels/import)]
+- Mac Mail inline PDF destroys E-Mail-Body [2407](https://github.com/zammad/zammad/issues/2407) [[bug](https://github.com/zammad/zammad/labels/bug)] [[prioritised by payment](https://github.com/zammad/zammad/labels/prioritised by payment)] [[mail processing](https://github.com/zammad/zammad/labels/mail processing)]
+- Outdated urls on security page (third-party logins) [3627](https://github.com/zammad/zammad/issues/3627) [[bug](https://github.com/zammad/zammad/labels/bug)]
+- Duplicated article after bulk action was executed for newly created tickets without a browser refresh in between [3568](https://github.com/zammad/zammad/issues/3568) [[bug](https://github.com/zammad/zammad/labels/bug)]
+- Text Editor deletes text unrecoverably if quicktext was canceled with Ctrl+Backspace [2886](https://github.com/zammad/zammad/issues/2886) [[bug](https://github.com/zammad/zammad/labels/bug)] [[UX/UI](https://github.com/zammad/zammad/labels/UX/UI)] [[ticket](https://github.com/zammad/zammad/labels/ticket)] [[prioritised by payment](https://github.com/zammad/zammad/labels/prioritised by payment)] [[frontend / JS app](https://github.com/zammad/zammad/labels/frontend / JS app)]
+- The defined ignored attributes in the popover context are not working [3668](https://github.com/zammad/zammad/issues/3668) [[bug](https://github.com/zammad/zammad/labels/bug)] [[frontend / JS app](https://github.com/zammad/zammad/labels/frontend / JS app)]
+- Ensure Upload Cache files are removed after grace period [3579](https://github.com/zammad/zammad/issues/3579) [[bug](https://github.com/zammad/zammad/labels/bug)] [[prioritised by payment](https://github.com/zammad/zammad/labels/prioritised by payment)]
+- Package installation fails because of too long file names [3666](https://github.com/zammad/zammad/issues/3666) [[bug](https://github.com/zammad/zammad/labels/bug)]
+- Package migrations fail on package installation or update due to codebase self-modification [3580](https://github.com/zammad/zammad/issues/3580) [[bug](https://github.com/zammad/zammad/labels/bug)] [[core](https://github.com/zammad/zammad/labels/core)]
+- saving Boolean field with empty values [2973](https://github.com/zammad/zammad/issues/2973) [[bug](https://github.com/zammad/zammad/labels/bug)] [[UX/UI](https://github.com/zammad/zammad/labels/UX/UI)]
+- CTI-API should handle doubled requests better [3247](https://github.com/zammad/zammad/issues/3247) [[prioritised by payment](https://github.com/zammad/zammad/labels/prioritised by payment)] [[CTI](https://github.com/zammad/zammad/labels/CTI)] [[specification required](https://github.com/zammad/zammad/labels/specification required)]
+- In some situations the chat button is visible without a active websocket connection [2258](https://github.com/zammad/zammad/issues/2258) [[bug](https://github.com/zammad/zammad/labels/bug)] [[chat](https://github.com/zammad/zammad/labels/chat)]
+- Fixes mistypes in article_view.coffee [3658](https://github.com/zammad/zammad/pull/3658)
+- Creating and editing users via office 365 failes with Image source is invalid [3617](https://github.com/zammad/zammad/issues/3617) [[bug](https://github.com/zammad/zammad/labels/bug)] [[prioritised by payment](https://github.com/zammad/zammad/labels/prioritised by payment)]
+- FreshDesk Import fails with timeout error [3653](https://github.com/zammad/zammad/issues/3653) [[bug](https://github.com/zammad/zammad/labels/bug)] [[import](https://github.com/zammad/zammad/labels/import)]
+- Chat widget cannot load CSS on (sub)domains that contain "ws" characters [3654](https://github.com/zammad/zammad/issues/3654) [[bug](https://github.com/zammad/zammad/labels/bug)] [[chat](https://github.com/zammad/zammad/labels/chat)]
+- timezone issue with elasticsearch [2085](https://github.com/zammad/zammad/issues/2085) [[duplicate](https://github.com/zammad/zammad/labels/duplicate)]
+- Invalid html signature detection for exchange warning boxes [3571](https://github.com/zammad/zammad/issues/3571) [[bug](https://github.com/zammad/zammad/labels/bug)] [[UX/UI](https://github.com/zammad/zammad/labels/UX/UI)] [[prioritised by payment](https://github.com/zammad/zammad/labels/prioritised by payment)]
+- Searching for integer fields does not work as expected [3599](https://github.com/zammad/zammad/issues/3599) [[bug](https://github.com/zammad/zammad/labels/bug)] [[search](https://github.com/zammad/zammad/labels/search)] [[prioritised by payment](https://github.com/zammad/zammad/labels/prioritised by payment)]
+- FreshDesk import fails on certain custom field types [3628](https://github.com/zammad/zammad/issues/3628) [[bug](https://github.com/zammad/zammad/labels/bug)] [[import](https://github.com/zammad/zammad/labels/import)]
+- Freshdesk import subdomain selection fails [3631](https://github.com/zammad/zammad/issues/3631) [[bug](https://github.com/zammad/zammad/labels/bug)] [[import](https://github.com/zammad/zammad/labels/import)]
+- Search results missing for users with two names within lastname [3598](https://github.com/zammad/zammad/issues/3598) [[bug](https://github.com/zammad/zammad/labels/bug)] [[search](https://github.com/zammad/zammad/labels/search)] [[prioritised by payment](https://github.com/zammad/zammad/labels/prioritised by payment)]
+- New location notification with X-On-Behalf [3611](https://github.com/zammad/zammad/issues/3611) [[bug](https://github.com/zammad/zammad/labels/bug)] [[API](https://github.com/zammad/zammad/labels/API)] [[notification](https://github.com/zammad/zammad/labels/notification)] [[prioritised by payment](https://github.com/zammad/zammad/labels/prioritised by payment)]
+- State list of tickets ignore locale for their sorting [3335](https://github.com/zammad/zammad/issues/3335) [[bug](https://github.com/zammad/zammad/labels/bug)] [[UX/UI](https://github.com/zammad/zammad/labels/UX/UI)] [[ticket](https://github.com/zammad/zammad/labels/ticket)] [[prioritised by payment](https://github.com/zammad/zammad/labels/prioritised by payment)]
+- Newly created users are only shown in the admin interface after reload [3050](https://github.com/zammad/zammad/issues/3050) [[bug](https://github.com/zammad/zammad/labels/bug)] [[UX/UI](https://github.com/zammad/zammad/labels/UX/UI)] [[prioritised by payment](https://github.com/zammad/zammad/labels/prioritised by payment)] [[frontend / JS app](https://github.com/zammad/zammad/labels/frontend / JS app)]
+- Migration 3.6.1 to 4.1 : No configured business hours found! [3641](https://github.com/zammad/zammad/issues/3641) [[bug](https://github.com/zammad/zammad/labels/bug)]
+- Verification tokens questionable behavior in developer mode [3116](https://github.com/zammad/zammad/issues/3116) [[developer experience](https://github.com/zammad/zammad/labels/developer experience)]
+- Replacing a mention with a new leads to mentioning both agents [3636](https://github.com/zammad/zammad/issues/3636) [[bug](https://github.com/zammad/zammad/labels/bug)]
+- Attachment order is wrong [3584](https://github.com/zammad/zammad/issues/3584) [[bug](https://github.com/zammad/zammad/labels/bug)] [[UX/UI](https://github.com/zammad/zammad/labels/UX/UI)]
+- When disconnecting a Chat, customer can still continue posting messages [2559](https://github.com/zammad/zammad/issues/2559) [[bug](https://github.com/zammad/zammad/labels/bug)] [[chat](https://github.com/zammad/zammad/labels/chat)] [[prioritised by payment](https://github.com/zammad/zammad/labels/prioritised by payment)]
+- some macros are hidden in the drag & drop- overview with a small screen size [3359](https://github.com/zammad/zammad/issues/3359) [[bug](https://github.com/zammad/zammad/labels/bug)] [[UX/UI](https://github.com/zammad/zammad/labels/UX/UI)] [[prioritised by payment](https://github.com/zammad/zammad/labels/prioritised by payment)]
+- Add redis as an (optional) session store backend [3450](https://github.com/zammad/zammad/pull/3450)
+- Text Module widget is broken/hidden after pressing backspace (once) [3637](https://github.com/zammad/zammad/issues/3637) [[bug](https://github.com/zammad/zammad/labels/bug)]
+- Mention widget show same users several times (if rest requests will return in different order) [3639](https://github.com/zammad/zammad/issues/3639) [[bug](https://github.com/zammad/zammad/labels/bug)]
+- The rebuild of the index is failing [3633](https://github.com/zammad/zammad/issues/3633) [[bug](https://github.com/zammad/zammad/labels/bug)] [[chat](https://github.com/zammad/zammad/labels/chat)] [[prioritised by payment](https://github.com/zammad/zammad/labels/prioritised by payment)]
+- Monitoring endpoint complains about `Failed to run SessionTimeoutJob.perform_now after 10 tries #<NoMethodError: undefined method `id' for nil:NilClass` [3632](https://github.com/zammad/zammad/issues/3632) [[bug](https://github.com/zammad/zammad/labels/bug)]
+- Updating package-based installations can break the front end. [3629](https://github.com/zammad/zammad/issues/3629) [[bug](https://github.com/zammad/zammad/labels/bug)]
+- backup: stop using su for pg_dump [3352](https://github.com/zammad/zammad/pull/3352) [[waiting for feedback](https://github.com/zammad/zammad/labels/waiting for feedback)]
+- Reply-to header ignored if from contains a system address [2551](https://github.com/zammad/zammad/issues/2551) [[bug](https://github.com/zammad/zammad/labels/bug)]
+- Maintenance: Fix handling of test that require secrets not to run for GitHub PRs. [3626](https://github.com/zammad/zammad/pull/3626)
+- replacing find -mtime with find -mmin [3570](https://github.com/zammad/zammad/pull/3570)
+- Ensure to migrate old calendar URLs for google calendar sources [3618](https://github.com/zammad/zammad/issues/3618) [[bug](https://github.com/zammad/zammad/labels/bug)] [[prioritised by payment](https://github.com/zammad/zammad/labels/prioritised by payment)] [[regression](https://github.com/zammad/zammad/labels/regression)]
+- Mentions/Subscribe with read permissions [3615](https://github.com/zammad/zammad/issues/3615) [[bug](https://github.com/zammad/zammad/labels/bug)] [[prioritised by payment](https://github.com/zammad/zammad/labels/prioritised by payment)]
+- Chat-Message references not cleared with data privacy task [3610](https://github.com/zammad/zammad/issues/3610) [[bug](https://github.com/zammad/zammad/labels/bug)] [[data privacy](https://github.com/zammad/zammad/labels/data privacy)]
+- Overview names are hidden in mobile view for RTL languages [3500](https://github.com/zammad/zammad/issues/3500) [[bug](https://github.com/zammad/zammad/labels/bug)] [[UX/UI](https://github.com/zammad/zammad/labels/UX/UI)] [[mobile](https://github.com/zammad/zammad/labels/mobile)]
+- SMTP-Attachments missing when using the API under high load [2991](https://github.com/zammad/zammad/issues/2991) [[bug](https://github.com/zammad/zammad/labels/bug)] [[prioritised by payment](https://github.com/zammad/zammad/labels/prioritised by payment)]
+- Inline image conversion from jpeg to png causes huge overhead [3538](https://github.com/zammad/zammad/issues/3538) [[bug](https://github.com/zammad/zammad/labels/bug)] [[UX/UI](https://github.com/zammad/zammad/labels/UX/UI)] [[prioritised by payment](https://github.com/zammad/zammad/labels/prioritised by payment)]
+- session timeout does regulary logout active users before timeout because of dead old sessions [3605](https://github.com/zammad/zammad/issues/3605) [[bug](https://github.com/zammad/zammad/labels/bug)] [[prioritised by payment](https://github.com/zammad/zammad/labels/prioritised by payment)]
+- Zendesk import creates new ticket numbers rather than using the Zendesk ticket IDs also as ticket numbers in Zammad [3593](https://github.com/zammad/zammad/issues/3593) [[bug](https://github.com/zammad/zammad/labels/bug)] [[import](https://github.com/zammad/zammad/labels/import)] [[ticket](https://github.com/zammad/zammad/labels/ticket)] [[prioritised by payment](https://github.com/zammad/zammad/labels/prioritised by payment)]
+- wrong behaviour for the disabled option in session timeout [3600](https://github.com/zammad/zammad/issues/3600) [[bug](https://github.com/zammad/zammad/labels/bug)] [[prioritised by payment](https://github.com/zammad/zammad/labels/prioritised by payment)]
+- Header links are not responsive [3133](https://github.com/zammad/zammad/issues/3133) [[UX/UI](https://github.com/zammad/zammad/labels/UX/UI)] [[knowledge base](https://github.com/zammad/zammad/labels/knowledge base)]
+- Update description of the session timeout setting [3597](https://github.com/zammad/zammad/issues/3597) [[bug](https://github.com/zammad/zammad/labels/bug)] [[admin area](https://github.com/zammad/zammad/labels/admin area)]
+- Escalation calculation breaks data privacy ticket deletion [3588](https://github.com/zammad/zammad/issues/3588) [[bug](https://github.com/zammad/zammad/labels/bug)] [[data privacy](https://github.com/zammad/zammad/labels/data privacy)]
+- `SessionTimeoutJob.perform_now` fails if user no longer exists [3586](https://github.com/zammad/zammad/issues/3586) [[bug](https://github.com/zammad/zammad/labels/bug)]
+- Robots.txt should allow indexing Knowledge Base on custom URLs [3164](https://github.com/zammad/zammad/issues/3164) [[bug](https://github.com/zammad/zammad/labels/bug)] [[knowledge base](https://github.com/zammad/zammad/labels/knowledge base)]
+- DataPrivacy may fail to clear user relations [3585](https://github.com/zammad/zammad/issues/3585) [[bug](https://github.com/zammad/zammad/labels/bug)] [[data privacy](https://github.com/zammad/zammad/labels/data privacy)]
+- SessionTimeoutJob.perform_now scheduler job fails on update if scheduler process wasn't restarted [3581](https://github.com/zammad/zammad/issues/3581) [[bug](https://github.com/zammad/zammad/labels/bug)]
+- Freshdesk import attribute ID mapping lookup constants fail application boot in systems with changed default names [3582](https://github.com/zammad/zammad/issues/3582) [[bug](https://github.com/zammad/zammad/labels/bug)]
+- mentioned KB entries with the same title in different categories can not distinguished [3559](https://github.com/zammad/zammad/issues/3559) [[bug](https://github.com/zammad/zammad/labels/bug)] [[UX/UI](https://github.com/zammad/zammad/labels/UX/UI)] [[prioritised by payment](https://github.com/zammad/zammad/labels/prioritised by payment)] [[knowledge base](https://github.com/zammad/zammad/labels/knowledge base)]
+- Invalid auto assignment conditions may break ticket view for unassigned tickets [3567](https://github.com/zammad/zammad/issues/3567) [[bug](https://github.com/zammad/zammad/labels/bug)] [[UX/UI](https://github.com/zammad/zammad/labels/UX/UI)] [[prioritised by payment](https://github.com/zammad/zammad/labels/prioritised by payment)]
+- Add Greek translation for chat [3569](https://github.com/zammad/zammad/pull/3569) [[chat](https://github.com/zammad/zammad/labels/chat)] [[translation](https://github.com/zammad/zammad/labels/translation)]
+- Freshdesk [865](https://github.com/zammad/zammad/issues/865) [[feature backlog](https://github.com/zammad/zammad/labels/feature backlog)] [[import](https://github.com/zammad/zammad/labels/import)]
+- Old JQuery version delivered [3431](https://github.com/zammad/zammad/issues/3431) [[bug](https://github.com/zammad/zammad/labels/bug)] [[chat](https://github.com/zammad/zammad/labels/chat)]

Gemfile

@@ -1,147 +1,239 @@
+# Copyright (C) 2012-2021 Zammad Foundation, http://zammad-foundation.org/
+
 source 'https://rubygems.org'
 
-ruby '2.4.1'
+# core - base
+ruby '2.7.4'
+gem 'rails', '~> 6.0'
 
-gem 'rails', '5.1.4'
-gem 'rails-observers'
+# core - rails additions
+gem 'activerecord-import'
 gem 'activerecord-session_store'
-
-# Bundle edge Rails instead:
-#gem 'rails',     :git => 'git://github.com/rails/rails.git'
-
+gem 'bootsnap', require: false
+gem 'composite_primary_keys'
 gem 'json'
 
-# Supported DBs
+# core - application servers
+gem 'puma', '~> 4', group: :puma
+gem 'unicorn', group: :unicorn
+
+# core - supported ORMs
 gem 'activerecord-nulldb-adapter', group: :nulldb
 gem 'mysql2', group: :mysql
-gem 'pg', group: :postgres
+gem 'pg', '0.21.0', group: :postgres
 
+# core - asynchrous task execution
+gem 'daemons'
+gem 'delayed_job_active_record'
+
+# core - websocket
+gem 'em-websocket'
+gem 'eventmachine'
+gem 'hiredis', require: false
+gem 'redis', require: false
+
+# core - password security
+gem 'argon2'
+
+# core - state machine
+gem 'aasm'
+
+# core - authorization
+gem 'pundit'
+
+# core - image processing
+gem 'rszr', '0.5.2'
+
+# performance - Memcached
+gem 'dalli', require: false
+
+# Only load gems for asset compilation if they are needed to avoid
+#   having unneeded runtime dependencies like NodeJS.
 group :assets do
-  gem 'sass-rails' #, github: 'rails/sass-rails'
-  gem 'coffee-rails'
-  gem 'coffee-script-source'
+  # asset handling - javascript execution for e.g. linux
+  gem 'execjs', require: false
 
-  gem 'sprockets'
+  # asset handling - coffee-script
+  gem 'coffee-rails', require: false
 
-  gem 'uglifier'
-  gem 'eco'
+  # asset handling - frontend templating
+  gem 'eco', require: false
+
+  # asset handling - SASS
+  gem 'sassc-rails', require: false
+
+  # asset handling - pipeline
+  gem 'sprockets', '~> 3.7.2', require: false
+  gem 'uglifier', require: false
+
+  gem 'autoprefixer-rails', require: false
 end
 
-gem 'autoprefixer-rails'
+# Don't use mini_racer any more for asset compilation.
+#   Instead, use an external node.js binary.
+group :mini_racer, optional: true do
+  gem 'libv8'
+  gem 'mini_racer', '0.2.9' # Newer versions require libv8-node instead which does not compile on older platforms.
+end
 
+# authentication - provider
 gem 'doorkeeper'
 gem 'oauth2'
 
-gem 'omniauth'
-gem 'omniauth-oauth2'
+# authentication - third party
+gem 'omniauth-rails_csrf_protection'
+
+# authentication - third party providers
 gem 'omniauth-facebook'
 gem 'omniauth-github'
 gem 'omniauth-gitlab'
 gem 'omniauth-google-oauth2'
 gem 'omniauth-linkedin-oauth2'
-gem 'omniauth-twitter'
 gem 'omniauth-microsoft-office365'
+gem 'omniauth-saml'
+gem 'omniauth-twitter'
 gem 'omniauth-weibo-oauth2'
 
-gem 'twitter'
-gem 'telegramAPI'
+# channels
+gem 'gmail_xoauth'
 gem 'koala'
-gem 'mail'
-gem 'valid_email2'
+gem 'telegramAPI'
+gem 'twitter'
+
+# channels - email additions
 gem 'htmlentities'
-
+gem 'mail', git: 'https://github.com/zammad-deps/mail', branch: '2-7-stable'
 gem 'mime-types'
+gem 'rchardet', '>= 1.8.0'
+gem 'valid_email2'
 
+# feature - business hours
 gem 'biz'
 
-gem 'composite_primary_keys'
-gem 'delayed_job_active_record'
-gem 'daemons'
+# feature - signature diffing
+gem 'diffy'
 
-gem 'simple-rss'
+# feature - excel output
+gem 'writeexcel', require: false
 
-# e. g. on linux we need a javascript execution
-gem 'libv8'
-gem 'execjs'
-gem 'therubyracer'
+# feature - csv import/export
+gem 'csv', require: false
 
-require 'erb'
-require 'yaml'
-
-gem 'net-ldap'
-
-# password security
-gem 'argon2'
-
-gem 'writeexcel'
-gem 'icalendar'
-gem 'icalendar-recurrence'
+# feature - device logging
 gem 'browser'
 
+# feature - iCal export
+gem 'icalendar'
+gem 'icalendar-recurrence'
+
+# feature - phone number formatting
+gem 'telephone_number'
+
+# feature - SMS
+gem 'messagebird-rest'
+gem 'twilio-ruby', require: false
+
+# feature - ordering
+gem 'acts_as_list'
+
 # integrations
-gem 'slack-notifier'
-gem 'clearbit'
-gem 'zendesk_api'
-gem 'viewpoint'
-gem 'rubyntlm', git: 'https://github.com/wimm/rubyntlm.git'
-gem 'autodiscover', git: 'https://github.com/thorsteneckel/autodiscover.git'
+gem 'clearbit', require: false
+gem 'net-ldap'
+gem 'slack-notifier', require: false
+gem 'zendesk_api', require: false
 
-# event machine
-gem 'eventmachine'
-gem 'em-websocket'
+# integrations - exchange
+gem 'autodiscover', git: 'https://github.com/zammad-deps/autodiscover', require: false
+gem 'viewpoint', require: false
 
-gem 'diffy'
+# integrations - S/MIME
+gem 'openssl'
 
 # Gems used only for develop/test and not required
 # in production environments by default.
 group :development, :test do
 
-  gem 'rspec-rails'
-  gem 'test-unit'
+  # app boottime improvement
   gem 'spring'
   gem 'spring-commands-rspec'
-  gem 'sqlite3'
+  gem 'spring-commands-testunit'
+
+  # debugging
+  gem 'byebug'
+  gem 'pry-rails'
+  gem 'pry-remote'
+  gem 'pry-rescue'
+  gem 'pry-stack_explorer'
+
+  # test frameworks
+  gem 'rails-controller-testing'
+  gem 'rspec-rails'
+  gem 'shoulda-matchers'
+  gem 'test-unit'
+
+  # for testing Pundit authorisation policies in RSpec
+  gem 'pundit-matchers'
 
   # code coverage
+  gem 'coveralls', require: false
   gem 'simplecov'
   gem 'simplecov-rcov'
-  gem 'coveralls',         require: false
 
   # UI tests w/ Selenium
-  gem 'selenium-webdriver', '2.53.4'
+  gem 'capybara'
+  gem 'selenium-webdriver'
 
   # livereload on template changes (html, js, css)
   gem 'guard',             require: false
   gem 'guard-livereload',  require: false
-  gem 'rack-livereload'
+  gem 'rack-livereload',   require: false
   gem 'rb-fsevent',        require: false
 
   # auto symlinking
   gem 'guard-symlink', require: false
 
   # code QA
-  gem 'pre-commit'
-  gem 'rubocop'
+  gem 'brakeman', require: false
   gem 'coffeelint'
+  gem 'overcommit'
+  gem 'rubocop'
+  gem 'rubocop-faker'
+  gem 'rubocop-performance'
+  gem 'rubocop-rails'
+  gem 'rubocop-rspec'
 
   # changelog generation
   gem 'github_changelog_generator'
 
-  # Setting ENV for testing purposes
-  gem 'figaro'
-
-  # Use Factory Girl for generating random test data
-  gem 'factory_girl_rails'
+  # generate random test data
+  gem 'factory_bot_rails'
+  gem 'faker'
 
   # mock http calls
   gem 'webmock'
+
+  # record and replay TCP/HTTP transactions
+  gem 'tcr'
+  gem 'vcr'
+
+  # handle deprecations in core and addons
+  gem 'deprecation_toolkit'
+
+  # image comparison in tests
+  gem 'chunky_png'
+
+  # refresh ENVs in CI environment
+  gem 'dotenv', require: false
+
+  # Slack helper for testing
+  gem 'slack-ruby-client', require: false
 end
 
-gem 'puma', group: :puma
-gem 'unicorn', group: :unicorn
-
-# load onw gem's
-local_gemfile = File.join(File.dirname(__FILE__), 'Gemfile.local')
-if File.exist?(local_gemfile)
-  eval_gemfile local_gemfile
-end
+# Want to extend Zammad with additional gems?
+# ZAMMAD USERS: Specify them in Gemfile.local
+#               (That way, you can customize the Gemfile
+#               without having your changes overwritten during upgrades.)
+# ZAMMAD DEVS:  Consult the internal wiki
+#               (or else risk pushing unwanted changes to Gemfile.lock!)
+#               https://git.znuny.com/zammad/zammad/wikis/Tips#user-content-customizing-the-gemfile
+eval_gemfile 'Gemfile.local' if File.exist?('Gemfile.local')

Guardfile

@@ -1,3 +1,5 @@
+# Copyright (C) 2012-2021 Zammad Foundation, http://zammad-foundation.org/
+
 # A sample Guardfile
 # More info at https://github.com/guard/guard#readme
 

LICENSE

@@ -1,7 +1,7 @@
                     GNU AFFERO GENERAL PUBLIC LICENSE
                        Version 3, 19 November 2007
 
- Copyright (C) 2007 Free Software Foundation, Inc. <http://fsf.org/>
+ Copyright (C) 2007 Free Software Foundation, Inc. <https://fsf.org/>
  Everyone is permitted to copy and distribute verbatim copies
  of this license document, but changing it is not allowed.
 
