Rc to metdata branch

.editorconfig

@@ -84,6 +84,9 @@ csharp_prefer_simple_using_statement = true:suggestion
 csharp_style_namespace_declarations = block_scoped:silent
 csharp_style_pattern_matching_over_is_with_cast_check = true:suggestion
 
+# CS1591: Fehledes XML-Kommentar für öffentlich sichtbaren Typ oder Element
+dotnet_diagnostic.CS1591.severity = none
+
 [*.vb]
 #### Benennungsstile ####
 

.github/workflows/codeql.yml

@@ -0,0 +1,106 @@
+# For most projects, this workflow file will not need changing; you simply need
+# to commit it to your repository.
+#
+# You may wish to alter this file to override the set of languages analyzed,
+# or to provide custom queries or build logic.
+#
+# ******** NOTE ********
+# We have attempted to detect the languages in your repository. Please check
+# the `language` matrix defined below to confirm you have the correct set of
+# supported CodeQL languages.
+#
+name: "CodeQL Advanced"
+
+on:
+  push:
+    branches:
+      - master
+      - rc
+  pull_request:
+    branches: 
+      - master
+      - rc
+  schedule:
+    - cron: '38 14 * * 4'
+
+jobs:
+  analyze:
+    name: Analyze (${{ matrix.language }})
+    # Runner size impacts CodeQL analysis time. To learn more, please see:
+    #   - https://gh.io/recommended-hardware-resources-for-running-codeql
+    #   - https://gh.io/supported-runners-and-hardware-resources
+    #   - https://gh.io/using-larger-runners (GitHub.com only)
+    # Consider using larger runners or machines with greater resources for possible analysis time improvements.
+    runs-on: ${{ (matrix.language == 'swift' && 'macos-latest') || 'ubuntu-latest' }}
+    permissions:
+      # required for all workflows
+      security-events: write
+
+      # required to fetch internal or private CodeQL packs
+      packages: read
+
+      # only required for workflows in private repositories
+      actions: read
+      contents: read
+
+    strategy:
+      fail-fast: false
+      matrix:
+        include:
+        - language: actions
+          build-mode: none
+        - language: csharp
+          build-mode: none
+        - language: javascript-typescript
+          build-mode: none
+        # CodeQL supports the following values keywords for 'language': 'actions', 'c-cpp', 'csharp', 'go', 'java-kotlin', 'javascript-typescript', 'python', 'ruby', 'rust', 'swift'
+        # Use `c-cpp` to analyze code written in C, C++ or both
+        # Use 'java-kotlin' to analyze code written in Java, Kotlin or both
+        # Use 'javascript-typescript' to analyze code written in JavaScript, TypeScript or both
+        # To learn more about changing the languages that are analyzed or customizing the build mode for your analysis,
+        # see https://docs.github.com/en/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/customizing-your-advanced-setup-for-code-scanning.
+        # If you are analyzing a compiled language, you can modify the 'build-mode' for that language to customize how
+        # your codebase is analyzed, see https://docs.github.com/en/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/codeql-code-scanning-for-compiled-languages
+    steps:
+    - name: Checkout repository
+      uses: actions/checkout@v4
+
+    # Add any setup steps before running the `github/codeql-action/init` action.
+    # This includes steps like installing compilers or runtimes (`actions/setup-node`
+    # or others). This is typically only required for manual builds.
+    # - name: Setup runtime (example)
+    #   uses: actions/setup-example@v1
+
+    # Initializes the CodeQL tools for scanning.
+    - name: Initialize CodeQL
+      uses: github/codeql-action/init@v3
+      with:
+        languages: ${{ matrix.language }}
+        build-mode: ${{ matrix.build-mode }}
+        # If you wish to specify custom queries, you can do so here or in a config file.
+        # By default, queries listed here will override any specified in a config file.
+        # Prefix the list here with "+" to use these queries and those in the config file.
+
+        # For more details on CodeQL's query packs, refer to: https://docs.github.com/en/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/configuring-code-scanning#using-queries-in-ql-packs
+        # queries: security-extended,security-and-quality
+
+    # If the analyze step fails for one of the languages you are analyzing with
+    # "We were unable to automatically build your code", modify the matrix above
+    # to set the build mode to "manual" for that language. Then modify this step
+    # to build your code.
+    # ℹ️ Command-line programs to run using the OS shell.
+    # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
+    - if: matrix.build-mode == 'manual'
+      shell: bash
+      run: |
+        echo 'If you are using a "manual" build mode for one or more of the' \
+          'languages you are analyzing, replace this with the commands to build' \
+          'your code, for example:'
+        echo '  make bootstrap'
+        echo '  make release'
+        exit 1
+
+    - name: Perform CodeQL Analysis
+      uses: github/codeql-action/analyze@v3
+      with:
+        category: "/language:${{matrix.language}}"

