Releases for Views Bulk Operations (VBO)

SECURITY FIX:
* Added node_access checks to prevent unauthorized users from modifying nodes

BUG FIXES:
* Heavy refactoring and fixing regression with Job Queue support
* Fixed support for cron actions in actions permissions
* Fixed regression with node saving

NEW FEATURES:
* Added support for 'aggregate' attribute
* Added {node,user}_operations support to actions_permissions

Whew! It's been a rocking time for VBO recently. More exposure, more usage, more bugs, more features: the fun never stops :-) Thanks to Growing Venture Solutions for supporting this release!

NEW FEATURES:
* Added action for arbitrary PHP scripting
* #203100: Add 'cancel' link to action configuration page
* #358963: checkboxes lose state if confirmation screen is enabled and user cancels or uses back button
* #379202: taxonomy action shows unapplicable vocabularies
* #362537: add support for rules
* #361990: Allow for custom confirmation screen

FIXES
* #369678: Using workflow actions results in PHP error
* #342378: Bulk operations operates on all nodes in nodes table when select all nodes in view is chosen
* #374771: The requested URL /subdir/node/4 was not found on this server.
* #375862: Undefined index: configurable in delete.action.inc
* #355862: PHP warnings
* #381838: Remove the use of the @ operator
* #365648: optionally hide header/footer/attachments on confirmation screen
* #383852: Using vbo actions with rules
* #363478: Compatibility with Drupal.attachBehaviors
* #362534: hook_object_info()
* #362563: actions violating module namespace!

This release fixes an XSS vulnerability. See DRUPAL-SA-CONTRIB-2009-005 - Views bulk operations - Cross site scripting for additional information.

NOTES:
* Your VBO settings for existing views might be corrupted after this upgrade. Please make sure to go to your views' settings and re-select the desired operations.

* http://drupal.org/node/336887
* http://drupal.org/node/349965
* http://drupal.org/node/349921
* http://drupal.org/node/334566
* http://drupal.org/node/348147
* http://drupal.org/node/340664
* http://drupal.org/node/319616
* http://drupal.org/node/333445
* http://drupal.org/node/321273

REQUIRES
* Views 6.x-2.0-rc3 or later

NEW FEATURES
* Supports non-node objects such as users and comments. User-defined objects can also be added via hook_object_info(), check views_bulk_operations_object_info() for details.
* Supports 'system' actions.
* Allows displaying actions as buttons instead of drop-down list.

FIXES
* Code cleanup

NEW FEATURES
* Allow selection across all pages

FIXES
* No limitation on number of nodes
* Two or more VBOs per page

SINCE LAST RELEASE:
* Added argument_selector action
* Added infrastructure to programmatically execute a VBO
* Added action-defined permissions checking
* #483240: Need a way to disable the select all checkbox
* #486470: Problem to set permissions with module actions_permissions when using multi language
* #490034: Missing actions
* #490204: Error notices
* #487918: If grouping by a field, table headers get munged
* #508772: update.php fatal error in views_bulk_operations_update_6000()

ISSUES FIXED:
* Problems with CVS branching and tagging. Currently HEAD serves D5. DRUPAL-5 branch is obsolete and will be removed soon.
* 197571 - warning on action confirmation page.
* 204291 - action configuration form being partially displayed on confirmation page
* 202213 - can't set operations in default admin view
* 200277 - Extra "select all rows" checkboxes added when no action selected
* 203091 - "select all" checkbox missing
* 196964 - pager menu appearing again in action configuration step

This release removes the dependency on the views selector patch. VBO is now 100% independent.