@@ -633,8 +633,8 @@ the "copyright" line and a pointer to where the full notice is found.
     Copyright (C) <year>  <name of author>
 
     This program is free software: you can redistribute it and/or modify
-    it under the terms of the GNU Affero General Public License as published by
-    the Free Software Foundation, either version 3 of the License, or
+    it under the terms of the GNU Affero General Public License as published
+    by the Free Software Foundation, either version 3 of the License, or
     (at your option) any later version.
 
     This program is distributed in the hope that it will be useful,
@@ -643,7 +643,7 @@ the "copyright" line and a pointer to where the full notice is found.
     GNU Affero General Public License for more details.
 
     You should have received a copy of the GNU Affero General Public License
-    along with this program.  If not, see <http://www.gnu.org/licenses/>.
+    along with this program.  If not, see <https://www.gnu.org/licenses/>.
 
 Also add information on how to contact you by electronic and paper mail.
 
@@ -658,4 +658,4 @@ specific requirements.
   You should also get your employer (if you work as a programmer) or school,
 if any, to sign a "copyright disclaimer" for the program, if necessary.
 For more information on this, and how to apply and follow the GNU AGPL, see
-<http://www.gnu.org/licenses/>.
+<https://www.gnu.org/licenses/>.

LICENSE-3RD-PARTY.txt

@@ -57,7 +57,7 @@ License: MIT license
 highlight.pack.js
 Source: https://highlightjs.org
 Copyright: 2006 Ivan Sagalaev (https://github.com/isagalaev)
-License: BSD License
+License: BSD License (BSD-3-Clause)
 -----------------------------------------------------------------------------
 jquery.flot.js
 Source: https://github.com/dnschnur/flot
@@ -74,7 +74,7 @@ jquery.fineuploader-3.0.js
 Source: http://github.com/Valums-File-Uploader/file-uploader
 Copyright: 2010 Andrew Valums <andrew(at)valums.com>
            2012 Ray Nicholus <fineuploader(at)garstasio.com>
-License: MIT license, GNU GPL 2 or later, GNU LGPL 2 or later
+License: GNU GPL 2 or later, GNU LGPL 2 or later
 -----------------------------------------------------------------------------
 jquery.noty.js
 Source: https://github.com/needim/noty/
@@ -163,3 +163,38 @@ Source: https://gist.github.com/sbrin/6801034
 Copyright: 2015, sbrin - https://github.com/sbrin
 License: MIT license
 -----------------------------------------------------------------------------
+ant-design icon font
+Source: https://github.com/ant-design/ant-design
+Copyright: 2015-present Alipay.com, https://www.alipay.com/
+License: MIT license
+-----------------------------------------------------------------------------
+Font Awesome icon font
+Source: http://fontawesome.io/
+Copyright: Font Awesome by Dave Gandy - http://fontawesome.io
+License: MIT License
+-----------------------------------------------------------------------------
+Simple line icons font
+Source: https://github.com/thesabbir/simple-line-icons
+Copyright: 2016 Sabbir Ahmed & All Contributors
+License: MIT license
+-----------------------------------------------------------------------------
+Ionicons icon font
+Source: https://github.com/ionic-team/ionicons
+Copyright: 2016 Drifty (http://drifty.com/)
+License: MIT license
+-----------------------------------------------------------------------------
+Material icon font
+Source: https://github.com/google/material-design-icons
+Copyright: Google
+License: Apache License, Version 2.0
+-----------------------------------------------------------------------------
+QUnit
+Source: https://qunitjs.com/
+Copyright: jQuery Foundation and other contributors
+License: MIT
+-----------------------------------------------------------------------------
+Sinon.JS
+Source: https://sinonjs.org
+Copyright: Sinon committers
+License: BSD-3
+-----------------------------------------------------------------------------

Procfile.frontend

@@ -1,5 +1,9 @@
-web: bundle exec ruby script/rails server -b ${ZAMMAD_BIND_IP:=127.0.0.1} -p ${ZAMMAD_RAILS_PORT:=3000}
-websocket: bundle exec ruby script/websocket-server.rb -b ${ZAMMAD_BIND_IP:=127.0.0.1} -p ${ZAMMAD_WEBSOCKET_PORT:=6042} start
-worker: bundle exec ruby script/scheduler.rb start -t
-guard: bundle exec guard -P livereload
-gulp: bundle exec gulp
+web: bundle exec script/rails server -b ${ZAMMAD_BIND_IP:=127.0.0.1} -p ${ZAMMAD_RAILS_PORT:=3000}
+websocket: bundle exec script/websocket-server.rb -b ${ZAMMAD_BIND_IP:=127.0.0.1} -p ${ZAMMAD_WEBSOCKET_PORT:=6042} start
+worker: bundle exec script/scheduler.rb start -t
+guard: bundle exec guard -i
+
+// This is NOT the `gulp` Ruby gem.
+// Use yarn (or npm) to install the `gulp` npm package,
+// then add node_modules/.bin to your $PATH.
+gulp: gulp

README.md

@@ -2,24 +2,25 @@
 
 Zammad is a web based open source helpdesk/customer support system with many
 features to manage customer communication via several channels like telephone,
-facebook, twitter, chat and e-mails. It is distributed under the GNU AFFERO
-General Public License (AGPL) and tested on Linux, Solaris, AIX, FreeBSD,
-OpenBSD and Mac OS 10.x. Do you receive many e-mails and want to answer them
-with a team of agents?
+facebook, twitter, chat and e-mails. It is distributed under version 3 of the
+GNU AFFERO General Public License (GNU AGPLv3).
+
+Do you receive many e-mails and want to answer them with a team of agents?
 
 You're going to love Zammad!
 
 ## Status
 
-- Build: [![Build Status](https://travis-ci.org/zammad/zammad.svg?branch=develop)](https://travis-ci.org/zammad/zammad)
-- Code: [![Code Climate](https://codeclimate.com/github/zammad/zammad/badges/gpa.svg)](https://codeclimate.com/github/zammad/zammad) [![Coverage Status](https://coveralls.io/repos/github/zammad/zammad/badge.svg)](https://coveralls.io/github/zammad/zammad)
+- CI: ![ci](https://github.com/zammad/zammad/workflows/ci/badge.svg)
+- Build Docker images: ![build-docker-compose-images](https://github.com/zammad/zammad/workflows/build-docker-compose-images/badge.svg) ![build-docker-image](https://github.com/zammad/zammad/workflows/build-docker-image/badge.svg)
+- Code: [![Code Climate](https://codeclimate.com/github/zammad/zammad/badges/gpa.svg)](https://codeclimate.com/github/zammad/zammad)
 - Docs: [![Documentation Status](https://readthedocs.org/projects/zammad/badge/)](https://docs.zammad.org)
 - Issues: [![Percentage of issues still open](http://isitmaintained.com/badge/open/zammad/zammad.svg)](https://github.com/zammad/zammad/issues "Percentage of issues still open") [![Average time to resolve an issue](http://isitmaintained.com/badge/resolution/zammad/zammad.svg)](https://github.com/zammad/zammad/issues?q=is%3Aissue+is%3Aclosed "Average time to resolve an issue")
-- Download DEB/RPM: [![](https://img.shields.io/badge/Branch-develop-lightgrey.svg)](https://packager.io/gh/zammad/zammad#develop) [![](https://img.shields.io/badge/Branch-stable-lightgrey.svg)](https://packager.io/gh/zammad/zammad#stable)
-- Docker multi container image: [![](https://images.microbadger.com/badges/image/zammad/zammad-docker-compose:zammad.svg)](https://microbadger.com/images/zammad/zammad-docker-compose:zammad) [![](https://img.shields.io/badge/version-stable-blue.svg)](https://hub.docker.com/r/zammad/zammad-docker-compose)
-- Docker single container image: [![](https://images.microbadger.com/badges/image/zammad/zammad.svg)](https://microbadger.com/images/zammad/zammad) [![](https://images.microbadger.com/badges/version/zammad/zammad.svg)](https://hub.docker.com/r/zammad/zammad/)
-- Vagrant: [![](https://img.shields.io/badge/version-develop-blue.svg)](https://github.com/zammad/zammad-vagrant)
-- License: [![](https://img.shields.io/badge/License-AGPL%203.0-lightgrey.svg)](https://github.com/zammad/zammad/blob/develop/LICENSE)
+- Download DEB/RPM: [![](https://img.shields.io/badge/Branch-stable-blue.svg)](https://packager.io/gh/zammad/zammad#stable) [![](https://img.shields.io/badge/Branch-develop-lightgrey.svg)](https://packager.io/gh/zammad/zammad#develop)
+- Docker multi container image: [![](https://img.shields.io/badge/version-stable-blue.svg)](https://hub.docker.com/r/zammad/zammad-docker-compose)
+- Docker single container image: [![](https://img.shields.io/badge/version-develop-lightgrey.svg)](https://hub.docker.com/r/zammad/zammad/)
+- Vagrant: [![](https://img.shields.io/badge/version-develop-lightgrey.svg)](https://github.com/zammad/zammad-vagrant)
+- License: [![](https://img.shields.io/badge/License-AGPL%203.0-brightgreen.svg)](https://github.com/zammad/zammad/blob/develop/LICENSE)
 
 ## Installing & Getting Started
 
@@ -33,7 +34,7 @@ https://zammad.org/screenshots
 
 ## REST API
 
-https://docs.zammad.org/en/latest/api-intro.html
+https://docs.zammad.org/en/latest/api/intro.html
 
 
 ## Contributing
@@ -44,4 +45,3 @@ https://zammad.org/participate
 Thanks! ❤️ ❤️ ❤️
 
  Your Zammad Team
-

Rakefile

@@ -1,7 +1,9 @@
 #!/usr/bin/env rake
+# Copyright (C) 2012-2021 Zammad Foundation, http://zammad-foundation.org/
+
 # Add your own tasks in files placed in lib/tasks ending in .rake,
 # for example lib/tasks/capistrano.rake, and they will automatically be available to Rake.
 
-require File.expand_path('../config/application', __FILE__)
+require_relative 'config/application'
 