.github/workflows/main.yml

@@ -11,7 +11,8 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v3
+
+        uses: actions/checkout@v4
 
       - name: Install .NET SDK
         uses: actions/setup-dotnet@v3
@@ -26,7 +27,9 @@ jobs:
           upgrade-assistant analyze BExIS%2B%2B.sln --format json > upgrade-report.json
 
       - name: Upload report artifact
-        uses: actions/[email protected]
+
+        uses: actions/upload-artifact@v4
+
         with:
           name: upgrade-report
           path: upgrade-report.json

.gitignore

@@ -281,3 +281,4 @@ svelte
 /Console/BExIS.Web.Shell/Areas/RPM/BExIS.Modules.Rpm.UI/Scripts/svelte
 /_output
 /Console/BExIS.Web.Shell/Web.config
+/Console/BExIS.Web.Shell/Areas/SMM/BExIS.Modules.SMM.UI/Properties/PublishProfiles/FolderProfile.pubxml

BExIS++.sln

@@ -230,6 +230,14 @@ Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "BExIS.Ext.Orm.NH", "Compone
 EndProject
 Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "BExIS.Modules.Dim.UI", "Console\BExIS.Web.Shell\Areas\DIM\BExIS.Modules.Dim.UI\BExIS.Modules.Dim.UI.csproj", "{9BFFFD11-03C6-47DF-9CC9-F458A9A49377}"
 EndProject
+Project("{2150E333-8FDC-42A3-9474-1A3956D46DE8}") = "SMM", "SMM", "{02EA681E-C7D8-13C7-8484-4AC65E1B71E8}"
+EndProject
+Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "BExIS.Modules.SMM.UI", "Console\BExIS.Web.Shell\Areas\SMM\BExIS.Modules.SMM.UI\BExIS.Modules.SMM.UI.csproj", "{37402CAB-EB81-4D08-8791-8653949C0FEB}"
+EndProject
+Project("{2150E333-8FDC-42A3-9474-1A3956D46DE8}") = "PUM", "PUM", "{96384857-88D4-4282-8EFD-FE8FCB0319B7}"
+EndProject
+Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "BExIS.Modules.PUM.UI", "Console\BExIS.Web.Shell\Areas\PUM\BExIS.Modules.PUM.UI\BExIS.Modules.PUM.UI.csproj", "{C1AE3004-853A-4CCF-9099-AE919C6121C8}"
+EndProject
 Global
 	GlobalSection(SolutionConfigurationPlatforms) = preSolution
 		Debug|Any CPU = Debug|Any CPU
@@ -1486,6 +1494,42 @@ Global
 		{9BFFFD11-03C6-47DF-9CC9-F458A9A49377}.TestServerRelease|Mixed Platforms.Build.0 = TestServerRelease|Any CPU
 		{9BFFFD11-03C6-47DF-9CC9-F458A9A49377}.TestServerRelease|x86.ActiveCfg = TestServerRelease|Any CPU
 		{9BFFFD11-03C6-47DF-9CC9-F458A9A49377}.TestServerRelease|x86.Build.0 = TestServerRelease|Any CPU
+		{37402CAB-EB81-4D08-8791-8653949C0FEB}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
+		{37402CAB-EB81-4D08-8791-8653949C0FEB}.Debug|Any CPU.Build.0 = Debug|Any CPU
+		{37402CAB-EB81-4D08-8791-8653949C0FEB}.Debug|Mixed Platforms.ActiveCfg = Debug|Any CPU
+		{37402CAB-EB81-4D08-8791-8653949C0FEB}.Debug|Mixed Platforms.Build.0 = Debug|Any CPU
+		{37402CAB-EB81-4D08-8791-8653949C0FEB}.Debug|x86.ActiveCfg = Debug|Any CPU
+		{37402CAB-EB81-4D08-8791-8653949C0FEB}.Debug|x86.Build.0 = Debug|Any CPU
+		{37402CAB-EB81-4D08-8791-8653949C0FEB}.Release|Any CPU.ActiveCfg = Release|Any CPU
+		{37402CAB-EB81-4D08-8791-8653949C0FEB}.Release|Any CPU.Build.0 = Release|Any CPU
+		{37402CAB-EB81-4D08-8791-8653949C0FEB}.Release|Mixed Platforms.ActiveCfg = Release|Any CPU
+		{37402CAB-EB81-4D08-8791-8653949C0FEB}.Release|Mixed Platforms.Build.0 = Release|Any CPU
+		{37402CAB-EB81-4D08-8791-8653949C0FEB}.Release|x86.ActiveCfg = Release|Any CPU
