Credential Recovery are supposed to be related to persons, not logins.
Extend the tests to make sure that after the credential recovery is
accepted a reset password email is sent and fix authentication_policy
scripts to create a Credential Recovery related to the person.

https://tools.ietf.org/html/draft-ietf-httpbis-rfc6265bis-02

SameSite=None breaks the compatibility with some browser versions.
https://www.chromium.org/updates/same-site/incompatible-clients

We choose Lax and not Strict so that we can open links to ERP5 from
external applications and so that OAuth Logins work. Implementing the
"two cookies, one for read one for write" approach suggested in
https://tools.ietf.org/html/draft-ietf-httpbis-rfc6265bis-02#section-8.8.2
would be too big change at this point.

Allow instances to surcharge the SameSite value for some specific domains if needed,
by surcharging the ERP5Site_getAuthCookieSameSite script.

Keep compatibility with officejs apps

  This speed up once you have to use Manager Roles during annonymous payments.

/reviewed-on nexedi/erp5!1012

This tests had a test instance URL hardcoded and was working only on
this instance.

/reviewed-on !988

/reviewed-on nexedi/erp5!918

  Broken during some refactoring it was broken with the following traceback:

$ ./bin/tidstorage-repozo
No handlers could be found for logger "TIDStorage"
Traceback (most recent call last):
  File "/srv/slapgrid/slappart0/srv/runner/software/a0b0649fbf81fcec27b928dd72928d9f/bin/tidstorage_repozo", line 267, in <module>
    import Products.TIDStorage.repozo.repozo_tidstorage
  File "/srv/slapgrid/slappart0/srv/runner/software/a0b0649fbf81fcec27b928dd72928d9f/eggs/Products.TIDStorage-5.5.0-py2.7.egg/Products/T
IDStorage/__init__.py", line 30, in <module>
    import transaction_transaction
  File "/srv/slapgrid/slappart0/srv/runner/software/a0b0649fbf81fcec27b928dd72928d9f/eggs/Products.TIDStorage-5.5.0-py2.7.egg/Products/T
IDStorage/transaction_transaction.py", line 74, in <module>
    from Products.CMFActivity.ActivityTool import getServerAddress
  File "/srv/slapgrid/slappart0/srv/runner/software/a0b0649fbf81fcec27b928dd72928d9f/parts/erp5/product/CMFActivity/ActivityTool.py", li
ne 37, in <module>
    from Products.ERP5Type.Tool.BaseTool import BaseTool
  File "/srv/slapgrid/slappart0/srv/runner/software/a0b0649fbf81fcec27b928dd72928d9f/parts/erp5/product/ERP5Type/Tool/BaseTool.py", line
 34, in <module>
    from Products.ERP5Type.Core.Folder import Folder
  File "/srv/slapgrid/slappart0/srv/runner/software/a0b0649fbf81fcec27b928dd72928d9f/parts/erp5/product/ERP5Type/Core/__init__.py", line
 5, in <module>
    import Products.CMFCategory
  File "/srv/slapgrid/slappart0/srv/runner/software/a0b0649fbf81fcec27b928dd72928d9f/parts/erp5/product/CMFCategory/__init__.py", line 4
0, in <module>
    import Category, CategoryTool
  File "/srv/slapgrid/slappart0/srv/runner/software/a0b0649fbf81fcec27b928dd72928d9f/parts/erp5/product/CMFCategory/Category.py", line 4
0, in <module>
    from Products.ERP5Type.Core.Folder import Folder
  File "/srv/slapgrid/slappart0/srv/runner/software/a0b0649fbf81fcec27b928dd72928d9f/parts/erp5/product/ERP5Type/Core/Folder.py", line 1
668, in <module>
    from Products.CMFActivity.ActivityTool import getCurrentNode
ImportError: cannot import name getCurrentNode

   This allow the administrator define which Login portal types are searched.

Prefer to use Login_checkExistence from this Skins over the version on erp5_base.

Also extend tests to cover recently changes

This reverts commit 9eb3828d.

   This is an alternetive way to login using Certificates. Probably this format
   will evolve into use caucase;  however this only introduce some most basic features.

   Use Certificate Login for store login definitions

   Move test into the business template

  Please squash me in future.

  This optimisation aims reduce the potential activity leak when over launching accross multiple activities/transactions the updateSimulation.
  SubscriptionItem: Add a method to call updateSimulation from sqldict activities
    updateExpandableRootSimulation allow launch activities in a safer matter and have lower calls.

  If the user wants actitivites, it should create multiples StandardBT5ConfiguratorItems,
  This should accellerate Tests based on ERP5Configurator.

  This should be recoded, but it should speed up bootstrap of a site,
  as get modified objects are not called.

It the user don't have fully permission on the object (already changed state), this set will fail to check if source should be defined.

Ignore list is usefull when you have old business templates in production (used to include data for example) and test business templates on test environment (ie;: erp5_test_ui_core). This allow us control the dump to assert changes easily.

1 minute is too agressive for general use.

  The upgrade ordering seems buggy and requires to force reinstall it

This allow during a subscription process, create a user and them create all
documents using that user w/o rely on proxy roles (keeping good ownership
across the documents).

Without this (on slapos master ui) the redirection places value unquoted causing parser to fail later on when resolve {n.me}

This makes exponentially faster, if you have way too many security uids.

This makes exponentially faster, if you have way too many security uids.

When a script with manager proxy role is called from anonymous context, it include a HUGE list of security_uids, use unrestrictedSearchResults skips the unecessary usage of security_uids on catalog.

When a script with manager proxy role is called from anonymous context, it include a HUGE list of security_uids, use unrestrictedSearchResults skips the unecessary usage of security_uids on catalog.