 Zammad::Application.load_tasks

VERSION

@@ -1 +1 @@
-2.1.x
+5.0.x

app/assets/javascripts/app/controllers/_application_controller.coffee

@@ -1,899 +0,0 @@
-class App.Controller extends Spine.Controller
-  @include App.LogInclude
-
-  constructor: (params) ->
-
-    # unbind old bindlings
-    if params && params.el && params.el.unbind
-      params.el.unbind()
-
-    super
-
-    # generate controllerId
-    @controllerId = 'controller-' + new Date().getTime() + '-' + Math.floor(Math.random() * 999999)
-
-    # apply to release controller on dom remove
-    @el.on('remove', @releaseController)
-    @el.on('remove', @release)
-
-    # create shortcuts
-    @Config  = App.Config
-    @Session = App.Session
-
-    # create common accessors
-    @apiPath = @Config.get('api_path')
-
-    # remember ajax calls to abort them on dom release
-    @ajaxCalls = []
-    @ajax = (data) =>
-      ajaxId = App.Ajax.request(data)
-      @ajaxCalls.push ajaxId
-
-  navigate: (location, hideCurrentLocationFromHistory = false) ->
-    @log 'debug', "navigate to '#{location}', hide from history '#{hideCurrentLocationFromHistory}'"
-
-    # hide current location from browser history, allow to use back button in browser
-    if hideCurrentLocationFromHistory
-      if window.history
-        history = App.Config.get('History')
-        oldLocation = history[history.length-2]
-        if oldLocation
-          window.history.replaceState(null, null, oldLocation)
-    super location
-
-  preventDefault: (e) ->
-    e.preventDefault()
-
-  bind: (event, callback) =>
-    App.Event.bind(
-      event
-      callback
-      @controllerId
-    )
-
-  unbind: (event, callback) =>
-    App.Event.unbind(
-      event
-      callback
-      @controllerId
-    )
-
-  clearDelay: (delay_id) =>
-    App.Delay.clear(delay_id, @controllerId)
-
-  delay: (callback, timeout, delay_id, queue = false) =>
-    App.Delay.set(callback, timeout, delay_id, @controllerId, queue)
-
-  clearInterval: (interval_id) =>
-    App.Interval.clear(interval_id, @controllerId)
-
-  interval: (callback, interval, interval_id, queue = false) =>
-    App.Interval.set(callback, interval, interval_id, @controllerId, queue)
-
-  releaseController: =>
-    App.Event.unbindLevel(@controllerId)
-    App.Delay.clearLevel(@controllerId)
-    App.Interval.clearLevel(@controllerId)
-    if @ajaxCalls
-      for callId in @ajaxCalls
-        App.Ajax.abort(callId)
-    @userTicketPopupsDestroy()
-    @ticketPopupsDestroy()
-    @userPopupsDestroy()
-    @organizationPopupsDestroy()
-
-  release: ->
-    # release custom bindings after it got removed from dom
-
-  # add @title methode to set title
-  title: (name, translate = false) ->
-#    $('html head title').html(@Config.get(product_name) + ' - ' + App.i18n.translateInline(name))
-    title = name
-    if translate
-      title = App.i18n.translatePlain(name)
-    documentTitle = "#{@Config.get('product_name')} - #{title}"
-    document.title = documentTitle
-    App.Event.trigger('window-title-set', documentTitle)
-
-  copyToClipboard: (text) ->
-    if window.clipboardData # IE
-      window.clipboardData.setData('Text', text)
-    else
-      window.prompt('Copy to clipboard: Ctrl+C, Enter', text)
-
-  # disable all delay's and interval's
-  disconnectClient: ->
-    App.Delay.reset()
-    App.Interval.reset()
-    App.WebSocket.close(force: true)
-
-  # add @notify methode to create notification
-  notify: (data) ->
-    App.Event.trigger 'notify', data
-
-  # add @notifyDesktop methode to create desktop notification
-  notifyDesktop: (data) ->
-    App.Event.trigger 'notifyDesktop', data
-
-  # add @navupdate methode to update navigation
-  navupdate: (url, force = false) ->
-
-    # ignore navupdate untill #clues are gone
-    return if !force && window.location.hash is '#clues'
-
-    App.Event.trigger 'navupdate', url
-
-  # show navigation
-  navShow: ->
-    return if $('#navigation').is(':visible')
-    $('#navigation').removeClass('hide')
-
-  # hide navigation
-  navHide: ->
-    return if !$('#navigation').is(':visible')
-    $('#navigation').addClass('hide')
-
-  updateNavMenu: =>
-    delay = ->
-      App.Event.trigger('menu:render')
-    @delay(delay, 150)
-
-  scrollTo: (x = 0, y = 0, delay = 0) ->
-    a = ->
-      window.scrollTo(x, y)
-
-    @delay(a, delay)
-
-  scrollToIfNeeded: (element, position = true) ->
-    return if !element
-    return if !element.get(0)
-    if position is true
-      return if element.visible(true)
-    element.get(0).scrollIntoView(position)
-
-  shake: (element) ->
-
-    # this part is from wordpress 3, thanks to open source
-    shakeMe = (element, position, positionEnd) ->
-      positionStart = position.shift()
-      element.css('left', positionStart + 'px')
-      if position.length > 0
-        setTimeout(->
-          shakeMe(element, position, positionEnd)
-        , positionEnd)
-      else
-        try
-          element.css('position', 'static')
-        catch e
-          console.log 'error', e
-
-    position = [ 15, 30, 15, 0, -15, -30, -15, 0 ]
-    position = position.concat(position.concat(position))
-    element.css('position', 'relative')
-    shakeMe(element, position, 20)
-
-  # get all params of the form
-  formParam: (form) ->
-    App.ControllerForm.params(form)
-
-  formDisable: (form) ->
-    App.ControllerForm.disable(form)
-
-  formEnable: (form) ->
-    App.ControllerForm.enable(form)
-
-  formValidate: (data) ->
-    App.ControllerForm.validate(data)
-
-  # get all query params of the url
-  queryParam: ->
-    return if !@query
-    pairs = @query.split(';')
-    params = {}
-    for pair in pairs
-      result = pair.match('(.+?)=(.*)')
-      if result && result[1]
-        params[result[1]] = result[2]
-    params
-
-#  redirectToLogin: (data) ->
-#
-
-  # human readable file size
-  humanFileSize: (size) ->
-    App.Utils.humanFileSize(size)
-
-  # human readable time
-  humanTime: (time, escalation, long = true) ->
-    App.PrettyDate.humanTime(time, escalation, long)
-
-  userInfo: (data) ->
-    el = data.el || $('[data-id="customer_info"]')
-    el.unbind()
-
-    # start customer info controller
-    new App.WidgetUser(
-      el:       el
-      user_id:  data.user_id
-      callback: data.callback
-    )
-
-  permissionCheckRedirect: (key, closeTab = false) ->
-    return true if @permissionCheck(key)
-
-    # remember requested url
-    location = window.location.hash
-    if location && location isnt '#login' && location isnt '#logout' && location isnt '#keyboard_shortcuts'
-      App.Config.set('requested_url', location)
-
-    if closeTab
-      App.TaskManager.remove(@task_key)
-
-    # redirect to login
-    @navigate '#login'
-
-    throw "No permission for #{key}"
-
-    false
-
-  permissionCheck: (key) ->
-    userId = App.Session.get('id')
-    return false if !userId
-    user = App.User.findNative(userId)
-    return false if !user
-    user.permission(key)
-
-  authenticateCheckRedirect: ->
-    return true if @authenticateCheck()
-
-    # remember requested url
-    location = window.location.hash
-    if location && location isnt '#login' && location isnt '#logout' && location isnt '#keyboard_shortcuts'
-      @Config.set('requested_url', location)
-
-    # redirect to login
-    @navigate '#login'
-
-    throw 'No exsisting session'
-
-    false
-
-  authenticateCheck: ->
-    # return true if session exists
-    return true if @Session.get()
-    false
-
-  frontendTime: (timestamp, row = {}) ->
-    if !row['subclass']
-      row['subclass'] = ''
-    "<span class=\"humanTimeFromNow #{row.subclass}\" data-time=\"#{timestamp}\">?</span>"
-
-  frontendTimeUpdate: =>
-    update = =>
-      @frontendTimeUpdateElement($('#app'))
-    App.Interval.set(update, 61000, 'frontendTimeUpdate', 'ui')
-
-  frontendTimeUpdateElement: (el) =>
-    ui = @
-    el.find('.humanTimeFromNow').each( ->
-      item = $(@)
-      ui.frontendTimeUpdateItem(item, item.text())
-    )
-
-  frontendTimeUpdateItem: (item, currentVal) =>
-    timestamp = item.data('time')
-    time      = @humanTime(timestamp, item.hasClass('escalation'))
-
-    # only do dom updates on changes
-    return if time is currentVal
-    item.attr('title', App.i18n.translateTimestamp(timestamp))
-    item.html(time)
-
-  ticketPopups: (position = 'right') ->
-
-    # open ticket in new task if curent user agent
-    if @permissionCheck('ticket.agent')
-      @$('div.ticket-popover, span.ticket-popover').bind('click', (e) =>
-        id = $(e.target).data('id')
-        return if !id
-        ticket = App.Ticket.findNative(id)
-        @navigate ticket.uiUrl()
-      )
-
-    @ticketPopupsDestroy()
-
-    # show ticket popup
-    ui = @
-    @ticketPopupsList = @el.find('.ticket-popover').popover(
-      trigger:    'hover'
-      container:  'body'
-      html:       true
-      animation:  false
-      delay:      100
-      placement:  position
-      title: ->
-        ticketId = $(@).data('id')
-        ticket   = App.Ticket.find(ticketId)
-        App.Utils.htmlEscape(ticket.title)
-      content: ->
-        ticketId = $(@).data('id')
-        ticket   = App.Ticket.fullLocal(ticketId)
-        html = $(App.view('popover/ticket')(
-          ticket: ticket
-        ))
-        html.find('.humanTimeFromNow').each(->
-          ui.frontendTimeUpdateItem($(@))
-        )
-        html
-    )
-
-  ticketPopupsDestroy: =>
-    if @ticketPopupsList
-      @ticketPopupsList.popover('destroy')
-
-  userPopups: (position = 'right') ->
-
-    # open user in new task if current user is agent
-    return if !@permissionCheck('ticket.agent')
-    @$('div.user-popover, span.user-popover').bind('click', (e) =>
-      id = $(e.target).data('id')
-      return if !id
-      user = App.User.findNative(id)
-      @navigate user.uiUrl()
-    )
-
-    @userPopupsDestroy()
-
-    # show user popup
-    @userPopupsList = @el.find('.user-popover').popover(
-      trigger:    'hover'
-      container:  'body'
-      html:       true
-      animation:  false
-      delay:      100
-      placement:  "auto #{position}"
-      title: ->
-        userId = $(@).data('id')
-        user   = App.User.find(userId)
-        headline = App.Utils.htmlEscape(user.displayName())
-        if user.isOutOfOffice()
-          headline += " (#{App.Utils.htmlEscape(user.outOfOfficeText())})"
-        headline
-      content: ->
-        userId = $(@).data('id')
-        user   = App.User.fullLocal(userId)
-
-        # get display data
-        userData = []
-        for attributeName, attributeConfig of App.User.attributesGet('view')
-
-          # check if value for _id exists
-          name    = attributeName
-          nameNew = name.substr(0, name.length - 3)
-          if nameNew of user
-            name = nameNew
-
-          # add to show if value exists
-          if user[name] && attributeConfig.shown
-
-            # do not show firstname and lastname / already show via diplayName()
-            if name isnt 'firstname' && name isnt 'lastname' && name isnt 'organization'
-              userData.push attributeConfig
-
-        # insert data
-        App.view('popover/user')(
-          user:     user
-          userData: userData
-        )
-    )
-
-  userPopupsDestroy: =>
-    if @userPopupsList
-      @userPopupsList.popover('destroy')
-
-  organizationPopups: (position = 'right') ->
-
-    # open org in new task if current user agent
-    return if !@permissionCheck('ticket.agent')
-
-    @$('div.organization-popover, span.organization-popover').bind('click', (e) =>
-      id = $(e.target).data('id')
-      return if !id
-      organization = App.Organization.find(id)
-      @navigate organization.uiUrl()
-    )
-
-    @organizationPopupsDestroy()
-
-    # show organization popup
-    @organizationPopupsList = @el.find('.organization-popover').popover(
-      trigger:    'hover'
-      container:  'body'
-      html:       true
-      animation:  false
-      delay:      100
-      placement:  "auto #{position}"
-      title: ->
-        organization_id = $(@).data('id')
-        organization    = App.Organization.find(organization_id)
-        App.Utils.htmlEscape(organization.name)
-      content: ->
-        organization_id = $(@).data('id')
-        organization    = App.Organization.fullLocal(organization_id)
-
-        # get display data
-        organizationData = []
-        for attributeName, attributeConfig of App.Organization.attributesGet('view')
-
-          # check if value for _id exists
-          name    = attributeName
-          nameNew = name.substr(0, name.length - 3)
-          if nameNew of organization
-            name = nameNew
-
-          # add to show if value exists
-          if organization[name] && attributeConfig.shown
-
-            # do not show firstname and lastname / already show via diplayName()
-            if name isnt 'name'
-              organizationData.push attributeConfig
-
-        # insert data
-        App.view('popover/organization')(
-          organization:     organization,
-          organizationData: organizationData,
-        )
-    )
-
-  organizationPopupsDestroy: =>
-    if @organizationPopupsList
-      @organizationPopupsList.popover('destroy')
-
-  userTicketPopups: (params) ->
-
-    show = (data, ticket_list) =>
-
-      if !data.position
-        data.position = 'left'
-
-      @userTicketPopupsDestroy()
-
-      # show user popup
-      ui = @
-      @userTicketPopupsList = @el.find(data.selector).popover(
-        trigger:    'hover'
-        container:  'body'
-        html:       true
-        animation:  false
-        delay:      100
-        placement:  "auto #{data.position}"
-        title: ->
-          $(@).find('[title="*"]').val()
-
-        content: ->
-          type = $(@).filter('[data-type]').data('type')
-          tickets = []
-          if ticket_list[type]
-            for ticketId in ticket_list[type]
-              tickets.push App.Ticket.fullLocal(ticketId)
-
-          # insert data
-          html = $(App.view('popover/user_ticket_list')(
-            tickets: tickets
-          ))
-          html.find('.humanTimeFromNow').each( ->
-            ui.frontendTimeUpdateItem($(@))
-          )
-          html
-      )
-
-    fetch = (params) =>
-      @ajax(
-        type:  'GET'
-        url:   "#{@Config.get('api_path')}/ticket_customer"
-        data:
-          customer_id: params.user_id
-        processData: true
-        success: (data, status, xhr) ->
-          App.Collection.loadAssets(data.assets)
-          show(params, { open: data.ticket_ids_open, closed: data.ticket_ids_closed })
-      )
-
-    # get data
-    fetch(params)
-
-  userTicketPopupsDestroy: =>
-    if @userTicketPopupsList
-      @userTicketPopupsList.popover('destroy')
-
-  anyPopoversDestroy: ->
-
-    # do not remove permanent .popover--notifications widget
-    $('.popover:not(.popover--notifications)').remove()
-
-  recentView: (object, o_id) =>
-    params =
-      object: object
-      o_id:   o_id
-    App.Ajax.request(
-      id:    "recent_view_#{object}_#{o_id}"
-      type:  'POST'
-      url:   @Config.get('api_path') + '/recent_view'
-      data:  JSON.stringify(params)
-      processData: true
-    )
-
-  prepareForObjectList: (items) ->
-    for item in items
-      item = @prepareForObjectListItem(item)
-    items
-
-  prepareForObjectListItem: (item) ->
-    item.link  = ''
-    item.title = '???'
-
-    # convert backend name space to local name space
-    item.object = item.object.replace('::', '')
-
-    # lookup real data
-    if App[item.object] && App[item.object].exists(item.o_id)
-      object            = App[item.object].findNative(item.o_id)
-      item.objectNative = object
-      item.link         = object.uiUrl()
-      item.title        = object.displayName()
-      item.object_name  = object.objectDisplayName()
-      item.cssIcon      = object.iconActivity(@Session.get())
-
-    item.created_by = App.User.findNative(item.created_by_id)
-    item
-
-  # central method, is getting called on every ticket form change
-  ticketFormChanges: (params, attribute, attributes, classname, form, ui) =>
-    if @formMeta.dependencies && @formMeta.dependencies[attribute.name]
-      dependency = @formMeta.dependencies[attribute.name][ parseInt(params[attribute.name]) ]
-      if !dependency
-        dependency = @formMeta.dependencies[attribute.name][ params[attribute.name] ]
-      if dependency
-        for fieldNameToChange of dependency
-          filter = []
-          if dependency[fieldNameToChange]
-            filter = dependency[fieldNameToChange]
-
-          # find element to replace
-          for item in attributes
-            if item.name is fieldNameToChange
-              item['filter'] = {}
-              item['filter'][ fieldNameToChange ] = filter
-              item.default = params[item.name]
-              #if !item.default
-              #  delete item['default']
-              newElement = ui.formGenItem(item, classname, form)
-
-          # replace new option list
-          if newElement
-            form.find('[name="' + fieldNameToChange + '"]').closest('.form-group').replaceWith(newElement)
-
-  stopPropagation: (e) ->
-    e.stopPropagation()
-
-  startLoading: (el) =>
-    return if @initLoadingDone && !el
-    @initLoadingDone = true
-    @stopLoading()
-    later = =>
-      if el
-        el.html App.view('generic/page_loading')()
-      else
-        @html App.view('generic/page_loading')()
-    @initLoadingDoneDelay = @delay(later, 1800)
-
-  stopLoading: =>
-    return if !@initLoadingDoneDelay
-    @clearDelay(@initLoadingDoneDelay)
-
-  renderScreenSuccess: (data) ->
-    App.TaskManager.touch(@task_key) if @task_key
-    (data.el || @).html App.view('generic/error/success')(data)
-
-  renderScreenError: (data) ->
-    App.TaskManager.touch(@task_key) if @task_key
-    (data.el || @).html App.view('generic/error/generic')(data)
-
-  renderScreenNotFound: (data) ->
-    App.TaskManager.touch(@task_key) if @task_key
-    (data.el || @).html App.view('generic/error/not_found')(data)
-
-  renderScreenUnauthorized: (data) ->
-    App.TaskManager.touch(@task_key) if @task_key
-    (data.el || @).html App.view('generic/error/unauthorized')(data)
-
-  locationVerify: (e) =>
-    newLocation = $(e.currentTarget).attr 'href'
-    @log 'debug', "new location '#{newLocation}'"
-    return if !newLocation
-    @locationExecuteOrNavigate(newLocation)
-
-  locationExecuteOrNavigate: (newLocation) =>
-    currentLocation = Spine.Route.getPath()
-    @log 'debug', "current location '#{currentLocation}'"
-    if newLocation.replace(/#/, '') isnt currentLocation
-      @log 'debug', "navigate to location '#{newLocation}'"
-      @navigate(newLocation)
-      return
-    @locationExecute(newLocation)
-
-  locationExecute: (newLocation) =>
-    newLocation = newLocation.replace(/#/, '')
-    @log 'debug', "execute controller again for '#{newLocation}' because of same hash"
-    Spine.Route.matchRoutes(newLocation)
-
-  logoUrl: ->
-    "#{@Config.get('image_path')}/#{@Config.get('product_logo')}"
-
-  selectAll: (e) ->
-    e.currentTarget.focus()
-    e.currentTarget.select()
-
-  windowReload: (e,url) ->
-    if e
-      e.preventDefault()
-    $('#app').hide().attr('style', 'display: none!important')
-    if url
-      window.location = url
-      return true
-    if window.location.reload
-      window.location.reload()
-      return true
-    if window.location.href
-      window.location.href = window.location.href
-      return true
-
-    throw 'Cant reload page!'
-
-class App.ControllerPermanent extends App.Controller
-  constructor: ->
-    if @requiredPermission
-      @permissionCheckRedirect(@requiredPermission, true)
-
-    super
-
-    @navShow()
-
-class App.ControllerSubContent extends App.Controller
-  constructor: ->
-    if @requiredPermission
-      @permissionCheckRedirect(@requiredPermission)
-
-    super
-
-  show: =>
-    return if !@header
-    @title @header, true
-
-class App.ControllerContent extends App.Controller
-  constructor: ->
-    if @requiredPermission
-      @permissionCheckRedirect(@requiredPermission)
-
-    super
-
-    # hide tasks
-    App.TaskManager.hideAll()
-    $('#content').removeClass('hide').removeClass('active')
-    @navShow()
-
-class App.ControllerModal extends App.Controller
-  authenticateRequired: false
-  backdrop: true
-  keyboard: true
-  large: false
-  small: false
-  head: '?'
-  container: null
-  buttonClass: 'btn--success'
-  centerButtons: []
-  leftButtons: []
-  buttonClose: true
-  buttonCancel: false
-  buttonCancelClass: 'btn--text btn--subtle'
-  buttonSubmit: true
-  headPrefix: ''
-  shown: true
-  closeOnAnyClick: false
-
-  events:
-    'submit form':                        'submit'
-    'click .js-submit:not(.is-disabled)': 'submit'
-    'click .js-cancel':                   'cancel'
-    'click .js-close':                    'cancel'
-
-  className: 'modal fade'
-
-  constructor: ->
-    super
-
-    if @authenticateRequired
-      return if !@authenticateCheckRedirect()
-
-    # rerender view, e. g. on langauge change
-    @bind('ui:rerender', =>
-      @update()
-      'modal'
-    )
-    if @shown
-      @render()
-
-  content: ->
-    'You need to implement a one @content()!'
-
-  update: =>
-    if @message
-      content = App.i18n.translateContent(@message)
-    else if @contentInline
-      content = @contentInline
-    else
-      content = @content()
-    modal = $(App.view('modal')
-      head:              @head
-      headPrefix:        @headPrefix
-      message:           @message
-      detail:            @detail
-      buttonClose:       @buttonClose
-      buttonCancel:      @buttonCancel
-      buttonCancelClass: @buttonCancelClass
-      buttonSubmit:      @buttonSubmit
-      buttonClass:       @buttonClass
-      centerButtons:     @centerButtons
-      leftButtons:       @leftButtons
-    )
-    modal.find('.modal-body').html content
-    if !@initRenderingDone
-      @initRenderingDone = true
-      @html modal
-    else
-      @$('.modal-dialog').replaceWith(modal)
-    @post()
-
-  post: ->
-    # nothing
-
-  element: =>
-    @el
-
-  render: =>
-    if @buttonSubmit is true
-      @buttonSubmit = 'Submit'
-    if @buttonCancel is true
-      @buttonCancel = 'Cancel & Go Back'
-
-    @update()
-
-    if @container
-      @el.addClass('modal--local')
-    if @large
-      @el.addClass('modal--large')
-    if @small
-      @el.addClass('modal--small')
-
-    @el.modal
-      keyboard:  @keyboard
-      show:      true
-      backdrop:  @backdrop
-      container: @container
-    .on
-      'show.bs.modal':   @onShow
-      'shown.bs.modal':  @onShown
-      'hide.bs.modal':   @onClose
-      'hidden.bs.modal': =>
-        @onClosed()
-        $('.modal').remove()
-      'dismiss.bs.modal': @onCancel
-
-    if @closeOnAnyClick
-      @el.on('click', =>
-        @close()
-      )
-
-  close: (e) =>
-    if e
-      e.preventDefault()
-    @el.modal('hide')
-
-  formParams: =>
-    if @container
-      return @formParam(@container.find('.modal form'))
-    return @formParam(@$('.modal form'))
-
-  onShow: ->
-    # do nothing
-
-  onShown: =>
-    @$('input:not([disabled]):not([type="hidden"]):not(".btn"), textarea').first().focus()
-
-  onClose: ->
-    # do nothing
-
-  onClosed: ->
-    # do nothing
-
-  onSubmit: ->
-    # do nothing
-
-  onCancel: ->
-    # do nothing
-
-  cancel: (e) =>
-    @close(e)
-    @onCancel(e)
-
-  submit: (e) =>
-    e.stopPropagation()
-    e.preventDefault()
-    @onSubmit(e)
-
-class App.SessionMessage extends App.ControllerModal
-  onCancel: (e) =>
-    if @forceReload
-      @windowReload(e)
-
-  onClose: (e) =>
-    if @forceReload
-      @windowReload(e)
-
-  onSubmit: (e) =>
-    if @forceReload
-      @windowReload(e)
-    else
-      @close()
-
-class App.UpdateHeader extends App.Controller
-  constructor: ->
-    super
-
-    # subscribe and reload data / fetch new data if triggered
-    @subscribeId = @genericObject.subscribe(@render)
-
-  release: =>
-    App[ @genericObject.constructor.className ].unsubscribe(@subscribeId)
-
-  render: (genericObject) =>
-    @el.find('.page-header h1').html(genericObject.displayName())
-
-
-class App.UpdateTastbar extends App.Controller
-  constructor: ->
-    super
-
-    # subscribe and reload data / fetch new data if triggered
-    @subscribeId = @genericObject.subscribe(@update)
-
-  release: =>
-    App[ @genericObject.constructor.className ].unsubscribe(@subscribeId)
-
-  update: (genericObject) =>
-
-    # update taskbar with new meta data
-    App.TaskManager.touch(@task_key)
-
-class App.ControllerWidgetPermanent extends App.Controller
-  constructor: (params) ->
-    if params.el
-      params.el.append('<div id="' + params.key + '"></div>')
-      params.el = ("##{params.key}")
-
-    super(params)
-
-class App.ControllerWidgetOnDemand extends App.Controller
-  constructor: (params) ->
-    params.el = $("##{params.key}")
-    super
-
-  element: =>
-    $("##{@key}")
-
-  html: (raw) =>
-
-    # check if parent exists
-    if !$("##{@key}").get(0)
-      $('#app').before("<div id=\"#{@key}\" class=\"#{@className}\"></div>")
-    $("##{@key}").html raw