+		{37402CAB-EB81-4D08-8791-8653949C0FEB}.Release|x86.Build.0 = Release|Any CPU
+		{37402CAB-EB81-4D08-8791-8653949C0FEB}.TestServerRelease|Any CPU.ActiveCfg = TestServerRelease|Any CPU
+		{37402CAB-EB81-4D08-8791-8653949C0FEB}.TestServerRelease|Any CPU.Build.0 = TestServerRelease|Any CPU
+		{37402CAB-EB81-4D08-8791-8653949C0FEB}.TestServerRelease|Mixed Platforms.ActiveCfg = TestServerRelease|Any CPU
+		{37402CAB-EB81-4D08-8791-8653949C0FEB}.TestServerRelease|Mixed Platforms.Build.0 = TestServerRelease|Any CPU
+		{37402CAB-EB81-4D08-8791-8653949C0FEB}.TestServerRelease|x86.ActiveCfg = TestServerRelease|Any CPU
+		{37402CAB-EB81-4D08-8791-8653949C0FEB}.TestServerRelease|x86.Build.0 = TestServerRelease|Any CPU
+		{C1AE3004-853A-4CCF-9099-AE919C6121C8}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
+		{C1AE3004-853A-4CCF-9099-AE919C6121C8}.Debug|Any CPU.Build.0 = Debug|Any CPU
+		{C1AE3004-853A-4CCF-9099-AE919C6121C8}.Debug|Mixed Platforms.ActiveCfg = Debug|Any CPU
+		{C1AE3004-853A-4CCF-9099-AE919C6121C8}.Debug|Mixed Platforms.Build.0 = Debug|Any CPU
+		{C1AE3004-853A-4CCF-9099-AE919C6121C8}.Debug|x86.ActiveCfg = Debug|Any CPU
+		{C1AE3004-853A-4CCF-9099-AE919C6121C8}.Debug|x86.Build.0 = Debug|Any CPU
+		{C1AE3004-853A-4CCF-9099-AE919C6121C8}.Release|Any CPU.ActiveCfg = Release|Any CPU
+		{C1AE3004-853A-4CCF-9099-AE919C6121C8}.Release|Any CPU.Build.0 = Release|Any CPU
+		{C1AE3004-853A-4CCF-9099-AE919C6121C8}.Release|Mixed Platforms.ActiveCfg = Release|Any CPU
+		{C1AE3004-853A-4CCF-9099-AE919C6121C8}.Release|Mixed Platforms.Build.0 = Release|Any CPU
+		{C1AE3004-853A-4CCF-9099-AE919C6121C8}.Release|x86.ActiveCfg = Release|Any CPU
+		{C1AE3004-853A-4CCF-9099-AE919C6121C8}.Release|x86.Build.0 = Release|Any CPU
+		{C1AE3004-853A-4CCF-9099-AE919C6121C8}.TestServerRelease|Any CPU.ActiveCfg = TestServerRelease|Any CPU
+		{C1AE3004-853A-4CCF-9099-AE919C6121C8}.TestServerRelease|Any CPU.Build.0 = TestServerRelease|Any CPU
+		{C1AE3004-853A-4CCF-9099-AE919C6121C8}.TestServerRelease|Mixed Platforms.ActiveCfg = TestServerRelease|Any CPU
+		{C1AE3004-853A-4CCF-9099-AE919C6121C8}.TestServerRelease|Mixed Platforms.Build.0 = TestServerRelease|Any CPU
+		{C1AE3004-853A-4CCF-9099-AE919C6121C8}.TestServerRelease|x86.ActiveCfg = TestServerRelease|Any CPU
+		{C1AE3004-853A-4CCF-9099-AE919C6121C8}.TestServerRelease|x86.Build.0 = TestServerRelease|Any CPU
 	EndGlobalSection
 	GlobalSection(SolutionProperties) = preSolution
 		HideSolutionNode = FALSE
@@ -1580,6 +1624,10 @@ Global
 		{AF3D9C1F-968A-46DD-86FB-6B45020DF4E3} = {CD986786-CEA1-4C30-983E-169C33600BA6}
 		{C48DCFC5-DF47-4486-A682-5C648F970318} = {CD986786-CEA1-4C30-983E-169C33600BA6}
 		{9BFFFD11-03C6-47DF-9CC9-F458A9A49377} = {F3354AC7-CDA1-44E2-8E85-8DB532ED8C75}
+		{02EA681E-C7D8-13C7-8484-4AC65E1B71E8} = {692AFF14-3A57-47D8-912F-093EC8F561C4}
+		{37402CAB-EB81-4D08-8791-8653949C0FEB} = {02EA681E-C7D8-13C7-8484-4AC65E1B71E8}
+		{96384857-88D4-4282-8EFD-FE8FCB0319B7} = {692AFF14-3A57-47D8-912F-093EC8F561C4}
+		{C1AE3004-853A-4CCF-9099-AE919C6121C8} = {96384857-88D4-4282-8EFD-FE8FCB0319B7}
 	EndGlobalSection
 	GlobalSection(ExtensibilityGlobals) = postSolution
 		SolutionGuid = {9B6E4921-8EBA-487D-A098-3E473A0EAC64}

