- started new migration history (which removed some wrong shadow props)

- removed asset connected props

- create custom project no longer uses assets when frontend sends some

- fixed issue where some custom asset files are returned multiple times (in the same list) by the api

- moved some permission checks closer to method entry point

- forgot to add file worker
- renamed syndrom context (old) to yapex context
- renamed column CanReleaseExercises to CanManageExerciseReleases in GroupRolePermissions

- renamed schedulers to workers

- formatting

- changed get all asset in exercise editor to take the exerciseId because we want the files from all exercises (where the user has access to)

- removed file asset references file path

- fixes issue where everyone can see the members of a group
- changed check group permission to be a task (async)

- some cleanup

- fixed that managing custom test files was still possible even if the release was finished (or time was up)

- added x-frame option deny (in case static files are served) to deny embedding in iframes
- added app configuration to enable secure flagged cookies

  - TODO check assessment schedulers
- fixed issue where just run program always used the old editor content and not the subsequent editor (after a release was finished)

  - normal test assets
  - submit test assets
- do exercise submit test assets working

  - do exercise site
  - exercise editor
  - tutor view
- added app setting to enable/disable init controller

- the basic structure is ensured
  - for new and new external (ostepu)  upload dirs are created

- owner can always lock exercise even if he has no group permission
- we now send back the owner for the exercises (overview)
- some auto formatting

The file content is hidden from the user (empty file is displayed) and is readonly but the file name is visible. If this option is checked it overwrites the readonly option. If you change from hidden to visible to user will get the real file content. If you change from visible to hidden the user will get a blank file. The user file (with old content) will not get touched/updated only all backend calls will return the blank file.

  - exercise and dependend entities cannot be changed