app/assets/javascripts/app/controllers/_application_controller/_base.coffee

@@ -0,0 +1,414 @@
+class App.Controller extends Spine.Controller
+  @include App.LogInclude
+  @include App.RenderScreen
+
+  constructor: ->
+    super
+
+    # generate controllerId
+    @controllerId = 'controller-' + new Date().getTime() + '-' + Math.floor(Math.random() * 999999)
+
+    # apply to release controller on dom remove
+    @el.on('remove', @releaseController)
+    @el.on('remove', @release)
+
+    # create shortcuts
+    @Config  = App.Config
+    @Session = App.Session
+
+    # create common accessors
+    @apiPath = @Config.get('api_path')
+
+    # remember ajax calls to abort them on dom release
+    @ajaxCalls = []
+    @ajax = (data) =>
+      ajaxId = App.Ajax.request(data)
+      @ajaxCalls.push ajaxId
+
+  navigate: (location, params = {}) ->
+    @log 'debug', "navigate to '#{location}'"
+    @log 'debug', "navigate hide from history '#{params.hideCurrentLocationFromHistory}'" if params.hideCurrentLocationFromHistory
+    @el.empty() if params.emptyEl
+    @el.remove() if params.removeEl
+
+    # hide current location from browser history, allow to use back button in browser
+    if params.hideCurrentLocationFromHistory
+      if window.history
+        history = App.Config.get('History')
+        oldLocation = history[history.length-2]
+        if oldLocation
+          window.history.replaceState(null, null, oldLocation)
+    super location
+
+  preventDefault: (e) ->
+    e.preventDefault()
+
+  controllerBind: (event, callback) =>
+    App.Event.bind(
+      event
+      callback
+      @controllerId
+    )
+
+  controllerUnbind: (event, callback) =>
+    App.Event.unbind(
+      event
+      callback
+      @controllerId
+    )
+
+  clearDelay: (delay_id) =>
+    App.Delay.clear(delay_id, @controllerId)
+
+  delay: (callback, timeout, delay_id, queue = false) =>
+    App.Delay.set(callback, timeout, delay_id, @controllerId, queue)
+
+  clearInterval: (interval_id) =>
+    App.Interval.clear(interval_id, @controllerId)
+
+  interval: (callback, interval, interval_id, queue = false) =>
+    App.Interval.set(callback, interval, interval_id, @controllerId, queue)
+
+  releaseController: =>
+    App.Event.unbindLevel(@controllerId)
+    App.Delay.clearLevel(@controllerId)
+    App.Interval.clearLevel(@controllerId)
+    @abortAjaxCalls()
+
+    # release bindings
+    if @el
+      @el.undelegate()
+      @el.unbind()
+      @el.empty()
+
+    # release spine bindings (see release() of spine.coffee)
+    @off()
+    @unbind()
+    @stopListening()
+
+  release: ->
+    # nothing
+
+  abortAjaxCalls: =>
+    if !@ajaxCalls
+      return
+
+    idsToCancel = @ajaxCalls
+
+    @ajaxCalls = []
+
+    for callId in idsToCancel
+      App.Ajax.abort(callId)
+
+  # add @title method to set title
+  title: (name, translate = false) ->
+#    $('html head title').html(@Config.get(product_name) + ' - ' + App.i18n.translateInline(name))
+    title = name
+    if translate
+      title = App.i18n.translatePlain(name)
+    documentTitle = "#{@Config.get('product_name')} - #{title}"
+    document.title = documentTitle
+    App.Event.trigger('window-title-set', documentTitle)
+
+  copyToClipboard: (text) ->
+    if window.clipboardData # IE
+      window.clipboardData.setData('Text', text)
+    else
+      window.prompt('Copy to clipboard: Ctrl+C, Enter', text)
+
+  # disable all delay's and interval's
+  disconnectClient: ->
+    App.Delay.reset()
+    App.Interval.reset()
+    App.WebSocket.close(force: true)
+
+  # add @notify method to create notification
+  notify: (data) ->
+    App.Event.trigger('notify', data)
+
+  # add @notifyDesktop method to create desktop notification
+  notifyDesktop: (data) ->
+    App.Event.trigger('notifyDesktop', data)
+
+  # add @navupdate method to update navigation
+  navupdate: (url, force = false) ->
+
+    # ignore navupdate until #clues are gone
+    return if !force && window.location.hash is '#clues'
+
+    App.Event.trigger('navupdate', url)
+
+  updateNavMenu: =>
+    delay = ->
+      App.Event.trigger('menu:render')
+    @delay(delay, 150)
+
+  closeTab: (key = @taskKey, dest) =>
+    return if !key?
+    App.TaskManager.remove(key)
+    dest ?= App.TaskManager.nextTaskUrl() || '#'
+    @navigate dest
+
+  scrollTo: (x = 0, y = 0, delay = 0) ->
+    a = ->
+      window.scrollTo(x, y)
+
+    @delay(a, delay)
+
+  scrollToIfNeeded: (element, position = true) ->
+    return if !element
+    return if !element.get(0)
+    if position is true
+      return if element.visible(true)
+    element.get(0).scrollIntoView(position)
+
+  shake: (element) ->
+
+    # this part is from wordpress 3, thanks to open source
+    shakeMe = (element, position, positionEnd) ->
+      positionStart = position.shift()
+      element.css('left', positionStart + 'px')
+      if position.length > 0
+        setTimeout(->
+          shakeMe(element, position, positionEnd)
+        , positionEnd)
+      else
+        try
+          element.css('position', 'static')
+        catch e
+          console.log 'error', e
+
+    position = [ 15, 30, 15, 0, -15, -30, -15, 0 ]
+    position = position.concat(position.concat(position))
+    element.css('position', 'relative')
+    shakeMe(element, position, 20)
+
+  # get all params of the form
+  formParam: (form) ->
+    App.ControllerForm.params(form)
+
+  formDisable: (form, type) ->
+    App.ControllerForm.disable(form, type)
+
+  formEnable: (form, type) ->
+    App.ControllerForm.enable(form, type)
+
+  formValidate: (data) ->
+    App.ControllerForm.validate(data)
+
+  # get all query params of the url
+  queryParam: ->
+    return if !@query
+    pairs = @query.split(';')
+    params = {}
+    for pair in pairs
+      result = pair.match('(.+?)=(.*)')
+      if result && result[1]
+        params[result[1]] = result[2]
+    params
+
+#  redirectToLogin: (data) ->
+#
+
+  # human readable file size
+  humanFileSize: (size) ->
+    App.Utils.humanFileSize(size)
+
+  # human readable time
+  humanTime: (time, escalation, long = true) ->
+    App.PrettyDate.humanTime(time, escalation, long)
+
+  userInfo: (data) ->
+    el = data.el || $('[data-id="customer_info"]')
+    el.unbind()
+
+    # start customer info controller
+    new App.WidgetUser(
+      el:       el
+      user_id:  data.user_id
+      callback: data.callback
+    )
+
+  permissionCheckRedirect: (key, closeTab = false) ->
+    return true if @permissionCheck(key)
+
+    # remember requested url
+    @requestedUrlToStore()
+
+    if closeTab
+      App.TaskManager.remove(@taskKey)
+
+    # redirect to login
+    @navigate '#login'
+
+    throw "No permission for #{key}"
+
+    false
+
+  permissionCheck: (key) ->
+    App.User.current()?.permission(key)
+
+  authenticateCheckRedirect: ->
+    return true if @authenticateCheck()
+
+    # remember requested url
+    @requestedUrlToStore()
+
+    # redirect to login
+    @navigate '#login'
+
+    throw 'No exsisting session'
+
+    false
+
+  authenticateCheck: ->
+    # return true if session exists
+    return true if @Session.get()
+    false
+
+  requestedUrlToStore: ->
+    location = window.location.hash
+
+    return if !location
+    return if location is '#'
+    return if location is '#login'
+    return if location is '#logout'
+    return if location is '#session_timeout'
+    return if location is '#keyboard_shortcuts'
+
+    # remember requested url
+    @requestedUrlRemember(location)
+
+  requestedUrlRemember: (location) ->
+    App.SessionStorage.set('requested_url', location) # for authentication agains third party
+    App.Config.set('requested_url', location) # for local re-login
+
+  requestedUrlWas: ->
+    App.SessionStorage.get('requested_url') || App.Config.get('requested_url')
+
+  frontendTimeUpdate: =>
+    update = =>
+      @frontendTimeUpdateElement($('#app'))
+    App.Interval.set(update, 61000, 'frontendTimeUpdate', 'ui')
+
+  frontendTimeUpdateElement: (el) =>
+    ui = @
+    el.find('.humanTimeFromNow').each( ->
+      item = $(@)
+      ui.frontendTimeUpdateItem(item, item.text())
+    )
+
+  frontendTimeUpdateItem: (item, currentVal) =>
+    timestamp = item.attr('datetime')
+    time      = @humanTime(timestamp, item.hasClass('escalation'))
+
+    # only do dom updates on changes
+    return if time is currentVal
+
+    newTitle = App.i18n.translateTimestamp(timestamp)
+    if item.attr('timezone')
+      newTitle += ' ' + item.attr('timezone')
+
+    item.attr('title', newTitle)
+    item.html(time)
+
+  recentView: (object, o_id) =>
+    params =
+      object: object
+      o_id:   o_id
+    App.Ajax.request(
+      id:    "recent_view_#{object}_#{o_id}"
+      type:  'POST'
+      url:   @Config.get('api_path') + '/recent_view'
+      data:  JSON.stringify(params)
+      processData: true
+    )
+
+  prepareForObjectList: (items) ->
+    for item in items
+      item = @prepareForObjectListItem(item)
+    items
+
+  prepareForObjectListItem: (item) ->
+    item.link  = ''
+    item.title = '???'
+
+    # convert backend name space to local name space
+    item.object = item.object.replace('::', '')
+
+    # lookup real data
+    if App[item.object] && App[item.object].exists(item.o_id)
+      object            = App[item.object].findNative(item.o_id)
+      item.objectNative = object
+      item.link         = object.uiUrl()
+      item.title        = object.displayName()
+      item.object_name  = object.objectDisplayName()
+      item.cssIcon      = object.iconActivity(@Session.get())
+
+    item.created_by = App.User.findNative(item.created_by_id)
+    item
+
+  stopPropagation: (e) ->
+    e.stopPropagation()
+
+  preventDefaultAndStopPropagation: (e) ->
+    e.preventDefault()
+    e.stopPropagation()
+
+  startLoading: (el) =>
+    return if @initLoadingDone && !el
+    @initLoadingDone = true
+    @stopLoading()
+    later = =>
+      if el
+        el.html App.view('generic/page_loading')()
+      else
+        @html App.view('generic/page_loading')()
+    @initLoadingDoneDelay = @delay(later, 1800)
+
+  stopLoading: =>
+    return if !@initLoadingDoneDelay
+    @clearDelay(@initLoadingDoneDelay)
+
+  locationVerify: (e) =>
+    newLocation = $(e.currentTarget).attr 'href'
+    @log 'debug', "new location '#{newLocation}'"
+    return if !newLocation
+    @locationExecuteOrNavigate(newLocation)
+
+  locationExecuteOrNavigate: (newLocation) =>
+    currentLocation = Spine.Route.getPath()
+    @log 'debug', "current location '#{currentLocation}'"
+    if newLocation.replace(/#/, '') isnt currentLocation
+      @log 'debug', "navigate to location '#{newLocation}'"
+      @navigate(newLocation)
+      return
+    @locationExecute(newLocation)
+
+  locationExecute: (newLocation) =>
+    newLocation = newLocation.replace(/#/, '')
+    @log 'debug', "execute controller again for '#{newLocation}' because of same hash"
+    Spine.Route.matchRoutes(newLocation)
+
+  logoUrl: ->
+    "#{@Config.get('image_path')}/#{@Config.get('product_logo')}"
+
+  selectAll: (e) ->
+    e.currentTarget.focus()
+    e.currentTarget.select()
+
+  windowReload: (e,url) ->
+    if e
+      e.preventDefault()
+    $('#app').hide().attr('style', 'display: none!important')
+    if url
+      window.location = url
+      return true
+    if window.location.reload
+      window.location.reload()
+      return true
+    if window.location.href
+      window.location.href = window.location.href
+      return true
+
+    throw 'Cant reload page!'

app/assets/javascripts/app/controllers/_application_controller/_modal.coffee

@@ -0,0 +1,229 @@
+class App.ControllerModal extends App.Controller
+  authenticateRequired: false
+  backdrop: true
+  keyboard: true
+  large: false
+  small: false
+  veryLarge: false
+  head: '?'
+  autoFocusOnFirstInput: true
+  container: null
+  buttonClass: 'btn--success'
+  centerButtons: []
+  leftButtons: []
+  buttonClose: true
+  buttonCancel: false
+  buttonCancelClass: 'btn--text btn--subtle'
+  buttonSubmit: true
+  includeForm: true
+  headPrefix: ''
+  shown: true
+  closeOnAnyClick: false
+  initalFormParams: {}
+  initalFormParamsIgnore: false
+  showTrySupport: false
+  showTryMax: 10
+  showTrydelay: 1000
+
+  events:
+    'submit form':                        'submit'
+    'click .js-submit:not(.is-disabled)': 'submit'
+    'click .js-cancel':                   'cancel'
+    'click .js-close':                    'cancel'
+
+  className: 'modal fade'
+
+  constructor: ->
+    super
+    @showTryCount = 0
+
+    if @authenticateRequired
+      return if !@authenticateCheckRedirect()
+
+    # rerender view, e. g. on langauge change
+    @controllerBind('ui:rerender', =>
+      @update()
+      'modal'
+    )
+    if @shown
+      @render()
+
+  showDelayed: =>
+    delay = =>
+      @showTryCount += 1
+      @render()
+    @delay(delay, @showTrydelay)
+
+  modalAlreadyExists: ->
+    return true if $('.modal').length > 0
+    false
+
+  content: ->
+    'You need to implement a one @content()!'
+
+  update: =>
+    if @message
+      content = App.i18n.translateContent(@message)
+    else if @contentInline
+      content = @contentInline
+    else
+      content = @content()
+    modal = $(App.view('modal')(
+      head:              @head
+      headPrefix:        @headPrefix
+      message:           @message
+      detail:            @detail
+      buttonClose:       @buttonClose
+      buttonCancel:      @buttonCancel
+      buttonCancelClass: @buttonCancelClass
+      buttonSubmit:      @buttonSubmit
+      buttonClass:       @buttonClass
+      centerButtons:     @centerButtons
+      leftButtons:       @leftButtons
+      includeForm:       @includeForm
+    ))
+    modal.find('.modal-body').html(content)
+    if !@initRenderingDone
+      @initRenderingDone = true
+      @html(modal)
+    else
+      @$('.modal-dialog').replaceWith(modal)
+    @post()
+
+  post: ->
+    # nothing
+
+  element: =>
+    @el
+
+  render: =>
+    if @showTrySupport is true && @modalAlreadyExists() && @showTryCount <= @showTryMax
+      @showDelayed()
+      return
+
+    @initalFormParamsIgnore = false
+
+    if @buttonSubmit is true
+      @buttonSubmit = 'Submit'
+    if @buttonCancel is true
+      @buttonCancel = 'Cancel & Go Back'
+
+    @update()
+
+    if @container
+      @el.addClass('modal--local')
+    if @veryLarge
+      @el.addClass('modal--veryLarge')
+    if @large
+      @el.addClass('modal--large')
+    if @small
+      @el.addClass('modal--small')
+
+    @el
+      .on(
+        'show.bs.modal':   @localOnShow
+        'shown.bs.modal':  @localOnShown
+        'hide.bs.modal':   @localOnClose
+        'hidden.bs.modal': @localOnClosed
+        'dismiss.bs.modal': @localOnCancel
+      ).modal(
+        keyboard:  @keyboard
+        show:      true
+        backdrop:  @backdrop
+        container: @container
+      )
+
+    if @closeOnAnyClick
+      @el.on('click', =>
+        @close()
+      )
+
+  close: (e) =>
+    if e
+      e.preventDefault()
+    @initalFormParamsIgnore = true
+    @el.modal('hide')
+
+  formParams: =>
+    if @container
+      return @formParam(@container.find('.modal form'))
+    return @formParam(@$('.modal form'))
+
+  showAlert: (message, suffix = 'danger') ->
+    alert = $('<div>')
+      .addClass("alert alert--#{suffix}")
+      .text(message)
+
+    @$('.modal-alerts-container').html(alert)
+
+  clearAlerts: ->
+    @$('.modal-alerts-container').empty()
+
+  localOnShow: (e) =>
+    @onShow(e)
+
+  onShow: (e) ->
+    # do nothing
+
+  localOnShown: (e) =>
+    @onShown(e)
+
+  onShown: (e) =>
+    if @autoFocusOnFirstInput
+
+      # select generated form
+      form = @$('.form-group').first()
+
+      # if not exists, use whole @el
+      if !form.get(0)
+        form = @el
+
+      # focus first input, select or textarea
+      form.find('input:not([disabled]):not([type="hidden"]):not(".btn"), select:not([disabled]), textarea:not([disabled])').first().focus()
+
+    @initalFormParams = @formParams()
+
+  localOnClose: (e) =>
+    diff = difference(@initalFormParams, @formParams())
+    if @initalFormParamsIgnore is false && !_.isEmpty(diff)
+      if !confirm(App.i18n.translateContent('The form content has been changed. Do you want to close it and lose your changes?'))
+        e.preventDefault()
+        return
+    @onClose(e)
+
+  onClose: ->
+    # do nothing
+
+  localOnClosed: (e) =>
+    @onClosed(e)
+    @el.modal('remove')
+
+  onClosed: (e) ->
+    # do nothing
+
+  localOnCancel: (e) =>
+    @onCancel(e)
+
+  onCancel: (e) ->
+    # do nothing
+
+  cancel: (e) =>
+    @close(e)
+    @onCancel(e)
+
+  onSubmit: (e) ->
+    # do nothing
+
+  submit: (e) =>
+    e.stopPropagation()
+    e.preventDefault()
+    @clearAlerts()
+    @onSubmit(e)
+
+  startLoading: =>
+    @$('.modal-body').addClass('hide')
+    @$('.modal-loader').removeClass('hide')
+
+  stopLoading: =>
+    @$('.modal-body').removeClass('hide')
+    @$('.modal-loader').addClass('hide')

app/assets/javascripts/app/controllers/_application_controller/app_content.coffee

@@ -0,0 +1,15 @@
+class App.ControllerAppContent extends App.Controller
+  constructor: (params) ->
+    if @requiredPermission
+      @permissionCheckRedirect(@requiredPermission)
+
+    # hide tasks
+    App.TaskManager.hideAll()
+
+    params.el = params.appEl.find('#content')
+    params.el.removeClass('hide').removeClass('active')
+    if !params.el.get(0)
+      params.appEl.append('<div id="content" class="content flex horizontal"></div>')
+      params.el = $('#content')
+
+    super(params)

app/assets/javascripts/app/controllers/_application_controller/collection.coffee

@@ -0,0 +1,331 @@
+class App.CollectionController extends App.Controller
+  events:
+    'click .js-remove': 'remove'
+    'click .js-item': 'click'
+    'click .js-locationVerify': 'location'
+  observe:
+    field1: true
+    field2: false
+  #currentItems: {}
+    #1:
+    # a: 123
+    # b: 'some string'
+    #2:
+    # a: 123
+    # b: 'some string'
+  #renderList: {}
+    #1: ..dom..ref..
+    #2: ..dom..ref..
+  template: '_need_to_be_defined_'
+  uniqKey: 'id'
+  model: '_need_to_be_defined_'
+  sortBy: 'name'
+  order: 'ASC',
+  insertPosition: 'after'
+  globalRerender: true
+
+  constructor: ->
+    @events = @constructor.events unless @events
+    @observe = @constructor.observe unless @observe
+    @currentItems = {}
+    @renderList = {}
+    @queue = []
+    @queueRunning = false
+    @lastOrder = []
+
+    super
+
+    @queue.push ['renderAll']
+    @uIRunner()
+
+    # bind to changes
+    if @model
+      @subscribeId = App[@model].subscribe(@collectionSync)
+
+    # render on generic ui call
+    if @globalRerender
+      @controllerBind('ui:rerender', =>
+        @queue.push ['renderAll']
+        @uIRunner()
+      )
+
+    # render on login
+    @controllerBind('auth:login', =>
+      @queue.push ['renderAll']
+      @uIRunner()
+    )
+
+    # reset current tasks on logout
+    @controllerBind('auth:logout', =>
+      @queue.push ['renderAll']
+      @uIRunner()
+    )
+
+    @log 'debug', 'Init @uniqKey', @uniqKey
+    @log 'debug', 'Init @observe', @observe
+    @log 'debug', 'Init @model', @model
+
+  release: =>
+    if @subscribeId
+      App[@model].unsubscribe(@subscribeId)
+
+  uIRunner: =>
+    return if !@queue[0]
+    return if @queueRunning
+    @queueRunning = true
+    loop
+      param = @queue.shift()
+      if param[0] is 'domChange'
+        @domChange(param[1])
+      else if param[0] is 'domRemove'
+        @domRemove(param[1])
+      else if param[0] is 'change'
+        @collectionSync(param[1])
+      else if param[0] is 'destroy'
+        @collectionSync(param[1], 'destroy')
+      else if param[0] is 'renderAll'
+        @renderAll()
+      else
+        @log 'error', "Unknown type #{param[0]}", param[1]
+      if !@queue[0]
+        @onRenderEnd()
+        @queueRunning = false
+        break
+
+  collectionOrderGet: =>
+    newOrder = []
+    all = @itemsAll()
+    for item in all
+      newOrder.push item[@uniqKey]
+    newOrder
+
+  collectionOrderSet: (newOrder = false) =>
+    if !newOrder
+      newOrder = @collectionOrderGet()
+    @lastOrder = newOrder
+
+  collectionSync: (items, type) =>
+
+    # remove items
+    if type is 'destroy'
+      ids = []
+      for item in items
+        ids.push item[@uniqKey]
+      @queue.push ['domRemove', ids]
+      @uIRunner()
+      return
+
+    # inital render
+    if _.isEmpty(@renderList)
+      @queue.push ['renderAll']
+      @uIRunner()
+      return
+
+    # check if item order is the same
+    newOrder = @collectionOrderGet()
+    removedIds = _.difference(@lastOrder, newOrder)
+    addedIds = _.difference(newOrder, @lastOrder)
+
+    @log 'debug', 'collectionSync removedIds', removedIds
+    @log 'debug', 'collectionSync addedIds', addedIds
+    @log 'debug', 'collectionSync @lastOrder', @lastOrder
+    @log 'debug', 'collectionSync newOrder', newOrder
+
+    # add items
+    alreadyRemoved = false
+    if !_.isEmpty(addedIds)
+      lastOrderNew = []
+      for id in @lastOrder
+        if !_.contains(removedIds, id)
+          lastOrderNew.push id
+
+      # try to find positions of new items
+      @log 'debug', 'collectionSync lastOrderNew', lastOrderNew
+      applyOrder = App.Utils.diffPositionAdd(lastOrderNew, newOrder)
+      @log 'debug', 'collectionSync applyOrder', applyOrder
+      if !applyOrder
+        @queue.push ['renderAll']
+        @uIRunner()
+        return
+
+      if !_.isEmpty(removedIds)
+        alreadyRemoved = true
+        @queue.push ['domRemove', removedIds]
+        @uIRunner()
+
+      newItems = []
+      for apply in applyOrder
+        item = @itemGet(apply.id)
+        item.meta_position = apply.position
+        newItems.push item
+      @queue.push ['domChange', newItems]
+      @uIRunner()
+
+    # remove items
+    if !alreadyRemoved && !_.isEmpty(removedIds)
+      @queue.push ['domRemove', removedIds]
+      @uIRunner()
+
+    # update items
+    newItems = []
+    for item in items
+      if !_.contains(removedIds, item.id) && !_.contains(addedIds, item.id)
+        newItems.push item
+    return if _.isEmpty(newItems)
+    @queue.push ['domChange', newItems]
+    @uIRunner()
+    #return
+
+    # rerender all items
+    #@queue.push ['renderAll']
+    #@uIRunner()
+
+  domRemove: (ids) =>
+    @log 'debug', 'domRemove', ids
+    for id in ids
+      @itemAttributesDelete(id)
+      if @renderList[id]
+        @renderList[id].remove()
+        delete @renderList[id]
+      @onRemoved(id)
+    @collectionOrderSet()
+
+  domChange: (items) =>
+    @log 'debug', 'domChange items', items
+    @log 'debug', 'domChange @currentItems', @currentItems
+    changedItems = []
+    for item in items
+      @log 'debug', 'domChange|item', item
+      attributes = @itemAttributes(item)
+      currentItem = @itemAttributesGet(item[@uniqKey])
+      if !currentItem
+        @log 'debug', 'domChange|add', item
+        changedItems.push item
+        @itemAttributesSet(item[@uniqKey], attributes)
+      else
+        @log 'debug', 'domChange|change', item
+        @log 'debug', 'domChange|change|observe attributes', @observe
+        @log 'debug', 'domChange|change|current', currentItem
+        @log 'debug', 'domChange|change|new', attributes
+        for field of @observe
+          @log 'debug', 'domChange|change|compare', field, currentItem[field], attributes[field]
+          diff = !_.isEqual(currentItem[field], attributes[field])
+          @log 'debug', 'domChange|diff', diff
+          if diff
+            changedItems.push item
+            @itemAttributesSet(item[@uniqKey], attributes)
+            break
+    return if _.isEmpty(changedItems)
+    @renderParts(changedItems)
+
+  renderAll: =>
+    items = @itemsAll()
+    @log 'debug', 'renderAll', items
+    localeEls = []
+    for item in items
+      attributes = @itemAttributes(item)
+      @itemAttributesSet(item[@uniqKey], attributes)
+      localeEls.push @renderItem(item, false)
+    @html localeEls
+    @collectionOrderSet()
+    @onRenderEnd()
+
+  itemDestroy: (id) =>
+    App[@model].destroy(id)
+
+  itemsAll: =>
+    App[@model].search(sortBy: @sortBy, order: @order)
+
+  itemAttributesDiff: (item) =>
+    attributes = @itemAttributes(item)
+    currentItem = @itemAttributesGet(item[@uniqKey])
+    for field of @observe
+      @log 'debug', 'itemAttributesDiff|compare', field, currentItem[field], attributes[field]
+      diff = !_.isEqual(currentItem[field], attributes[field])
+      if diff
+        @log 'debug', 'itemAttributesDiff|diff', diff
+        return true
+    false
+
+  itemAttributesDelete: (id) =>
+    delete @currentItems[id]
+
+  itemAttributesGet: (id) =>
+    @currentItems[id]
+
+  itemAttributesSet: (id, attributes) =>
+    @currentItems[id] = attributes
+
+  itemAttributes: (item) =>
+    attributes = {}
+    for field of @observe
+      attributes[field] = item[field]
+    attributes
+
+  itemGet: (id) =>
+    App[@model].find(id)
+
+  renderParts: (items) =>
+    @log 'debug', 'renderParts', items
+    for item in items
+      if !@renderList[item[@uniqKey]]
+        @renderItem(item)
+      else
+        @renderItem(item, @renderList[item[@uniqKey]])
+    @collectionOrderSet()
+
+  renderItem: (item, el) =>
+    if @prepareForObjectListItemSupport
+      item = @prepareForObjectListItem(item)
+    @log 'debug', 'renderItem', item, @template, el, @renderList[item[@uniqKey]]
+    html =  $(App.view(@template)(
+      item: item
+    ))
+    if @onRenderItemEnd
+      @onRenderItemEnd(item, html)
+    itemCount = Object.keys(@renderList).length
+    @renderList[item[@uniqKey]] = html
+    if el is false
+      return html
+    else if !el
+      position = item.meta_position
+      if itemCount > position
+        position += 1
+      element = @el.find(".js-item:nth-child(#{position})")
+      if !element.get(0)
+        @el.append(html)
+        return
+      if @insertPosition is 'before'
+        element.before(html)
+      else
+        element.after(html)
+    else
+      el.replaceWith(html)
+
+  onRenderEnd: ->
+    # nothing
+
+  location: (e) =>
+    @locationVerify(e)
+
+  click: (e) =>
+    row = $(e.target).closest('.js-item')
+    id = row.data('id')
+    @onClick(id, e)
+
+  onClick: (id, e) ->
+    # nothing
+
+  remove: (e) =>
+    e.preventDefault()
+    e.stopPropagation()
+    row = $(e.target).closest('.js-item')
+    id = row.data('id')
+    @onRemove(id,e)
+    @itemDestroy(id)
+
+  onRemove: (id, e) ->
+    # nothing
+
+  onRemoved: (id) ->
+    # nothing

app/assets/javascripts/app/controllers/_application_controller/drox.coffee

@@ -0,0 +1,19 @@
+class App.ControllerDrox extends App.Controller
+  constructor: (params) ->
+    super
+
+    if params.data && ( params.data.text || params.data.html )
+      @inline(params.data)
+
+  inline: (data) ->
+    @html App.view('generic/drox')(data)
+    if data.text
+      @$('.drox-body').text(data.text)
+    if data.html
+      @$('.drox-body').html(data.html)
+
+  template: (data) ->
+    drox = $( App.view('generic/drox')(data) )
+    content = App.view(data.file)(data.params)
+    drox.find('.drox-body').append(content)
+    drox

app/assets/javascripts/app/controllers/_application_controller/form.coffee

@@ -1,25 +1,44 @@
 class App.ControllerForm extends App.Controller
+  fullFormSubmitLabel: 'Submit'
+  fullFormSubmitAdditionalClasses: ''
+  fullFormButtonsContainerClass: ''
+  fullFormAdditionalButtons: [] # [{className: 'js-class', text: 'Label'}]
+
   constructor: (params) ->
     super
     for key, value of params
       @[key] = value
 
     if !@handlers
-      @handlers = []
-    @handlers.push @showHideToggle
-    @handlers.push @requiredMandantoryToggle
+      @handlers = [ App.FormHandlerCoreWorkflow.run ]
+
+    if @handlersConfig
+      for key, value of @handlersConfig
+        if value && value.run
+          @handlers.push value.run
 
     if !@model
       @model = {}
     if !@attributes
       @attributes = []
 