CITATION.cff

@@ -1,8 +1,8 @@
 cff-version: 1.2.0
 message: "If you use BEXIS2 in your research, please cite it using the following metadata."
 title: "BEXIS2"
-version: 4.1.0
-date-released: 15.08.2025
+version: 4.2.1
+date-released: 05.01.2026
 authors:
 - family-names: "Zander"
   given-names: "Franziska"

Components/AAA/BExIS.Security.Services/Subjects/UserManager.cs

@@ -125,6 +125,13 @@ public Task<bool> DeleteByIdAsync(long userId)
                 //return Task.FromException(new Exception());
                 return Task.FromResult(false);
 
+            // Logins
+            var loginsRepository = _guow.GetRepository<Login>();
+            foreach (var login in loginsRepository.Get(l => l.User.Id == userId))
+            {
+                loginsRepository.Delete(login);
+            }
+
             // EntityPermissions
             var entityPermissionRepository = _guow.GetRepository<EntityPermission>();
             foreach (var entityPermission in entityPermissionRepository.Get(e => e.Subject.Id == userId))

Components/AAA/BExIS.Security.Services/Utilities/MessageHelper.cs

@@ -160,7 +160,7 @@ public static string GetSendRequestMessage(long datasetid, string title, string
 
         public static string GetWithdrawRequestHeader(long datasetid, string requester)
         {
-            return $"Data request from {requester} for dataset with ID <b>{datasetid}</b> withdrawn";
+            return $"Data request from {requester} for dataset with ID {datasetid} withdrawn";
         }
 
         public static string GetWithdrawRequestMessage(long datasetid, string title, string requester)
@@ -173,7 +173,7 @@ public static string GetWithdrawRequestMessage(long datasetid, string title, str
 
         public static string GetAcceptRequestHeader(long datasetid, string requester)
         {
-            return $"Data request from {requester} for dataset with ID <b>{datasetid}</b> granted";
+            return $"Data request from {requester} for dataset with ID {datasetid} granted";
         }
 
