eclipse-sailing-analytics/sailing-analytics
1
0 Fork 0
mirror of https://github.com/eclipse-sailing-analytics/sailing-analytics.git synced 2026-10-01 01:44:08 +00:00
Code Activity

Bug 4992: added migration code for adding the

Browse Source 
PERMISSION_ASSOCIATION:READ and ROLE_ASSOCIATION_READ permissions for
the anonymous user group via ACL
This commit is contained in:
Steffen Jacobs committed 2019-04-29 16:39:37 +02:00
1 parent 1838a0e82a
commit 08632c57ca
1 file changed
+9
Download Patch File Download Diff File Expand all files Collapse all files
java/com.sap.sse.security/src/com/sap/sse/security/impl/Activator.java
+9
View File
@@ -23,6 +23,7 @@ import com.sap.sse.security.SecurityService;
import com.sap.sse.security.UsernamePasswordRealm;
import com.sap.sse.security.interfaces.AccessControlStore;
import com.sap.sse.security.interfaces.UserStore;
import com.sap.sse.security.shared.HasPermissions.DefaultActions;
import com.sap.sse.security.shared.HasPermissionsProvider;
import com.sap.sse.security.shared.QualifiedObjectIdentifier;
import com.sap.sse.security.shared.RoleDefinition;
@@ -223,6 +224,10 @@ public class Activator implements BundleActivator {
QualifiedObjectIdentifier associationQualifiedIdentifier = SecuredSecurityTypes.ROLE_ASSOCIATION
.getQualifiedObjectIdentifier(associationTypeIdentifier);
securityService.migrateOwnership(associationQualifiedIdentifier, associationTypeIdentifier.toString());
if (securityService.isInitialOrMigration()) {
securityService.addToAccessControlList(associationQualifiedIdentifier,
securityService.getUserGroup(null), DefaultActions.READ.name());
}
}
for (WildcardPermission permission : user.getPermissions()) {
securityService.migratePermission(user, permission, this::getPermissionReplacement);
@@ -231,6 +236,10 @@ public class Activator implements BundleActivator {
QualifiedObjectIdentifier associationQualifiedIdentifier = SecuredSecurityTypes.PERMISSION_ASSOCIATION
.getQualifiedObjectIdentifier(associationTypeIdentifier);
securityService.migrateOwnership(associationQualifiedIdentifier, associationTypeIdentifier.toString());
if (securityService.isInitialOrMigration()) {
securityService.addToAccessControlList(associationQualifiedIdentifier,
securityService.getUserGroup(null), DefaultActions.READ.name());
}
}
}