+    @idPrefix = Math.floor( Math.random() * 999999 ).toString()
+    if @model.className
+      @idPrefix = "#{@model.className}_#{@idPrefix}"
+
     # set empty class attributes if needed
     if !@form
       @form = @formGen()
 
     # add alert placeholder
-    @form.prepend('<div class="alert alert--danger js-alert hide" role="alert"></div>')
+    @form.prepend('<div class="alert alert--danger js-danger js-alert hide" role="alert"></div>')
+    @form.prepend('<div class="alert alert--success js-success hide" role="alert"></div>')
+
+    # Fix for Issue #2510 - Zammad Customers shown as Agents in IE
+    # Previously the handlers are called directly, before the DOM elements are ready, thereby causing a race condition under IE11.
+    # Now we only dispatch the handlers after the DOM is ready.
+    if @handlers.length
+      $(@dispatchHandlers)
 
     # if element is given, prepend form to it
     if @el
@@ -29,23 +48,28 @@ class App.ControllerForm extends App.Controller
     if @elReplace
       @elReplace.html(@form)
 
-    # trigger change to rebuild shown/hidden item and update sub selections
-    if typeof @form is 'object'
-      @form.find('input').trigger('change')
-      @form.find('textarea').trigger('change')
-      @form.find('select').trigger('change')
-
     # remove alert on input
     @form.on('input', @hideAlert)
 
     @finishForm = true
     @form
 
+  dispatchHandlers: =>
+    params = App.ControllerForm.params(@form)
+    for attribute in @attributes
+      for handler in @handlers
+        handler(params, attribute, @attributes, @idPrefix, @form, @)
+
   showAlert: (message) =>
-    @form.find('.alert').first().removeClass('hide').html(App.i18n.translateInline(message))
+    if Array.isArray(message)
+      translated = App.i18n.translateInline(message[0], message.slice(1))
+    else
+      translated = App.i18n.translateInline(message)
+
+    @form.find('.alert--danger').first().removeClass('hide').html(translated)
 
   hideAlert: =>
-    @form.find('.alert').addClass('hide').html()
+    @form.find('.alert--danger').addClass('hide').html()
 
   html: =>
     @form.html()
@@ -54,7 +78,9 @@ class App.ControllerForm extends App.Controller
     App.Log.debug 'ControllerForm', 'formGen', @model.configure_attributes
 
     # check if own fieldset should be generated
-    if @noFieldset
+    # forced when the form is a grid form because flex-wrap doesn't work on fieldsets
+    # source: https://github.com/philipwalton/flexbugs#9-some-html-elements-cant-be-flex-containers
+    if @noFieldset || @grid
       fieldset = @el
     else
       fieldset = $('<fieldset></fieldset>')
@@ -66,12 +92,12 @@ class App.ControllerForm extends App.Controller
     if @model.attributesGet
       attributesClean = @model.attributesGet(@screen)
     else
-      attributesClean = App.Model.attributesGet(@screen, @model.configure_attributes)
+      attributesClean = App.Model.attributesGet(@screen, @model.configure_attributes, undefined, @model.className)
 
     for attributeName, attribute of attributesClean
 
-      # ignore read only attributes
-      if !attribute.readonly
+      # ignore read only or not rendered attributes attributes
+      if !attribute.readonly && !attribute.skipRendering
 
         # check generic filter
         if @filter && !attribute.filter
@@ -80,14 +106,16 @@ class App.ControllerForm extends App.Controller
 
         @attributes.push attribute
 
-    attribute_count = 0
-    className       = @model.className + '_' + Math.floor( Math.random() * 999999 ).toString()
+    attributeCount = 0
 
     for attribute in @attributes
-      attribute_count = attribute_count + 1
+      attributeCount = attributeCount + 1
+
+      if @isDisabled == true
+        attribute.disabled = true
 
       # add item
-      item = @formGenItem(attribute, className, fieldset, attribute_count)
+      item = @formGenItem(attribute, @idPrefix, fieldset, attributeCount)
       item.appendTo(fieldset)
 
       # if password, add confirm password item
@@ -102,20 +130,37 @@ class App.ControllerForm extends App.Controller
         if !attribute.single
           attribute.display = attribute.display + ' (confirm)'
           attribute.name = attribute.name + '_confirm'
-          item = @formGenItem(attribute, className, fieldset, attribute_count)
+          item = @formGenItem(attribute, @idPrefix, fieldset, attributeCount)
           item.appendTo(fieldset)
 
     if @fullForm
       if !@formClass
         @formClass = ''
-      fieldset = $('<form class="' + @formClass + '" autocomplete="off"><button class="btn">' + App.i18n.translateContent('Submit') + '</button></form>').prepend(fieldset)
+
+      fieldset = $("<form class='form #{@formClass}' autocomplete='off'>").prepend(fieldset)
+      container = $("<div class='form-buttons #{@fullFormButtonsContainerClass}'>")
+
+      for buttonConfig in @fullFormAdditionalButtons
+        btn = $("<button class='btn #{buttonConfig.className}'>").text(buttonConfig.text)
+        if buttonConfig.disabled
+          btn.prop('disabled', true)
+        container.append(btn)
+
+      $("<button type=submit class='btn #{@fullFormSubmitAdditionalClasses}\' value=\"#{@fullFormSubmitLabel}\"></button>")
+        .text(App.i18n.translateContent(@fullFormSubmitLabel))
+        .appendTo(container)
+
+      container.appendTo(fieldset)
+
+      #fieldset = $("<form class=\"#{@formClass}\" autocomplete=\"off\"><div class='horizontal #{@fullFormButtonsContainerClass}'><input type=submit class=\"btn #{@fullFormSubmitAdditionalClasses}\" value=\"#{label}\"></div></form>").prepend(fieldset)
+      #fieldset = $("<form class=\"#{@formClass}\" autocomplete=\"off\"><input type=submit class=\"btn #{@fullFormSubmitAdditionalClasses}\" value=\"#{label}\"></form>").prepend(fieldset)
 
     # bind form events
     if @events
       for eventSelector, callback of @events
         do (eventSelector, callback) ->
           evs = eventSelector.split(' ')
-          fieldset.find( evs[1] ).bind( evs[0], (e) -> callback(e) )
+          fieldset.find(evs[1]).bind(evs[0], (e) -> callback(e))
 
     # bind tool tips
     fieldset.find('.js-helpMessage').tooltip()
@@ -194,20 +239,19 @@ class App.ControllerForm extends App.Controller
     class:      'medium'
   }
 
-
   ###
 
-  formGenItem: (attribute_config, classname, form, attribute_count) ->
+  formGenItem: (attribute_config, idPrefix, form, attributeCount) ->
     attribute = clone(attribute_config, true)
 
     # create item id
-    attribute.id = "#{classname}_#{attribute.name}"
+    attribute.id = "#{idPrefix}_#{attribute.name}"
 
     # set label class name
     attribute.label_class = @model.labelClass
 
     # set autofocus
-    if @autofocus && attribute_count is 1
+    if @autofocus && attributeCount is 1
       attribute.autofocus = 'autofocus'
 
     # set required option
@@ -240,16 +284,24 @@ class App.ControllerForm extends App.Controller
     # set params value
     if @params
 
-      # check if we have a references
       parts = attribute.name.split '::'
-      if parts[0] && parts[1]
-        if @params[ parts[0] ] && parts[1] of @params[ parts[0] ]
-          attribute.value = @params[ parts[0] ][ parts[1] ]
+
+      if parts.length > 1
+        deepValue = parts.reduce((memo, elem) ->
+          memo?[elem]
+        , @params)
+
+        if deepValue isnt undefined
+          attribute.value = deepValue
 
       # set params value to default
       if attribute.name of @params
         attribute.value = @params[attribute.name]
 
+    # set new value
+    if 'newValue' of attribute
+      attribute.value = attribute.newValue
+
     App.Log.debug 'ControllerForm', 'formGenItem-before', attribute
 
     if App.UiElement[attribute.tag]
@@ -257,51 +309,20 @@ class App.ControllerForm extends App.Controller
     else
       throw "Invalid UiElement.#{attribute.tag}"
 
-    if attribute.only_shown_if_selectable
-      count = Object.keys(attribute.options).length
-      if !attribute.null && (attribute.nulloption && count is 2) || (!attribute.nulloption && count is 1)
-        attribute.transparent = true
-        attributesNew = clone(attribute)
-        attributesNew.type = 'hidden'
-        attributesNew.value = ''
-        for item in attribute.options
-          if item.value && item.value isnt ''
-            attributesNew.value = item.value
-        item = $( App.view('generic/input')( attribute: attributesNew ) )
-
     if @handlers
-      item.bind('change', (e) =>
-        params = App.ControllerForm.params( $(e.target) )
+      item_bind  = item
+      item_event = 'change'
+      if item.find('.richtext-content').length > 0
+        item_bind  = item.find('.richtext-content')
+        item_event = 'blur'
+
+      item_bind.bind(item_event, (e) =>
+        @lastChangedAttribute = attribute.name
+        params = App.ControllerForm.params(@form)
         for handler in @handlers
-          handler(params, attribute, @attributes, classname, form, @)
+          handler(params, attribute, @attributes, idPrefix, form, @)
       )
 
-    # bind dependency
-    if @dependency
-      for action in @dependency
-
-        # bind on element if name is matching
-        if action.bind && action.bind.name is attribute.name
-          ui = @
-          do (action, attribute) ->
-            item.bind('change', ->
-              value = $(@).val()
-              if !value
-                value = $(@).find('select, input').val()
-
-              # lookup relation if needed
-              if action.bind.relation
-                data = App[action.bind.relation].find(value)
-                value = data.name
-
-              # check if value is used in condition
-              if _.contains(action.bind.value, value)
-                if action.change.action is 'hide'
-                  ui.hide(action.change.name)
-                else
-                  ui.show(action.change.name)
-            )
-
     if !attribute.display || attribute.transparent
 
       # hide/show item
@@ -310,14 +331,21 @@ class App.ControllerForm extends App.Controller
 
       return item
     else
+      placeholderObjects = {}
+      if @model.className && @params && ( attribute.type is 'url' || !_.isEmpty(attribute.linktemplate) ) && !_.isEmpty(@params[attribute.name])
+        placeholderObjects = { attribute: attribute, session: App.Session.get(), config: App.Config.all() }
+        placeholderObjects[@model.className.toLowerCase()] = @params
+
       fullItem = $(
         App.view('generic/attribute')(
           attribute: attribute,
           item:      '',
           bookmarkable: @bookmarkable
+          placeholderObjects: placeholderObjects
+          className: @model.className
         )
       )
-      fullItem.find('.controls').prepend( item )
+      fullItem.find('.controls').prepend(item)
 
       # hide/show item
       if attribute.hide
@@ -325,93 +353,144 @@ class App.ControllerForm extends App.Controller
 
       return fullItem
 
+  @findFieldByName: (key, el) ->
+    return el.find('[name="' + key + '"]')
+
+  @findFieldByData: (key, el) ->
+    return el.find('[data-name="' + key + '"]')
+
+  @findFieldByGroup: (key, el) ->
+    return el.find('.form-group[data-attribute-name="' + key + '"]')
+
+  @fieldIsShown: (field) ->
+    return !field.closest('.form-group').hasClass('is-hidden')
+
+  @fieldIsMandatory: (field) ->
+    return field.closest('.form-group').hasClass('is-required')
+
+  @fieldIsRemoved: (field) ->
+    return field.closest('.form-group').hasClass('is-removed')
+
+  @fieldIsReadonly: (field) ->
+    return field.closest('.form-group').hasClass('is-readonly')
+
+  attributeIsMandatory: (name) ->
+    field_by_name = @constructor.findFieldByName(name, @form)
+    if field_by_name.length > 0
+      return @constructor.fieldIsMandatory(field_by_name)
+
+    field_by_data = @constructor.findFieldByData(name, @form)
+    if field_by_data.length > 0
+      return @constructor.fieldIsMandatory(field_by_data)
+
+    return false
+
   show: (name, el = @form) ->
     if !_.isArray(name)
       name = [name]
     for key in name
-      el.find('[name="' + key + '"]').closest('.form-group').removeClass('hide')
-      el.find('[name="' + key + '"]').removeClass('is-hidden')
-      el.find('[data-name="' + key + '"]').closest('.form-group').removeClass('hide')
-      el.find('[data-name="' + key + '"]').removeClass('is-hidden')
+      field_by_group = @constructor.findFieldByGroup(key, el)
+      field_by_group.removeClass('hide')
+      field_by_group.removeClass('is-hidden')
+      field_by_group.removeClass('is-removed')
 
     # hide old validation states
     if el
       el.find('.has-error').removeClass('has-error')
       el.find('.help-inline').html('')
 
-  hide: (name, el = @form) ->
+  hide: (name, el = @form, remove = false) ->
     if !_.isArray(name)
       name = [name]
     for key in name
-      el.find('[name="' + key + '"]').closest('.form-group').addClass('hide')
-      el.find('[name="' + key + '"]').addClass('is-hidden')
-      el.find('[data-name="' + key + '"]').closest('.form-group').addClass('hide')
-      el.find('[data-name="' + key + '"]').addClass('is-hidden')
+      field_by_group = @constructor.findFieldByGroup(key, el)
+      field_by_group.addClass('hide')
+      field_by_group.addClass('is-hidden')
+      if remove
+        field_by_group.addClass('is-removed')
 
   mandantory: (name, el = @form) ->
     if !_.isArray(name)
       name = [name]
     for key in name
-      el.find('[name="' + key + '"]').attr('required', true)
-      el.find('[name="' + key + '"]').parents('.form-group').find('label span').html('*')
+      field_by_name = @constructor.findFieldByName(key, el)
+      field_by_data = @constructor.findFieldByData(key, el)
+
+      if !@constructor.fieldIsMandatory(field_by_name)
+        field_by_name.attr('required', true)
+        field_by_name.parents('.form-group').find('label span').html('*')
+        field_by_name.closest('.form-group').addClass('is-required')
+      if !@constructor.fieldIsMandatory(field_by_data)
+        field_by_data.attr('required', true)
+        field_by_data.parents('.form-group').find('label span').html('*')
+        field_by_data.closest('.form-group').addClass('is-required')
 
   optional: (name, el = @form) ->
     if !_.isArray(name)
       name = [name]
     for key in name
-      el.find('[name="' + key + '"]').attr('required', false)
-      el.find('[name="' + key + '"]').parents('.form-group').find('label span').html('')
+      field_by_name = @constructor.findFieldByName(key, el)
+      field_by_data = @constructor.findFieldByData(key, el)
 
-  showHideToggle: (params, changedAttribute, attributes, classname, form, ui) ->
-    for attribute in attributes
-      if attribute.shown_if
-        hit = false
-        for refAttribute, refValue of attribute.shown_if
-          if params[refAttribute]
-            if _.isArray(refValue)
-              for item in refValue
-                if params[refAttribute].toString() is item.toString()
-                  hit = true
-            else if params[refAttribute].toString() is refValue.toString()
-              hit = true
-        if hit
-          ui.show(attribute.name)
-        else
-          ui.hide(attribute.name)
+      if @constructor.fieldIsMandatory(field_by_name)
+        field_by_name.attr('required', false)
+        field_by_name.parents('.form-group').find('label span').html('')
+        field_by_name.closest('.form-group').removeClass('is-required')
+      if @constructor.fieldIsMandatory(field_by_data)
+        field_by_data.attr('required', false)
+        field_by_data.parents('.form-group').find('label span').html('')
+        field_by_data.closest('.form-group').removeClass('is-required')
 
-  requiredMandantoryToggle: (params, changedAttribute, attributes, classname, form, ui) ->
-    for attribute in attributes
-      if attribute.required_if
-        hit = false
-        for refAttribute, refValue of attribute.required_if
-          if params[refAttribute]
-            if _.isArray( refValue )
-              for item in refValue
-                if params[refAttribute].toString() is item.toString()
-                  hit = true
-            else if params[refAttribute].toString() is refValue.toString()
-              hit = true
-        if hit
-          ui.mandantory(attribute.name)
-        else
-          ui.optional(attribute.name)
+  readonly: (name, el = @form) ->
+    if !_.isArray(name)
+      name = [name]
+    for key in name
+      field_by_name = @constructor.findFieldByName(key, el)
+      field_by_data = @constructor.findFieldByData(key, el)
+
+      if !@constructor.fieldIsReadonly(field_by_name)
+        field_by_name.closest('.form-group').find('input, select').attr('readonly', true)
+        field_by_name.closest('.form-group').addClass('is-readonly')
+      if !@constructor.fieldIsReadonly(field_by_data)
+        field_by_data.closest('.form-group').find('input, select').attr('readonly', true)
+        field_by_data.closest('.form-group').addClass('is-readonly')
+
+  changeable: (name, el = @form) ->
+    if !_.isArray(name)
+      name = [name]
+    for key in name
+      field_by_name = @constructor.findFieldByName(key, el)
+      field_by_data = @constructor.findFieldByData(key, el)
+
+      if @constructor.fieldIsReadonly(field_by_name)
+        field_by_name.closest('.form-group').find('input, select').attr('readonly', false)
+        field_by_name.closest('.form-group').removeClass('is-readonly')
+      if @constructor.fieldIsReadonly(field_by_data)
+        field_by_data.closest('.form-group').find('input, select').attr('readonly', false)
+        field_by_data.closest('.form-group').removeClass('is-readonly')
 
   validate: (params) ->
     App.Model.validate(
       model:  @model
       params: params
-      screen: @screen
+      controllerForm: @
     )
 
   # get all params of the form
-  @params: (form) ->
+  # set clearAccessories to true to remove inline image resizing handles
+  @params: (form, clearAccessories = false) ->
     param = {}
 
     lookupForm = @findForm(form)
 
+    if clearAccessories
+      # remove inline image resizing handles
+      lookupForm.find('.richtext.form-control').trigger('click')
+
     # get contenteditable
     for element in lookupForm.find('[contenteditable]')
       name = $(element).data('name')
+
       if name
         param[name] = $(element).ceg()
 
@@ -420,9 +499,10 @@ class App.ControllerForm extends App.Controller
 
     # array to names
     for item in array
+      field = @findFieldByName(item.name, lookupForm)
 
-      # check if item is-hidden and should not be used
-      if lookupForm.find('[name="' + item.name + '"]').hasClass('is-hidden') || lookupForm.find('div[data-name="' + item.name + '"]').hasClass('is-hidden')
+      # check if item is-removed and should not be used
+      if @fieldIsRemoved(field)
         delete param[item.name]
         continue
 
@@ -434,13 +514,15 @@ class App.ControllerForm extends App.Controller
       if item.type is 'boolean'
         if value is ''
           value = undefined
+        else if value is undefined
+          value = false
         else if value is 'true'
           value = true
         else if value is 'false'
           value = false
       if item.type is 'integer'
         if value is ''
-          value = undefined
+          value = null
         else
           value = parseInt(value)
       if param[item.name] isnt undefined
@@ -451,17 +533,52 @@ class App.ControllerForm extends App.Controller
       else
         param[item.name] = value
 
+    # verify if we have not checked checkboxes
+    uncheckParam = {}
+    lookupForm.find('input[type=checkbox]').each( (index) ->
+      type = $(@).data('field-type')
+      checked = $(@).prop('checked')
+      name = $(@).attr('name')
+      if name && !checked && !(name of param)
+        if !(name of uncheckParam)
+          if type is 'boolean'
+            uncheckParam[name] = false
+          else
+            uncheckParam[name] = undefined
+        else
+          uncheckParam[name] = []
+      true
+    )
+
+    # verify if we have not checked radios
+    lookupForm.find('input[type=radio]').each( (index) ->
+      type = $(@).data('field-type')
+      checked = $(@).prop('checked')
+      name = $(@).attr('name')
+      if name && !checked && !(name of param)
+        if type is 'boolean'
+          uncheckParam[name] = false
+        else
+          uncheckParam[name] = undefined
+      true
+    )
+
+    # apply empty checkboxes & radio values to params
+    for key, value of uncheckParam
+      if !(key of param)
+        param[key] = value
+
     # data type conversion
     for key of param
 