         public static string GetAcceptRequestMessage(long datasetid, string title)
@@ -186,7 +186,7 @@ public static string GetAcceptRequestMessage(long datasetid, string title)
 
         public static string GetRejectedRequestHeader(long datasetid, string requester)
         {
-            return $"Data request from {requester} for dataset with ID <b>{datasetid}</b> rejected";
+            return $"Data request from {requester} for dataset with ID {datasetid} rejected";
         }
 
         public static string GetRejectedRequestMessage(long datasetid, string title)
@@ -342,7 +342,7 @@ public static string GetUnsetPublicMessage(string userName, long datasetid, stri
 
         public static string GetPushApiStoreHeader(long datasetid, string title)
         {
-            return $"Receive data for dataset '{title}' with ID <b>{datasetid}</b>";
+            return $"Receive data for dataset '{title}' with ID {datasetid}";
         }
 
         public static string GetPushApiStoreMessage(long datasetid, string userName, string[] errors = null)
@@ -386,7 +386,7 @@ public static string GetPushApiValidateMessage(long datasetid, string userName,
 
         public static string GetPushApiUploadSuccessHeader(long datasetid, string title)
         {
-            return $"Upload <b>completed</b> for dataset: '{title}' with ID <b>{datasetid}</b>";
+            return $"Upload completed for dataset: '{title}' with ID {datasetid}";
         }
 
         public static string GetPushApiUploadSuccessMessage(long datasetid, string userName)
@@ -396,7 +396,7 @@ public static string GetPushApiUploadSuccessMessage(long datasetid, string userN
 
         public static string GetPushApiUploadFailHeader(long datasetid, string title)
         {
-            return $"Upload  was not successful for dataset '{title}' with ID <b>{datasetid}</b>";
+            return $"Upload  was not successful for dataset '{title}' with ID {datasetid}";
         }
 
         public static string GetPushApiUploadFailMessage(long datasetid, string userName, string[] errors)

Components/App/BExIS.App.Bootstrap/Attributes/BExISAuthorizeAttribute.cs

@@ -4,12 +4,12 @@
 using BExIS.Security.Services.Authorization;
 using BExIS.Security.Services.Objects;
 using BExIS.Security.Services.Subjects;
-using BExIS.Utils.Config;
 using System;
 using System.Linq;
 using System.Net;
 using System.Web;
 using System.Web.Mvc;
+using BExIS.Utils.Config;
 
 namespace BExIS.App.Bootstrap.Attributes
 {
@@ -50,9 +50,6 @@ public override void OnAuthorization(AuthorizationContext filterContext)
                                 if (!featurePermissionManager.HasAccessAsync(user.Id, feature.Id).Result)
                                 {
                                     filterContext.SetResponse(HttpStatusCode.Forbidden);
-
-
-
                                 }
 
                                 // update jwt cookie

Components/App/BExIS.App.Bootstrap/Attributes/CustomValidateAntiForgeryToken.cs

@@ -0,0 +1,36 @@
+using BExIS.Security.Entities.Requests;
+using System.Web.Helpers;
+using System.Web.Mvc;
+
+namespace BExIS.App.Bootstrap.Attributes
+{
+    public class CustomValidateAntiForgeryToken: FilterAttribute, IAuthorizationFilter
+    {
+        public void OnAuthorization(AuthorizationContext filterContext)
+        {
+            var request = filterContext.HttpContext.Request;
+
+            if (filterContext.HttpContext.Request.HttpMethod == "POST")
+            {
+                var cookieToken = request.Cookies[AntiForgeryConfig.CookieName]?.Value;
+
+                // check for token in form data
+                var formToken = request.Form["__RequestVerificationToken"];
+
+                // check header for post from javascript
+
+                if (formToken==null)
+                {
+                    formToken = request.Headers["__RequestVerificationToken"];
+                }
+
+                if (cookieToken != null)
+                {
+                    AntiForgery.Validate(cookieToken, formToken);
+                }
+
+                //AntiForgery.Validate();
+            }
+        }
+    }
+}