       # get {date}
       if key.substr(0,6) is '{date}'
         newKey = key.substr(6, key.length)
-        if lookupForm.find("[data-name=\"#{newKey}\"]").hasClass('is-hidden')
+        if lookupForm.find("[data-name=\"#{newKey}\"]").hasClass('is-removed')
           param[newKey] = null
         else if param[key]
           try
-            time = new Date( Date.parse( "#{param[key]}T00:00:00Z" ) )
+            time = new Date( Date.parse("#{param[key]}T00:00:00Z") )
             format = (number) ->
               if parseInt(number) < 10
                 number = "0#{number}"
@@ -473,17 +590,17 @@ class App.ControllerForm extends App.Controller
             param[newKey] = "invalid #{param[key]}"
             console.log('ERR', err)
         else
-          param[newKey] = undefined
+          param[newKey] = null
         delete param[key]
 
       # get {datetime}
       else if key.substr(0,10) is '{datetime}'
         newKey = key.substr(10, key.length)
-        if lookupForm.find("[data-name=\"#{newKey}\"]").hasClass('is-hidden')
+        if lookupForm.find("[data-name=\"#{newKey}\"]").hasClass('is-removed')
           param[newKey] = null
         else if param[key]
           try
-            time = new Date( Date.parse( param[key] ) )
+            time = new Date( Date.parse(param[key]) )
             if time is 'Invalid Datetime'
               throw "Invalid Datetime #{param[key]}"
             param[newKey] = time.toISOString().replace(/:\d\d\.\d\d\dZ$/, ':00.000Z')
@@ -491,7 +608,7 @@ class App.ControllerForm extends App.Controller
             param[newKey] = "invalid #{param[key]}"
             console.log('ERR', err)
         else
-          param[newKey] = undefined
+          param[newKey] = null
         delete param[key]
 
     # split :: fields, build objects
@@ -501,6 +618,9 @@ class App.ControllerForm extends App.Controller
       if parts[0] && parts[1] isnt undefined
         if parts[1] isnt undefined && !inputSelectObject[ parts[0] ]
           inputSelectObject[ parts[0] ] = {}
+          if parts[1] is ''
+            delete param[ key ]
+            continue
         if parts[2] isnt undefined && !inputSelectObject[ parts[0] ][ parts[1] ]
           inputSelectObject[ parts[0] ][ parts[1] ] = {}
         if parts[3] isnt undefined && !inputSelectObject[ parts[0] ][ parts[1] ][ parts[2] ]
@@ -526,7 +646,7 @@ class App.ControllerForm extends App.Controller
       # get {business_hours}
       if key.substr(0,16) is '{business_hours}'
         newKey = key.substr(16, key.length)
-        if lookupForm.find("[data-name=\"#{newKey}\"]").hasClass('is-hidden')
+        if lookupForm.find("[data-name=\"#{newKey}\"]").hasClass('is-removed')
           param[newKey] = null
         else if param[key]
           newParams = {}
@@ -582,50 +702,59 @@ class App.ControllerForm extends App.Controller
       App.Log.error 'ControllerForm', 'no form found!', form
     form
 
-  @disable: (form) ->
+  @disable: (form, type = 'form') ->
     lookupForm = @findForm(form)
 
-    if lookupForm
+    if lookupForm && type is 'form'
       if lookupForm.is('button, input, select, textarea, div, span')
         App.Log.debug 'ControllerForm', 'disable item...', lookupForm
-        lookupForm.attr('readonly', true)
-        lookupForm.attr('disabled', true)
+        lookupForm.prop('readonly', true)
+        lookupForm.prop('disabled', true)
         return
       App.Log.debug 'ControllerForm', 'disable form...', lookupForm
 
       # set forms to read only during communication with backend
-      lookupForm.find('button, input, select, textarea').attr('readonly', true)
+      lookupForm.find('button, input, select, textarea').prop('readonly', true)
+
+      # disable radio and checkbox buttons
+      lookupForm.find('input[type=checkbox], input[type=radio]').prop('disabled', true)
 
       # disable additionals submits
-      lookupForm.find('button').attr('disabled', true)
+      lookupForm.find('button').prop('disabled', true)
     else
       App.Log.debug 'ControllerForm', 'disable item...', form
-      form.attr('readonly', true)
-      form.attr('disabled', true)
+      form.prop('readonly', true)
+      form.prop('disabled', true)
 
-  @enable: (form) ->
+  @enable: (form, type = 'form') ->
 
     lookupForm = @findForm(form)
 
-    if lookupForm
+    if lookupForm && type is 'form'
       if lookupForm.is('button, input, select, textarea, div, span')
         App.Log.debug 'ControllerForm', 'disable item...', lookupForm
-        lookupForm.attr('readonly', false)
-        lookupForm.attr('disabled', false)
+        lookupForm.prop('readonly', false)
+        lookupForm.prop('disabled', false)
         return
       App.Log.debug 'ControllerForm', 'enable form...', lookupForm
 
       # enable fields again
-      lookupForm.find('button, input, select, textarea').attr('readonly', false)
+      lookupForm.find('button, input, select, textarea').prop('readonly', false)
+
+      # enable radio and checkbox buttons
+      lookupForm.find('input[type=checkbox], input[type=radio]').prop('disabled', false)
 
       # enable submits again
-      lookupForm.find('button').attr('disabled', false)
+      lookupForm.find('button').prop('disabled', false)
     else
       App.Log.debug 'ControllerForm', 'enable item...', form
-      form.attr('readonly', false)
-      form.attr('disabled', false)
+      form.prop('readonly', false)
+      form.prop('disabled', false)
 
   @validate: (data) ->
+    if data.errors && Object.keys(data.errors).length == 1 && data.errors._core_workflow isnt undefined
+      App.FormHandlerCoreWorkflow.delaySubmit(data.errors._core_workflow.controllerForm, data.errors._core_workflow.target || data.form)
+      return
 
     lookupForm = @findForm(data.form)
 

app/assets/javascripts/app/controllers/_application_controller/full_page.coffee

@@ -0,0 +1,20 @@
+class App.ControllerFullPage extends App.Controller
+  constructor: (params) ->
+    if @requiredPermission
+      @permissionCheckRedirect(@requiredPermission)
+    super
+
+  replaceWith: (localElement) =>
+    @appEl.find('>').not(".#{@className}").remove() if @className
+    @appEl.find('>').filter(".#{@className}").remove() if @forceRender
+    @el = $(localElement)
+    container = @appEl.find('>').filter(".#{@className}")
+    if !container.get(0)
+      @el.addClass(@className)
+      @appEl.append(@el)
+      @delegateEvents(@events)
+      @refreshElements()
+      @el.on('remove', @releaseController)
+      @el.on('remove', @release)
+    else
+      container.html(@el.children())

app/assets/javascripts/app/controllers/_application_controller/generic_description.coffee

@@ -0,0 +1,11 @@
+class App.ControllerGenericDescription extends App.ControllerModal
+  buttonClose: true
+  buttonCancel: false
+  buttonSubmit: 'Close'
+  head: 'Description'
+
+  content: =>
+    marked(App.i18n.translateContent(@description))
+
+  onSubmit: =>
+    @close()

app/assets/javascripts/app/controllers/_application_controller/generic_destroy_confirm.coffee

@@ -0,0 +1,37 @@
+class App.ControllerGenericDestroyConfirm extends App.ControllerModal
+  buttonClose: true
+  buttonCancel: true
+  buttonSubmit: 'delete'
+  buttonClass: 'btn--danger'
+  head: 'Confirm'
+  small: true
+
+  content: ->
+    App.i18n.translateContent('Sure to delete this object?')
+
+  onSubmit: =>
+    options = @options || {}
+    options.done = =>
+      @close()
+      if @callback
+        @callback()
+    options.fail = (xhr, data) =>
+      @log 'errors'
+      @showAlert(data.human_error || data.error)
+    @item.destroy(options)
+
+class App.ControllerConfirm extends App.ControllerModal
+  buttonClose: true
+  buttonCancel: true
+  buttonSubmit: 'yes'
+  buttonClass: 'btn--danger'
+  head: 'Confirm'
+  small: true
+
+  content: ->
+    App.i18n.translateContent(@message)
+
+  onSubmit: =>
+    @close()
+    if @callback
+      @callback()

app/assets/javascripts/app/controllers/_application_controller/generic_edit.coffee

@@ -0,0 +1,55 @@
+class App.ControllerGenericEdit extends App.ControllerModal
+  buttonClose: true
+  buttonCancel: true
+  buttonSubmit: true
+  headPrefix: 'Edit'
+
+  content: =>
+    @item = App[ @genericObject ].find( @id )
+    @head = @pageData.head || @pageData.object
+
+    @controller = new App.ControllerForm(
+      model:     App[ @genericObject ]
+      params:    @item
+      screen:    @screen || 'edit'
+      autofocus: true
+      handlers:  @handlers
+    )
+    @controller.form
+
+  onSubmit: (e) ->
+    params = @formParam(e.target)
+    @item.load(params)
+
+    # validate form using HTML5 validity check
+    element = $(e.target).closest('form').get(0)
+    if element && element.reportValidity && !element.reportValidity()
+      return false
+
+    # validate
+    errors = @item.validate(
+      controllerForm: @controller
+    )
+    if errors
+      @log 'error', errors
+      @formValidate( form: e.target, errors: errors )
+      return false
+
+    # disable form
+    @formDisable(e)
+
+    # save object
+    ui = @
+    @item.save(
+      done: ->
+        if ui.callback
+          item = App[ ui.genericObject ].fullLocal(@id)
+          ui.callback(item)
+        ui.close()
+
+      fail: (settings, details) ->
+        App[ ui.genericObject ].fetch(id: @id)
+        ui.log 'errors'
+        ui.formEnable(e)
+        ui.controller.showAlert(details.error_human || details.error || 'Unable to update object!')
+    )

app/assets/javascripts/app/controllers/_application_controller/generic_error_modal.coffee

@@ -0,0 +1,17 @@
+class App.ControllerErrorModal extends App.ControllerModal
+  buttonClose: true
+  buttonCancel: false
+  buttonSubmit: 'Close'
+  #buttonClass: 'btn--danger'
+  head: 'Error'
+  #small: true
+  #shown: true
+  showTrySupport: true
+
+  content: ->
+    @message
+
+  onSubmit: =>
+    @close()
+    if @callback
+      @callback()

app/assets/javascripts/app/controllers/_application_controller/generic_history.coffee

@@ -0,0 +1,137 @@
+class App.GenericHistory extends App.ControllerModal
+  @extend App.PopoverProvidable
+  @registerPopovers 'User'
+
+  buttonClose: true
+  buttonCancel: false
+  buttonSubmit: false
+  head: 'History'
+  shown: false
+
+  constructor: ->
+    super
+    @fetch()
+
+  content: =>
+    localItem = @reworkItems(@items)
+
+    content = $ App.view('generic/history')(
+      items: localItem
+    )
+    content.find('a[data-type="sortorder"]').bind('click', (e) =>
+      e.preventDefault()
+      @sortorder()
+    )
+    content
+
+  onShown: =>
+    @renderPopovers()
+
+  sortorder: =>
+    @items = @items.reverse()
+    @update()
+
+  T: (name) ->
+    App.i18n.translateInline(name)
+
+  reworkItems: (items) ->
+    newItems = []
+    newItem = {}
+    lastUserId = undefined
+    lastTime   = undefined
+    items = clone(items)
+    for item in items
+
+      if item.object is 'Ticket::Article'
+        item.object = 'Article'
+
+      data = item
+      data.created_by = App.User.find( item.created_by_id )
+
+      currentItemTime = new Date( item.created_at )
+      lastItemTime    = new Date( new Date( lastTime ).getTime() + (15 * 1000) )
+
+      # start new section if user or time has changed
+      if lastUserId isnt item.created_by_id || currentItemTime > lastItemTime
+        lastTime   = item.created_at
+        lastUserId = item.created_by_id
+        if !_.isEmpty(newItem)
+          newItems.push newItem
+        newItem =
+          created_at: item.created_at
+          created_by: App.User.find( item.created_by_id )
+          records: []
+
+      # build content
+      content = ''
+      if item.type is 'notification' || item.type is 'email'
+        content = "#{ @T( item.type ) } #{ @T( 'sent to' ) } '#{ item.value_to }'"
+      else if item.type is 'received_merge'
+        ticket = App.Ticket.find( item.id_from )
+        ticket_link = if ticket
+                        "<a href=\"#ticket/zoom/#{ item.id_from }\">##{ ticket.number }</a>"
+                      else
+                        item.value_from
+        content = "#{ @T( 'Ticket' ) } #{ ticket_link } #{ @T( 'was merged into this ticket' ) }"
+      else if item.type is 'merged_into'
+        ticket = App.Ticket.find( item.id_to )
+        ticket_link = if ticket
+                        "<a href=\"#ticket/zoom/#{ item.id_to }\">##{ ticket.number }</a>"
+                      else
+                        item.value_to
+        content = "#{ @T( 'This ticket was merged into' ) } #{ @T( 'ticket' ) } #{ ticket_link }"
+      else
+        content = "#{ @T( item.type ) } #{ @T(item.object) } "
+        if item.attribute
+          content += "#{ @translateItemAttribute(item) }"
+
+          # convert time stamps
+          if item.object is 'User' && item.attribute is 'last_login'
+            if item.value_from
+              item.value_from = App.i18n.translateTimestamp( item.value_from )
+            if item.value_to
+              item.value_to = App.i18n.translateTimestamp( item.value_to )
+
+        if item.value_from
+          if item.value_to
+            content += " #{ @T( 'from' ) }"
+          content += " '#{ @translateItemValue(item, item.value_from) }'"
+
+        if item.value_to
+          if item.value_from
+            content += ' &rarr;'
+          content += " '#{ @translateItemValue(item, item.value_to) }'"
+        else if item.value_from
+          content += " &rarr; '-'"
+
+      newItem.records.push content
+
+    if !_.isEmpty(newItem)
+      newItems.push newItem
+
+    newItems
+
+  translateItemValue: ({object, attribute}, value) ->
+    localAttribute = @objectAttribute(object, attribute)
+    if localAttribute && localAttribute.tag is 'datetime'
+      return App.i18n.translateTimestamp(value)
+
+    if /_(time|at)$/.test(attribute)
+      return App.i18n.translateTimestamp(value)
+
+    if localAttribute && localAttribute.translate is true
+      return @T(value)
+
+    App.Utils.htmlEscape(value)
+
+  translateItemAttribute: ({object, attribute}) ->
+    localAttribute = @objectAttribute(object, attribute)
+    if localAttribute && localAttribute.display
+      return @T(localAttribute.display)
+
+    @T(attribute)
+
+  objectAttribute: (object, attribute) ->
+    return if !App[object]
+    return if !App[object].attributesGet()
+    App[object].attributesGet()["#{attribute}_id"] ||  App[object].attributesGet()[attribute]

app/assets/javascripts/app/controllers/_application_controller/generic_index.coffee

@@ -0,0 +1,208 @@
+class App.ControllerGenericIndex extends App.Controller
+  events:
+    'click [data-type=edit]': 'edit'
+    'click [data-type=new]': 'new'
+    'click [data-type=payload]': 'payload'
+    'click [data-type=import]': 'import'
+    'click .js-description': 'description'
+
+  constructor: ->
+    super
+
+    # set title
+    if @pageData.title
+      @title @pageData.title, true
+
+    # set nav bar
+    if @pageData.navupdate
+      @navupdate @pageData.navupdate
+
+    # bind render after a change is done
+    if !@disableRender
+      @subscribeId = App[ @genericObject ].subscribe(@render)
+
+    App[ @genericObject ].bind 'ajaxError', (rec, msg) =>
+      @log 'error', 'ajax', msg.status
+      if msg.status is 401
+        @log 'error', 'ajax', rec, msg, msg.status
+        @navigate 'login'
+
+    # execute fetch
+    @render()
+
+    # fetch all
+    if !@disableInitFetch && !@pageData.pagerAjax
+      App[ @genericObject ].fetchFull(
+        ->
+        clear: true
+      )
+
+  show: =>
+    if @table
+      @table.show()
+
+  hide: =>
+    if @table
+      @table.hide()
+
+  release: =>
+    if @subscribeId
+      App[@genericObject].unsubscribe(@subscribeId)
+
+  paginate: (page) =>
+    return if page is @pageData.pagerSelected
+    @pageData.pagerSelected = page
+    @render()
+
+  render: =>
+    if @pageData.pagerAjax
+      sortBy  = @table?.customOrderBy || @table?.orderBy || @defaultSortBy  || 'id'
+      orderBy = @table?.customOrderDirection || @table?.orderDirection || @defaultOrder || 'ASC'
+
+      fallbackSortBy  = sortBy
+      fallbackOrderBy = orderBy
+      if sortBy isnt 'id'
+        fallbackSortBy  = "#{sortBy}, id"
+        fallbackOrderBy = "#{orderBy}, ASC"
+
+      @startLoading()
+      App[@genericObject].indexFull(
+        (collection, data) =>
+          @pageData.pagerTotalCount = data.total_count
+          @stopLoading()
+          @renderObjects(collection)
+        {
+          refresh: false
+          sort_by: fallbackSortBy
+          order_by:  fallbackOrderBy
+          page: @pageData.pagerSelected
+          per_page: @pageData.pagerPerPage
+        }
+      )
+      return
+
+    objects = App[@genericObject].search(
+      sortBy: @defaultSortBy || 'name'
+      order:  @defaultOrder
+    )
+    @renderObjects(objects)
+
+  renderObjects: (objects) =>
+
+    # remove ignored items from collection
+    if @ignoreObjectIDs
+      objects = _.filter( objects, (item) ->
+        return if item.id is 1
+        return item
+      )
+
+    if !@table
+
+      # show description button, only if content exists
+      showDescription = false
+      if App[ @genericObject ].description && !_.isEmpty(objects)
+        showDescription = true
+
+      @html App.view('generic/admin/index')(
+        head:            @pageData.objects
+        notes:           @pageData.notes
+        buttons:         @pageData.buttons
+        menus:           @pageData.menus
+        showDescription: showDescription
+      )
+
+      # show description in content if no no content exists
+      if _.isEmpty(objects) && App[ @genericObject ].description
+        description = marked(App[ @genericObject ].description)
+        @$('.table-overview').html(description)
+        return
+
+    # append content table
+    params = _.extend(
+      {
+        tableId: "#{@genericObject}-generic-overview"
+        el: @$('.table-overview')
+        model: App[ @genericObject ]
+        objects: objects
+        bindRow:
+          events:
+            click: @edit
+        container: @container
+        explanation: @pageData.explanation
+        groupBy: @groupBy
+        dndCallback: @dndCallback
+      },
+      @pageData.tableExtend
+    )
+
+    if @pageData.pagerAjax
+      params = _.extend(
+        {
+          pagerAjax: @pageData.pagerAjax
+          pagerBaseUrl: @pageData.pagerBaseUrl
+          pagerSelected: @pageData.pagerSelected
+          pagerPerPage: @pageData.pagerPerPage
+          pagerTotalCount: @pageData.pagerTotalCount
+          sortRenderCallback: @render
+        },
+        params
+      )
+
+    if !@table
+      @table = new App.ControllerTable(params)
+    else
+      @table.update(objects: objects, pagerSelected: @pageData.pagerSelected, pagerTotalCount: @pageData.pagerTotalCount)
+
+    if @pageData.logFacility
+      new App.HttpLog(
+        el: @$('.page-footer')
+        facility: @pageData.logFacility
+      )
+
+  edit: (id, e) =>
+    e.preventDefault()
+    item = App[ @genericObject ].find(id)
+
+    if @editCallback
+      @editCallback(item)
+      return
+
+    new App.ControllerGenericEdit(
+      id:            item.id
+      pageData:      @pageData
+      genericObject: @genericObject
+      container:     @container
+      small:         @small
+      large:         @large
+      veryLarge:     @veryLarge
+      handlers:      @handlers
+    )
+
+  new: (e) ->
+    e.preventDefault()
+    new App.ControllerGenericNew(
+      pageData:      @pageData
+      genericObject: @genericObject
+      container:     @container
+      small:         @small
+      large:         @large
+      veryLarge:     @veryLarge
+      handlers:      @handlers
+    )
+
+  payload: (e) ->
+    e.preventDefault()
+    new App.WidgetPayloadExample(
+      baseUrl: @payloadExampleUrl
+      container: @el.closest('.content')
+    )
+
+  import: (e) ->
+    e.preventDefault()
+    @importCallback()
+
+  description: (e) =>
+    new App.ControllerGenericDescription(
+      description: App[ @genericObject ].description
+      container:   @container
+    )

app/assets/javascripts/app/controllers/_application_controller/generic_new.coffee

@@ -0,0 +1,55 @@
+class App.ControllerGenericNew extends App.ControllerModal
+  buttonClose: true
+  buttonCancel: true
+  buttonSubmit: true
+  headPrefix: 'New'
+  showTrySupport: true
+
+  content: =>
+    @head = @pageData.head || @pageData.object
+    @controller = new App.ControllerForm(
+      model:     App[ @genericObject ]
+      params:    @item
+      screen:    @screen || 'create'
+      autofocus: true
+      handlers: @handlers
+    )
+    @controller.form
+
+  onSubmit: (e) ->
+    params = @formParam(e.target)
+
+    object = new App[ @genericObject ]
+    object.load(params)
+
+    # validate form using HTML5 validity check
+    element = $(e.target).closest('form').get(0)
+    if element && element.reportValidity && !element.reportValidity()
+      return false
+
+    # validate
+    errors = object.validate(
+      controllerForm: @controller
+    )
+    if errors
+      @log 'error', errors
+      @formValidate( form: e.target, errors: errors )
+      return false
+
+    # disable form
+    @formDisable(e)
+
+    # save object
+    ui = @
+    object.save(
+      done: ->
+        if ui.callback
+          item = App[ ui.genericObject ].fullLocal(@id)
+          ui.callback(item)
+        ui.close()
+
+      fail: (settings, details) ->
+        ui.log 'errors', details
+        ui.formEnable(e)
+        ui.controller.showAlert(details.error_human || details.error || 'Unable to create object!')
+    )

app/assets/javascripts/app/controllers/_application_controller/modal_loading.coffee

@@ -0,0 +1,48 @@
+class App.ControllerModalLoading extends App.Controller
+  className: 'modal fade'
+  showTrySupport: true
+
+  constructor: ->
+    super
+
+    if @container
+      @el.addClass('modal--local')
+
+    @render()
+
+    @el.modal(
+      keyboard:  false
+      show:      true
+      backdrop:  'static'
+      container: @container
+    ).on(
+      'hidden.bs.modal': @localOnClosed
+    )
+
+  render: ->
+    @html App.view('generic/modal_loader')(
+      head: @head
+      message: App.i18n.translateContent(@message)
+    )
+
+  update: (message, translate = true) =>
+    if translate
+      message = App.i18n.translateContent(message)
+    @$('.js-loading').html(message)
+
+  hideIcon: =>
+    @$('.js-loadingIcon').addClass('hide')
+
+  showIcon: =>
+    @$('.js-loadingIcon').removeClass('hide')
+
+  localOnClosed: =>
+    @el.remove()
+
+  hide: (delay) =>
+    remove = =>
+      @el.modal('hide')
+    if !delay
+      remove()
+      return
+    App.Delay.set(remove, delay * 1000)

app/assets/javascripts/app/controllers/_application_controller/nav_sidebar.coffee

@@ -0,0 +1,145 @@
+class App.ControllerNavSidbar extends App.Controller
+  constructor: (params) ->
+    super
+
+    if @authenticateRequired
+      @authenticateCheckRedirect()
+
+    @render(true)
+
+    @controllerBind('ui:rerender',
+      =>
+        @render(true)
+        @updateNavigation(true, params)
+    )
+
+  show: (params = {}) =>
+    @navupdate ''
+    @shown = true
+    if params
+      for key, value of params
+        if key isnt 'el' && key isnt 'shown' && key isnt 'match'
+          @[key] = value
+    @updateNavigation(false, params)
+    if @activeController && _.isFunction(@activeController.show)
+      @activeController.show(params)
+
+  hide: =>
+    @shown = false
+    if @activeController && _.isFunction(@activeController.hide)
+      @activeController.hide()
+
+  render: (force = false) =>
+    groups = @groupsSorted()
+    selectedItem = @selectedItem(groups)
+
+    @html App.view('generic/navbar_level2/index')(
+      className: @configKey
+    )
+    @$('.sidebar').html App.view('generic/navbar_level2/navbar')(
+      groups: groups
+      className: @configKey
+      selectedItem: selectedItem
+    )
+
+  updateNavigation: (force, params) =>
+    groups = @groupsSorted()
+    selectedItem = @selectedItem(groups)
+    return if !selectedItem
+    return if !force && @lastTarget && selectedItem.target is @lastTarget
+    @lastTarget = selectedItem.target
+    @$('.sidebar li').removeClass('active')
+    @$(".sidebar li a[href=\"#{selectedItem.target}\"]").parent().addClass('active')
+
+    @executeController(selectedItem, params)
+
+  groupsSorted: =>
+
+    # get accessable groups
+    groups = App.Config.get(@configKey)
+    groupsUnsorted = []
+    for key, item of groups
+      if !item.controller
+        if !item.permission
+          groupsUnsorted.push item
+        else
+          match = false
+          if typeof item.permission is 'function'
+            match = item.permission(@)
+            if match
+              groupsUnsorted.push item
+          else
+            for permissionName in item.permission
+              if !match && @permissionCheck(permissionName)
+                match = true
+                groupsUnsorted.push item
+    _.sortBy(groupsUnsorted, (item) -> return item.prio)
+
+  selectedItem: (groups) =>
+
+    # get items of group
+    for group in groups
+      items = App.Config.get(@configKey)
+      itemsUnsorted = []
+      for key, item of items
+        if item.parent is group.target
+          if item.controller
+            if !item.permission
+              itemsUnsorted.push item
+            else
+              match = false
+              if typeof item.permission is 'function'
+                match = item.permission(@)
+                if match
+                  itemsUnsorted.push item
+              else
+                for permissionName in item.permission
+                  if !match && @permissionCheck(permissionName)
+                    match = true
+                    itemsUnsorted.push item
+
+      group.items = _.sortBy(itemsUnsorted, (item) -> return item.prio)
+
+    # set active item
+    selectedItem = undefined
+    for group in groups
+      if group.items
+        for item in group.items
+          if item.target.match("/#{@target}$")
+            item.active = true
+            selectedItem = item
+          else
+            item.active = false
+
+    if !selectedItem
+      for group in groups
+        break if selectedItem
+        if group.items
+          for item in group.items
+            item.active = true
+            selectedItem = item
+            break
+
+    selectedItem
+
+  executeController: (selectedItem, params) =>
+
+    if @activeController
+      @activeController.el.remove()
+      @activeController = undefined
+
+    @$('.main').append('<div>')
+    @activeController = new selectedItem.controller(_.extend(params, el: @$('.main div')))
+
+  setPosition: (position) =>
+    return if @shown
+    return if !position
+    if position.main
+      @$('.main').scrollTop(position.main)
+    if position.sidebar
+      @$('.sidebar').scrollTop(position.sidebar)
+
+  currentPosition: =>
+    data =
+      main: @$('.main').scrollTop()
+      sidebar: @$('.sidebar').scrollTop()

app/assets/javascripts/app/controllers/_application_controller/observer.coffee

@@ -0,0 +1,82 @@
+class App.ControllerObserver extends App.Controller
+  model: 'Ticket'
+  template: 'tba'
+  globalRerender: true
+
+  ###
+  observe:
+    title: true
+
+  observeNot:
+    title: true
+
+  ###
+
+  constructor: ->
+    super
+    #console.trace()
+    @log 'debug', 'new', @object_id, @model
+
+    if App[@model].exists(@object_id)
+      @maybeRender(App[@model].fullLocal(@object_id))
+    else
+      App[@model].full(@object_id, @maybeRender)
+
+    # rerender, e. g. on language change
+    if @globalRerender
+      @controllerBind('ui:rerender', =>
+        @lastAttributres = undefined
+        @maybeRender(App[@model].fullLocal(@object_id))
+      )
+
+  subscribe: (object, typeOfChange) =>
+    @maybeRender(object, typeOfChange)
+
+  maybeRender: (object, typeOfChange) =>
+    if typeOfChange is 'remove'
+      @release()
+      @el.remove()
+      return
+
+    @log 'debug', 'maybeRender', @object_id, object, @model
+
+    if !@subscribeId
+      @subscribeId = object.subscribe(@subscribe)
+
+    # remember current attributes
+    currentAttributes = {}
+    if @observe
+      for key, active of @observe
+        if active
+          currentAttributes[key] = object[key]
+    if @observeNot
+      for key, value of object
+        if key isnt 'cid' && !@observeNot[key] && !_.isFunction(value) && !_.isObject(value)
+          currentAttributes[key] = value
+
+    if !@lastAttributres
+      @lastAttributres = {}
+    else
+      diff = difference(currentAttributes, @lastAttributres)
+      if _.isEmpty(diff)
+        @log 'debug', 'maybeRender no diff, no rerender'
+        return
+
+    @log 'debug', 'maybeRender.diff', diff, @observe, @model
+    @lastAttributres = currentAttributes
+
+    @render(object, diff)
+
+  render: (object, diff) =>
+    @log 'debug', 'render', @template, object, diff
+    @html App.view(@template)(
+      object: object
+    )
+
+    if @renderPost
+      @renderPost(object)
+
+  release: =>
+    #console.trace()
+    @log 'debug', 'release', @object_id, @model, @subscribeId
+    App[@model].unsubscribe(@subscribeId)

app/assets/javascripts/app/controllers/_application_controller/observer_action_row.coffee

@@ -0,0 +1,20 @@
+class App.ControllerObserverActionRow extends App.ControllerObserver
+  constructor: ->
+    super
+
+  render: (object) =>
+    return if _.isEmpty(object)
+    actions = @actions(object)
+    @html App.view('generic/actions')(
+      items: actions
+      type:  @type
+    )
+
+    for item in actions
+      do (item) =>
+        @$("[data-type=\"#{item.name}\"]").on(
+          'click'
+          (e) ->
+            e.preventDefault()
+            item.callback(object)
+        )

app/assets/javascripts/app/controllers/_application_controller/permanent.coffee

@@ -0,0 +1,5 @@
+class App.ControllerPermanent extends App.Controller
+  constructor: ->
+    if @requiredPermission
+      @permissionCheckRedirect(@requiredPermission, true)
+    super

app/assets/javascripts/app/controllers/_application_controller/reorder_modal.coffee

@@ -0,0 +1,52 @@
+class App.ControllerReorderModal extends App.ControllerModal
+  head: 'Drag to reorder'
+  content: ->
+    view = $(App.view('reorder_modal')())
+
+    table = new App.ControllerTable(
+      pager: false
+      baseColWidth: null
+      dndCallback: ->
+        true
+      overview: ['title']
+      attribute_list: [
+        { name: 'title', display: 'Name' }
+      ]
+      objects: @items
+    )
+
+    view.find('.js-table-container').html(table.el)
+
+    view
+
+  onShown: ->
+    super
+    @$('.js-submit').focus()
+
+  save: ->
+    ids = @$('tr.item').toArray().map (el) -> parseInt(el.dataset.id)
+
+    @$('.alert').addClass('hidden')
+
+    @formDisable(@el)
+
+    @ajax(
+      id: 'reorder_save'
+      type: 'PATCH'
+      data: JSON.stringify({ordered_ids: ids})
+      url: @url
+      processData: true
+      success: (data, status, xhr) =>
+        App.Collection.loadAssets(data)
+        App.Event.trigger 'knowledge_base::sidebar::rerender'
+        @close()
+      error: (xhr) =>
+        data = JSON.parse(xhr.responseText)
+        @$('.alert--danger').removeClass('hidden').text(data.error)
+        @formEnable(@el)
+    )
+
+  onSubmit: ->
+    super
+    @save()
+

app/assets/javascripts/app/controllers/_application_controller/sub_content.coffee

@@ -0,0 +1,16 @@
+class App.ControllerSubContent extends App.Controller
+  constructor: ->
+    if @requiredPermission
+      @permissionCheckRedirect(@requiredPermission)
+
+    super
+
+  show: =>
+    if @genericController && @genericController.show
+      @genericController.show()
+    return if !@header
+    @title @header, true
+
+  hide: =>
+    if @genericController && @genericController.hide
+      @genericController.hide()

app/assets/javascripts/app/controllers/_application_controller/table.coffee

@@ -90,19 +90,17 @@
 
 ###
 class App.ControllerTable extends App.Controller
-  minColWidth: 40
+  minColWidth: 30
   baseColWidth: 130
   minTableWidth: 612
 
-  checkBoxColWidth: 40
+  checkBoxColWidth: 30
   radioColWidth: 22
   sortableColWidth: 36
 
-  elements:
-    '.js-tableHead': 'tableHead'
-
   events:
     'click .js-sort': 'sortByColumn'
+    'click .js-page': 'paginate'
 
   overviewAttributes: undefined
   #model:             App.TicketPriority,
@@ -111,11 +109,14 @@ class App.ControllerTable extends App.Controller
   radio:              false
   renderState:        undefined
   groupBy:            undefined
+  groupDirection:     undefined
 
-  shownPerPage: 150
-  shownPage: 0
+  pagerEnabled: true
+  pagerItemsPerPage: 150
+  pagerShownPage: 0
 
   destroy: false
+  customActions: []
 
   columnsLength: undefined
   headers: undefined
@@ -133,6 +134,8 @@ class App.ControllerTable extends App.Controller
   customOrderDirection: undefined
   customOrderBy: undefined
 
+  frontendTimeUpdateExecute: true
+
   bindCol: {}
   bindRow: {}
 
@@ -145,6 +148,7 @@ class App.ControllerTable extends App.Controller
     @attributesListRaw ||= @attribute_list || @model.configure_attributes || {}
     @attributesList = App.Model.attributesGet(false, @attributesListRaw)
     @destroy = @model.configure_delete
+    @clone = @model.configure_clone
 
     throw 'overviewAttributes needed' if _.isEmpty(@overviewAttributes)
     throw 'attributesList needed' if _.isEmpty(@attributesList)
@@ -161,12 +165,22 @@ class App.ControllerTable extends App.Controller
       for key, value of data.headerWidth
         @headerWidth[key] = value
 
-    @availableWidth = @el.width()
+    if !@availableWidth
+      @availableWidth = @el.width()
+      if @availableWidth is 0
+        @availableWidth = @minTableWidth
 
     @renderQueue()
 
+  show: =>
+    return if @windowIsResized isnt true
+    @windowIsResized = false
+    @onResize()
+
+  hide: ->
+
   release: =>
-    $(window).off 'resize.table', @onResize
+    $(window).off('resize.table', @onResize)
 
   update: (params) =>
     if params.sync is true
@@ -184,7 +198,15 @@ class App.ControllerTable extends App.Controller
     App.QueueManager.run('tableRender')
 
   renderPager: (el, find = false) =>
-    pages = parseInt(((@objects.length - 1)  / @shownPerPage))
+    return if !@pagerEnabled
+
+    if @pagerAjax
+      @renderPagerAjax(el, find)
+    else
+      @renderPagerStatic(el, find)
+
+  renderPagerAjax: (el, find = false) =>
+    pages = parseInt((@pagerTotalCount - 1)  / @pagerPerPage)
     if pages < 1
       if find
         el.find('.js-pager').html('')
@@ -192,8 +214,25 @@ class App.ControllerTable extends App.Controller
         el.filter('.js-pager').html('')
       return
     pager = App.view('generic/table_pager')(
-      page:    @shownPage
-      pages:   pages
+      page:  @pagerSelected - 1
+      pages: pages
+    )
+    if find
+      el.find('.js-pager').html(pager)
+    else
+      el.filter('.js-pager').html(pager)
+
+  renderPagerStatic: (el, find = false) =>
+    pages = parseInt(((@objects.length - 1)  / @pagerItemsPerPage))
+    if pages < 1
+      if find
+        el.find('.js-pager').html('')
+      else
+        el.filter('.js-pager').html('')
+      return
+    pager = App.view('generic/table_pager')(
+      page:  @pagerShownPage
+      pages: pages
     )
     if find
       el.find('.js-pager').html(pager)
@@ -202,18 +241,23 @@ class App.ControllerTable extends App.Controller
 
   render: =>
     @setMaxPage()
+
+    # always render pager in case of ajax pagination
+    if @pagerTotalCount
+      @renderPager(@el, true)
+
     if @renderState is undefined
 
       # check if table is empty
       if _.isEmpty(@objects)
         @renderState = 'emptyList'
         @el.html(@renderEmptyList())
-        $(window).on 'resize.table', @onResize
+        $(window).on('resize.table', @onResize)
         return ['emptyList.new']
       else
         @renderState = 'List'
         @renderTableFull()
-        $(window).on 'resize.table', @onResize
+        $(window).on('resize.table', @onResize)
         return ['fullRender.new']
     else if @renderState is 'emptyList' && !_.isEmpty(@objects)
       @renderState = 'List'
@@ -235,9 +279,9 @@ class App.ControllerTable extends App.Controller
       removedRows = _.difference(@currentRows, newRows)
       addedRows = _.difference(newRows, @currentRows)
 
-      #console.log('newRows', newRows)
-      #console.log('removedRows', removedRows)
-      #console.log('addedRows', addedRows)
+      @log 'debug', 'table newRows', newRows
+      @log 'debug', 'table removedRows', removedRows
+      @log 'debug', 'table addedRows', addedRows
 
       # if only rows are removed
       if (!_.isEmpty(addedRows) || !_.isEmpty(removedRows)) && addedRows.length < 10 && removedRows.length < 15 && removedRows.length < newRows.length && !_.isEmpty(newRows)
@@ -267,24 +311,25 @@ class App.ControllerTable extends App.Controller
             else
               @$("tbody > tr:nth-child(#{position})").after(newCurrentRows[position])
           @currentRows = newCurrentRows
-          #console.log('fullRender.contentRemoved', removePositions, addPositions)
+          @log 'debug', 'table.fullRender.contentRemoved', removePositions, addPositions
           @renderPager(@el, true)
+          @frontendTimeUpdateElement(@el) if @frontendTimeUpdateExecute is true
           return ['fullRender.contentRemoved', removePositions, addPositions]
 
       if newRows.length isnt @currentRows.length
         result = ['fullRender.lenghtChanged', @currentRows.length, newRows.length]
         @renderTableFull(newRows)
-        #console.log('result', result)
+        @log 'debug', 'table.fullRender.lenghtChanged', result
         return result
 
       # compare rows
       result = @_isSame(newRows, @currentRows)
       if result isnt true
         @renderTableFull(newRows)
-        #console.log('result', "fullRender.contentChanged|row(#{result})")
+        @log 'debug', "table.fullRender.contentChanged|row(#{result})"
         return ['fullRender.contentChanged', result]
 
-    #console.log('result', 'noChanges')
+    @log 'debug', 'table.noChanges'
     return ['noChanges']
 
   renderEmptyList: =>
@@ -292,18 +337,20 @@ class App.ControllerTable extends App.Controller
       explanation: @explanation
     )
 
-  renderTableFull: (rows) =>
-    #console.log('renderTableFull', @orderBy, @orderDirection, @objects)
-    @tableHeaders()
+  renderTableFull: (rows, options = {}) =>
+    @log 'debug', 'table.renderTableFull', @orderBy, @orderDirection
+    @tableHeaders(options)
     @sortList()
     bulkIds = @getBulkSelected()
     container = @renderTableContainer()
+    table = container.filter('.table')
     if !rows
       rows = @renderTableRows()
       @currentRows = clone(rows)
     else
       @currentRows = clone(rows)
     container.find('.js-tableBody').html(rows)
+    @frontendTimeUpdateElement(container) if @frontendTimeUpdateExecute is true
 
     @renderPager(container)
 
@@ -331,24 +378,24 @@ class App.ControllerTable extends App.Controller
 
           if hit
             for event, callback of item.events
-              do (container, event, callback) ->
+              do (table, event, callback) ->
                 if cursorMap[event]
-                  container.find("tbody > tr > td:nth-child(#{position})").css('cursor', cursorMap[event])
-                container.on( event, "tbody > tr > td:nth-child(#{position})",
+                  table.find("tbody > tr > td:nth-child(#{position})").css('cursor', cursorMap[event])
+                table.on(event, "tbody > tr > td:nth-child(#{position})",
                   (e) ->
                     e.stopPropagation()
                     id = $(e.target).parents('tr').data('id')
-                    callback(id, e)
+                    callback(id, e, e.currentTarget)
                 )
 
     # bind row
     if !_.isEmpty(@bindRow)
       if @bindRow.events
         for event, callback of @bindRow.events
-          do (container, event, callback) ->
+          do (table, event, callback) ->
             if cursorMap[event]
-              container.find('tbody > tr').css( 'cursor', cursorMap[event] )
-            container.on( event, 'tbody > tr',
+              table.find('tbody > tr').css( 'cursor', cursorMap[event] )
+            table.on(event, 'tbody > tr',
               (e) ->
                 id = $(e.target).parents('tr').data('id')
                 callback(id, e)
@@ -358,8 +405,8 @@ class App.ControllerTable extends App.Controller
     if @bindCheckbox
       if @bindCheckbox.events
         for event, callback of @bindCheckbox.events
-          do (container, event, callback) ->
-            container.delegate('input[name="bulk"]', event, (e) ->
+          do (table, event, callback) ->
+            table.delegate('input[name="bulk"]', event, (e) ->
               e.stopPropagation()
               id      = $(e.currentTarget).parents('tr').data('id')
               checked = $(e.currentTarget).prop('checked')
@@ -370,19 +417,19 @@ class App.ControllerTable extends App.Controller
     if @tableId
 
       # enable resize column
-      container.on 'mousedown', '.js-col-resize', @onColResizeMousedown
-      container.on 'click', '.js-col-resize', @stopPropagation
+      table.on('mousedown', '.js-col-resize', @onColResizeMousedown)
+      table.on('click', '.js-col-resize', @stopPropagation)
 
     # enable checkbox bulk selection
     if @checkbox
 
       # click first tr>td, catch click
-      container.delegate('tr > td:nth-child(1)', 'click', (e) ->
+      table.delegate('tr > td:nth-child(1)', 'click', (e) ->
         e.stopPropagation()
       )
 
       # bind on full bulk click
-      container.delegate('input[name="bulk_all"]', 'change', (e) =>
+      table.delegate('input[name="bulk_all"]', 'change', (e) =>
         e.stopPropagation()
         clicks = []
         if $(e.currentTarget).prop('checked')
@@ -404,6 +451,12 @@ class App.ControllerTable extends App.Controller
         return if !@bindCheckbox
         return if !@bindCheckbox.events
         return if _.isEmpty(clicks)
+
+        # If a select_all callback exists, then trigger it once insteading of triggering the callback once for each checkbox
+        if @bindCheckbox.select_all
+          @bindCheckbox.select_all(clicks[0]..., e)
+          return
+
         for event, callback of @bindCheckbox.events
           if event == 'click' || event == 'change'
             for click in clicks
@@ -425,18 +478,7 @@ class App.ControllerTable extends App.Controller
             $(@).width( originals.eq(index).outerWidth() )
           return helper
         update: @dndCallback
-      container.find('tbody').sortable(dndOptions)
-
-    # click on pager
-    container.delegate('.js-page', 'click', (e) =>
-      e.stopPropagation()
-      page = $(e.currentTarget).attr 'data-page'
-      render = =>
-        @shownPage = page
-        @renderTableFull()
-      App.QueueManager.add('tableRender', render)
-      App.QueueManager.run('tableRender')
-    )
+      table.find('tbody').sortable(dndOptions)
 
     @el.html(container)
     @setBulkSelected(bulkIds)
@@ -459,27 +501,58 @@ class App.ControllerTable extends App.Controller
     if @checkbox || @radio
       columnsLength++
     groupLast = ''
+    groupLastName = ''
     tableBody = []
-    objectsToShow = @objectsOfPage(@shownPage)
-    for object in objectsToShow
-      if object
-        position++
-        if @groupBy
-          groupByName = App.viewPrint(object, @groupBy, @attributesList)
-          if groupLast isnt groupByName
-            groupLast = groupByName
-            tableBody.push @renderTableGroupByRow(object, position, groupByName)
-        tableBody.push @renderTableRow(object, position)
+    objectsToShow = @objectsOfPage(@pagerShownPage)
+    if @groupBy
+      # group by raw (and not printable) value so dates work also
+      objectsGrouped = _.groupBy(objectsToShow, (object) => object[@groupBy])
+    else
+      objectsGrouped = { '': objectsToShow }
+
+    for groupValue in Object.keys(objectsGrouped).sort()
+      groupObjects = objectsGrouped[groupValue]
+
+      for object in groupObjects
+        objectActions = []
+
+        if object
+          position++
+          if @groupBy
+            groupByName = @groupObjectName(object, @groupBy)
+            if groupLastName isnt groupByName
+              groupLastName = groupByName
+              tableBody.push @renderTableGroupByRow(object, position, groupByName)
+          for action in @actions
+            # Check if the available key is used, it can be a Boolean or a function which should be called.
+            if !action.available? || action.available == true
+              objectActions.push action
+            else if typeof action.available is 'function' && action.available(object) == true
+              objectActions.push action
+
+          tableBody.push @renderTableRow(object, position, objectActions)
     tableBody
 
   renderTableGroupByRow: (object, position, groupByName) =>
+    ui_table_group_by_show_count = @Config.get('ui_table_group_by_show_count')
+    groupByCount = undefined
+    if ui_table_group_by_show_count is true
+      groupBy = @groupBy
+      groupLast = @groupObjectName(object, @groupBy)
+      groupByCount = 0
+      if @objects
+        for localObject in @objects
+          if @groupObjectName(localObject, groupBy) is groupLast
+            groupByCount += 1
+
     App.view('generic/table_row_group_by')(
       position:      position
       groupByName:   groupByName
+      groupByCount:  groupByCount
       columnsLength: @columnsLength
     )
 
-  renderTableRow: (object, position) =>
+  renderTableRow: (object, position, actions) =>
     App.view('generic/table_row')(
       headers:    @headers
       attributes: @attributesList
@@ -489,24 +562,26 @@ class App.ControllerTable extends App.Controller
       sortable:   @dndCallback
       position:   position
       object:     object
+      actions:    actions
     )
 
   tableHeadersHasChanged: =>
     return true if @overviewAttributes isnt @lastOverview
     false
 
-  tableHeaders: =>
+  tableHeaders: (options = {}) =>
     orderBy = @customOrderBy || @orderBy
     orderDirection = @customOrderDirection || @orderDirection
 
-    #console.log('LLL', @lastOrderBy, @orderBy, @lastOrderDirection, @orderDirection, @overviewAttributes, @lastOverview)
     if @headers && @lastOrderBy is orderBy && @lastOrderDirection is orderDirection && !@tableHeadersHasChanged()
-      #console.log('tableHeaders: same overviewAttributes just return headers', @headers)
+      @log 'debug', 'table.Headers: same overviewAttributes just return headers', @headers
       return ['headers are the same', @headers]
     @lastOverview = @overviewAttributes
 
     # get header data
     @headers = []
+    @actions = [].concat @customActions
+    availableWidth = @availableWidth
     for item in @overviewAttributes
       headerFound = false
       for attributeName, attribute of @attributesList
@@ -517,29 +592,13 @@ class App.ControllerTable extends App.Controller
           if !attribute.style
             attribute.style = {}
 
-          if attributeName is item
+          if attributeName is item || (attributeName is "#{item}_id" || attributeName is "#{item}_ids")
             # e.g. column: owner
             headerFound = true
-            if @headerWidth[attribute.name]
-              attribute.displayWidth = @headerWidth[attribute.name] * @availableWidth
-            else if !attribute.width
-              attribute.displayWidth = @baseColWidth
-            else
-              # convert percentages to pixels
-              value = parseInt attribute.width, 10
-              unit = attribute.width.match(/[px|%]+/)[0]
 
-              if unit is '%'
-                attribute.displayWidth = value / 100 * @el.width()
-              else
-                attribute.displayWidth = value
-            @headers.push attribute
-          else
-            # e.g. column: owner_id or owner_ids
-            if attributeName is "#{item}_id" || attributeName is "#{item}_ids"
-              headerFound = true
+            if !options.skipHeadersResize
               if @headerWidth[attribute.name]
-                attribute.displayWidth = @headerWidth[attribute.name] * @availableWidth
+                attribute.displayWidth = @headerWidth[attribute.name] * availableWidth
               else if !attribute.width
                 attribute.displayWidth = @baseColWidth
               else
@@ -548,51 +607,97 @@ class App.ControllerTable extends App.Controller
                 unit = attribute.width.match(/[px|%]+/)[0]
 
                 if unit is '%'
-                  attribute.displayWidth = value / 100 * @el.width()
+                  attribute.displayWidth = value / 100 * availableWidth
                 else
                   attribute.displayWidth = value
-              @headers.push attribute
-
+            @headers.push attribute
 
     # execute header callback
     if @callbackHeader
       for callback in @callbackHeader
         @headers = callback(@headers)
 
-    if @tableId
-      @calculateHeaderWidths()
-
     throw 'no headers found' if _.isEmpty(@headers)
 
-    # add destroy header and col binding
-    if @destroy
-      @headers.push
-        name: 'destroy'
-        display: 'Delete'
-        width: '70px'
-        displayWidth: 70
-        unresizable: true
-        parentClass: 'js-delete'
-        icon: 'trash'
+    if @clone
+      @actions.push
+        name: 'clone'
+        display: 'Clone'
+        icon: 'clipboard'
+        class: 'create  js-clone'
+        callback: (id) =>
+          item = @model.find(id)
+          item.name = "Clone: #{item.name}"
+          new App.ControllerGenericNew(
+            item: item
+            pageData:
+              object: item.constructor.className
+            callback: =>
+              @renderTableFull()
+            genericObject: item.constructor.className
+            container:     @container
+          )
 
-      @bindCol['destroy'] =
+    if @destroy
+      @actions.push
+        name: 'delete'
+        display: 'Delete'
+        icon: 'trash'
+        class: 'danger js-delete'
+        callback: (id) =>
+          item = @model.find(id)
+          new App.ControllerGenericDestroyConfirm
+            item:      item
+            container: @container
+
+    if @actions.length
+      @headers.push
+        name:         'action'
+        display:      'Action'
+        width:        '50px'
+        displayWidth: 50
+        align:        'right'
+        parentClass:  'noTruncate no-padding'
+        unresizable:  true
+        unsortable:   true
+
+      @bindCol['action'] =
         events:
-          click: @deleteRow
+          click: @toggleActionDropdown
+
+    @calculateHeaderWidths()
+    @storeHeaderWidths()
 
     @columnsLength = @headers.length
     if @checkbox || @radio
       @columnsLength++
-    #console.log('tableHeaders: new headers', @headers)
+    @log 'debug', 'table.Headers: new headers', @headers
     ['new headers', @headers]
 
   setMaxPage: =>
-    pages = parseInt(((@objects.length - 1)  / @shownPerPage))
-    if parseInt(@shownPage) > pages
-      @shownPage = pages
+    return if !@pagerEnabled
+
+    pages = parseInt(((@objects.length - 1)  / @pagerItemsPerPage))
+    if parseInt(@pagerShownPage) > pages
+      @pagerShownPage = pages
 
   objectsOfPage: (page = 0) =>
+    return @objects if !@pagerEnabled
+
     page = parseInt(page)
-    @objects.slice(page * @shownPerPage, (page + 1) * @shownPerPage)
+    @objects.slice(page * @pagerItemsPerPage, (page + 1) * @pagerItemsPerPage)
+
+  paginate: (e) =>
+    e.stopPropagation()
+    page = $(e.currentTarget).attr('data-page')
+    if @pagerAjax
+      @navigate "#{@pagerBaseUrl}#{(parseInt(page) + 1)}"
+    else
+      render = =>
+        @pagerShownPage = page
+        @renderTableFull()
+      App.QueueManager.add('tableRender', render)
+      App.QueueManager.run('tableRender')
 
   sortList: =>
     return if _.isEmpty(@objects)
@@ -600,8 +705,8 @@ class App.ControllerTable extends App.Controller
     orderBy = @customOrderBy || @orderBy
     orderDirection = @customOrderDirection || @orderDirection
 
-    #console.log('order', @orderBy, @orderDirection)
-    #console.log('customOrder', @customOrderBy, @customOrderDirection)
+    @log 'debug', 'table.order', @orderBy, @orderDirection
+    @log 'debug', 'table.customOrder', @customOrderBy, @customOrderDirection
 
     return if _.isEmpty(orderBy) && _.isEmpty(@groupBy)
 
@@ -609,10 +714,37 @@ class App.ControllerTable extends App.Controller
     @lastOrderDirection = orderDirection
     @lastOrderBy = orderBy
 
+    # sorting for ajax pagination will be made in the backend
+    # so we only set the arrow for the sort direction
+    if @pagerAjax
+      for header in @headers
+        if header.name is orderBy || "#{header.name}_id" is orderBy || header.name is "#{orderBy}_id"
+          if orderDirection is 'DESC'
+            header.sortOrderIcon = ['arrow-down', 'table-sort-arrow']
+          else
+            header.sortOrderIcon = ['arrow-up', 'table-sort-arrow']
+        else
+          header.sortOrderIcon = undefined
+      return
+
+    # Underscore's sortBy cannot deal with null values, so we replace null values with a place holder string
+    sortBy = (list, iteratee) ->
+      _.sortBy(
+        list
+        (item) ->
+          res = iteratee(item)
+          # Checking for a falsey value would overide 0 or false to placeholder.
+          # UnderscoreJS sorter breaks when \uFFFF is sorted together with non-string values.
+          return res if res != null and res != undefined and res != ''
+          # null values are considered lexicographically "last"
+          '\uFFFF'
+      )
+
+    localObjects is undefined
     if orderBy
       for header in @headers
-        if header.name is orderBy || "#{header.name}_id" is orderBy
-          localObjects = _.sortBy(
+        if header.name is orderBy || "#{header.name}_id" is orderBy || header.name is "#{orderBy}_id"
+          localObjects = sortBy(
             @objects
             (item) ->
 
@@ -649,7 +781,7 @@ class App.ControllerTable extends App.Controller
       # in case order by is not in show column, use orderBy attribute
       if !localObjects
         for attributeName, attribute of @attributesList
-          if attributeName is orderBy || "#{attributeName}_id" is orderBy
+          if attributeName is orderBy || "#{attributeName}_id" is orderBy || attributeName is "#{orderBy}_id"
 
             # order by
             localObjects = _.sortBy(
@@ -692,22 +824,7 @@ class App.ControllerTable extends App.Controller
       # get groups
       groupObjects = {}
       for object in @objects
-        group = object[@groupBy]
-        if !group
-          withId = "#{@groupBy}_id"
-          if object[withId] && @attributesList[withId] && @attributesList[withId].relation
-            if App[@attributesList[withId].relation].exists(object[withId])
-              item = App[@attributesList[withId].relation].findNative(object[withId])
-              if item && item.displayName
-                group = item.displayName().toLowerCase()
-              else if item.name
-                group = item.name.toLowerCase()
-        if _.isEmpty(group)
-          group = ''
-        if group.displayName
-          group = group.displayName().toLowerCase()
-        else if group.name
-          group = group.name.toLowerCase()
+        group = @groupObjectName(object, @groupBy)
         groupObjects[group] ||= []
         groupObjects[group].push object
 
@@ -715,6 +832,9 @@ class App.ControllerTable extends App.Controller
       for key of groupObjects
         groupsSorted.push key
       groupsSorted = groupsSorted.sort()
+      # Reverse the sorted groups depending on the groupDirection
+      if @groupDirection == 'DESC'
+        groupsSorted.reverse()
 
       # get new order
       localObjects = []
@@ -722,26 +842,67 @@ class App.ControllerTable extends App.Controller
         localObjects = localObjects.concat groupObjects[group]
         groupObjects[group] = [] # release old array
 
+    return if localObjects is undefined
     @objects = localObjects
     @lastSortedobjects = localObjects
 
-  # bind on delete dialog
-  deleteRow: (id, e) =>
+  groupObjectName: (object, key = undefined) ->
+    group = object
+    if key
+      if key not of object
+        key += '_id'
+      group = App.viewPrint(object, key, @attributesList)
+    if _.isEmpty(group)
+      group = ''
+    if group.displayName
+      group = group.displayName().toLowerCase()
+    else if group.name
+      group = group.name.toLowerCase()
+    group
+
+  onActionButtonClicked: (e) =>
+    id = $(e.currentTarget).parents('tr').data('id')
+    name = e.currentTarget.getAttribute('data-table-action')
+    @runAction(name, id)
+
+  runAction: (name, id) =>
+    action = _.findWhere @actions, name: name
+    action.callback(id)
+
+  toggleActionDropdown: (id, e, td) =>
     e.stopPropagation()
-    e.preventDefault()
-    item = @model.find(id)
-    new App.ControllerGenericDestroyConfirm
-      item:      item
-      container: @container
+    $dropdown = $(td).find('.js-table-action-menu')
+
+    if $dropdown.length
+
+      # open dropdown
+      $dropdown.dropdown('toggle')
+
+      # check if bind to open dropdown is already done
+      return if $dropdown.prop('rendered')
+
+      # remember that bind to open dropdown is already done
+      $dropdown.prop('rendered', true)
+
+      # bind on click now that the dropdown is open
+      $dropdown.on('click.dropdown', '[data-table-action]', @onActionButtonClicked)
+    else
+      # only one action - directly fire that action
+      name = $(td).find('[data-table-action]').attr('data-table-action')
+      @runAction(name, id)
 
   calculateHeaderWidths: ->
+    return if !@tableId
     return if !@headers
 
-    if @availableWidth is 0
-      @availableWidth = @minTableWidth
+    availableWidth = @availableWidth
 
-    widths = @getHeaderWidths()
-    shrinkBy = Math.ceil (widths - @availableWidth) / @getShrinkableHeadersCount()
+    # ensure all widths are integers
+    @headers = _.map @headers, (col) ->
+      col.displayWidth = Math.floor(col.displayWidth)
+      return col
+
+    shrinkBy = Math.ceil (@getHeaderWidths() - availableWidth) / @getShrinkableHeadersCount()
 
     # make all cols evenly smaller
     @headers = _.map @headers, (col) =>
@@ -750,12 +911,13 @@ class App.ControllerTable extends App.Controller
       return col
 
     # give left-over space from rounding to last column to get to 100%
-    roundingLeftOver = @availableWidth - @getHeaderWidths()
+    roundingLeftOver = availableWidth - @getHeaderWidths()
+
     # but only if there is something left over (will get negative when there are too many columns for each column to stay in their min width)
-    if roundingLeftOver > 0
+    if roundingLeftOver > 0 && roundingLeftOver < 10
       @headers[@headers.length - 1].displayWidth = @headers[@headers.length - 1].displayWidth + roundingLeftOver
 
-    @storeHeaderWidths()
+    true
 
   getShrinkableHeadersCount: ->
     _.reduce @headers, (memo, col) ->
@@ -779,22 +941,38 @@ class App.ControllerTable extends App.Controller
     widths
 
   setHeaderWidths: =>
-    @calculateHeaderWidths()
+    return if !@calculateHeaderWidths()
 
-    @tableHead.each (i, el) =>
+    @$('.js-tableHead').each (i, el) =>
       el.style.width = @headers[i].displayWidth + 'px'
 
+    @storeHeaderWidths()
+
   storeHeaderWidths: ->
     widths = {}
 
     for header in @headers
       widths[header.name] = header.displayWidth / @availableWidth
 
+    @headerWidth = widths
+
     App.LocalStorage.set(@preferencesStoreKey(), { headerWidth: widths }, @Session.get('id'))
 
   onResize: =>
-    @availableWidth = @el.width()
-    @setHeaderWidths()
+    localWidth = @el.width()
+    if localWidth is 0
+      @windowIsResized = true
+      return
+
+    @availableWidth = localWidth
+    localDelay = =>
+      localSetHeaderWidths = =>
+        @availableWidth = @el.width()
+        @setHeaderWidths()
+      App.QueueManager.add('tableRender', localSetHeaderWidths)
+      App.QueueManager.run('tableRender')
+
+    @delay(localDelay, 200, 'table-resize-finish')
 
   stopPropagation: (event) ->
     event.stopPropagation()
@@ -806,14 +984,17 @@ class App.ControllerTable extends App.Controller
     @resizeLeftStartWidth = @resizeTargetLeft.width()
     @resizeRightStartWidth = @resizeTargetRight.width()
 
-    $(document).on 'mousemove.resizeCol', @onColResizeMousemove
-    $(document).one 'mouseup', @onColResizeMouseup
+    $(document).on('mousemove.resizeCol', @onColResizeMousemove)
+    $(document).one('mouseup', @onColResizeMouseup)
 
     @tableWidth = @el.width()
 
   onColResizeMousemove: (event) =>
     # use pixels while moving for max precision
-    difference = event.pageX - @resizeStartX
+    if App.i18n.dir() is 'rtl'
+      difference = @resizeStartX - event.pageX
+    else
+      difference = event.pageX - @resizeStartX
 
     if @resizeLeftStartWidth + difference < @minColWidth
       difference = - (@resizeLeftStartWidth - @minColWidth)
@@ -825,12 +1006,12 @@ class App.ControllerTable extends App.Controller
     @resizeTargetRight.width @resizeRightStartWidth - difference
 
   onColResizeMouseup: =>
-    $(document).off 'mousemove.resizeCol'
+    $(document).off('mousemove.resizeCol')
 
     # switch to percentage
     resizeBaseWidth = @resizeTargetLeft.parents('table').width()
-    leftWidth = @resizeTargetLeft.width() / resizeBaseWidth
-    rightWidth = @resizeTargetRight.width() / resizeBaseWidth
+    leftWidth = @resizeTargetLeft.outerWidth() / resizeBaseWidth
+    rightWidth = @resizeTargetRight.outerWidth() / resizeBaseWidth
 
     leftColumnKey = @resizeTargetLeft.attr('data-column-key')
     rightColumnKey = @resizeTargetRight.attr('data-column-key')
@@ -838,17 +1019,29 @@ class App.ControllerTable extends App.Controller
     # update store and runtime @headerWidth
     @preferencesStore('headerWidth', leftColumnKey, leftWidth)
     @headerWidth[leftColumnKey] = leftWidth
-    _.find(@headers, (column) -> column.name is leftColumnKey).displayWidth = leftWidth
+
+    # set header at runtime
+    for header in @headers
+      if header.name is leftColumnKey
+        header.displayWidth = @resizeTargetLeft.outerWidth()
 
     # update store and runtime @headerWidth
     if rightColumnKey
       @preferencesStore('headerWidth', rightColumnKey, rightWidth)
       @headerWidth[rightColumnKey] = rightWidth
-      _.find(@headers, (column) -> column.name is rightColumnKey).displayWidth = rightWidth
+
+      # set header at runtime
+      for header in @headers
+        if header.name is rightColumnKey
+          header.displayWidth = @resizeTargetRight.outerWidth()
 
   sortByColumn: (event) =>
     column = $(event.currentTarget).closest('[data-column-key]').attr('data-column-key')
 
+    # for ajax pagination we only accept valid attributes for sorting
+    if @model && @pagerAjax
+      return if !@attributesList[column]
+
     orderBy = @customOrderBy || @orderBy
     orderDirection = @customOrderDirection || @orderDirection
 
@@ -870,9 +1063,14 @@ class App.ControllerTable extends App.Controller
     # update store
     @preferencesStore('order', 'customOrderBy', @orderBy)
     @preferencesStore('order', 'customOrderDirection', @orderDirection)
-    render = =>
-      @renderTableFull()
-    App.QueueManager.add('tableRender', render)
+
+    if @sortRenderCallback
+      App.QueueManager.add('tableRender', @sortRenderCallback)
+    else
+      render = =>
+        @renderTableFull(false, skipHeadersResize: true)
+      App.QueueManager.add('tableRender', render)
+
     App.QueueManager.run('tableRender')
 
   preferencesStore: (type, key, value) ->
@@ -913,4 +1111,4 @@ class App.ControllerTable extends App.Controller
     for position in [0..array1.length-1]
       if array1[position] isnt array2[position]
         return position
-    true
+    true

app/assets/javascripts/app/controllers/_application_controller/tabs.coffee

@@ -0,0 +1,61 @@
+class App.ControllerTabs extends App.Controller
+  events:
+    'click .nav-tabs [data-toggle="tab"]': 'tabRemember'
+
+  constructor: (params) ->
+    @originParams = params # remember params for sub-controller
+    super(params)
+
+    # check authentication
+    if @requiredPermission
+      if !@permissionCheckRedirect(@requiredPermission)
+        throw "No permission for #{@requiredPermission}"
+
+  show: =>
+    return if !@controllerList
+    for localeController in @controllerList
+      if localeController && localeController.show
+        localeController.show()
+
+  hide: =>
+    return if !@controllerList
+    for localeController in @controllerList
+      if localeController && localeController.hide
+        localeController.hide()
+
+  render: ->
+    @html App.view('generic/tabs')(
+      header: @header
+      subHeader: @subHeader
+      tabs: @tabs
+      addTab: @addTab
+      headerSwitchName: @headerSwitchName
+      headerSwitchChecked: @headerSwitchChecked
+    )
+
+    # insert content
+    for tab in @tabs
+      @$('.tab-content').append("<div class=\"tab-pane\" id=\"#{tab.target}\"></div>")
+      if tab.controller
+        params = tab.params || {}
+        params.name = tab.name
+        params.target = tab.target
+        params.el = @$("##{tab.target}")
+        @controllerList ||= []
+        @controllerList.push new tab.controller(_.extend(@originParams, params))
+
+    # check if tabs need to be show / cant' use .tab(), because tabs are note shown (only one tab exists)
+    if @tabs.length <= 1
+      @$('.tab-pane').addClass('active')
+      return
+
+    # set last or first tab to active
+    @lastActiveTab = @Config.get('lastTab')
+    if @lastActiveTab &&  @$(".nav-tabs li a[href='#{@lastActiveTab}']")[0]
+      @$(".nav-tabs li a[href='#{@lastActiveTab}']").tab('show')
+    else
+      @$('.nav-tabs li:first a').tab('show')
+
+  tabRemember: (e) =>
+    @lastActiveTab = $(e.target).attr('href')
+    @Config.set('lastTab', @lastActiveTab)