eclipse-sailing-analytics/sailing-analytics
1
0 Fork 0
mirror of https://github.com/eclipse-sailing-analytics/sailing-analytics.git synced 2026-11-12 05:35:31 +00:00
Code Activity
46,614 Commits 292 Branches 303 Tags
049a840aec5c9e79d64cedb4ee2da96e7bd07805
Commit Graph
176 Commits
Author SHA1 Message Date
Kai Börnert 049a840aec roleDTO serialisation fix 2018-11-28 13:48:20 +01:00
Kai Börnert 00b9193818 fixes for serialisation 2018-11-28 13:33:16 +01:00
Kai Börnert 5d9d18bfa6 fixes for gwt compile 2018-11-28 10:06:02 +01:00
Kai Börnert 3d49644443 cleaned up dtos a little 2018-11-28 09:49:33 +01:00
Kai Börnert 9774654679 split of client and server side data classes 2018-11-28 08:22:47 +01:00
Kai Börnert 1fe28a232d wip for defaultTenant switching 2018-11-21 17:26:28 +01:00
Steffen Jacobs 8e243f6a05 aligned ACL SecuredSecurityType with CHANGE_OWNERSHIP action by creating 
a CHANGE_ACL DefaultAction
 2018-11-14 14:47:49 +01:00
Benjamin Barth 8d60318378 Merge branch 'permission-vertical' of 
ssh://trac@sapsailing.com/home/trac/git into permission-vertical

Conflicts:
	java/com.sap.sse.security.ui/src/main/java/com/sap/sse/security/ui/shared/UserDTO.java
 2018-11-13 09:22:28 +01:00
Steffen Schäfer ccbd65b0a5 Using WildcardPermissionBuilder to construct complex permissions instead 
of hard-coding permission strings
 2018-11-12 15:03:16 +01:00
Steffen Schäfer ab86ca0d01 Added a builder to not need to construct complex permissions (e.g. 
multiple types, or wildcard type) as String
 2018-11-12 15:03:13 +01:00
Steffen Schäfer 9f8aafd5a6 An empty part is equivalent to the wildcard token 2018-11-12 14:39:12 +01:00
Steffen Schäfer 835f169390 Implemented meta permission checks when granting users additional 
permissions (not finished yet)
 2018-11-12 11:12:41 +01:00
Kai Börnert a16965897d user a defaultTenant that is configured per server for each user 2018-11-09 09:44:45 +01:00
Benjamin Barth 635b3156b9 Wrapped security information into separate data transfer object 2018-11-08 12:20:51 +01:00
Steffen Jacobs 197e469ad9 added convenience method to get WildcardPermissions for multiple actions 2018-11-06 14:18:54 +01:00
Benjamin Barth 5e3896ece9 Introduced new DTO for role definitions including ownership and ACL info 2018-11-02 13:41:49 +01:00
Kai Börnert 020ed3ff43 changed deviceconfigurations to use servername + configname for type 
relative identifiers
 2018-10-30 14:09:41 +01:00
Steffen Schäfer 5c930a53e9 Fixed permission check for the case when we have SecurityUser instances 
of different types
 2018-10-25 11:58:56 +02:00
Benjamin Barth a48e64151f Adjusted custom field serializers for UserDTOs / minor code formattings 2018-10-25 10:11:17 +02:00
Kai Börnert a77c8a83f3 moved NamedDTO and SecurityObject to be visible by sse, extracted 
SecurityDTOUtil
 2018-10-22 17:29:43 +02:00
Steffen Schäfer 982edf5193 Streamlined permission checks in AdminConsole to allow access to most 
users that have the permission to mutate at least one possible instance
(which does not mean there is such an instance yet). Most UIs should
filter the contents based on read permissions (some are already
implemented, others will follow) which means users could see an empty
list instead.
 2018-10-22 12:55:00 +02:00
Steffen Schäfer 9c3aacbf76 Fixed PermissionChecker.hasUserAnyPermission to also match qualified 
roles if the check is not qualified for a specific ownership (this still
means, the user has permission for at least one possible instance)
 2018-10-22 12:54:54 +02:00
Steffen Schäfer 90f669d51a Fixed copy&paste bugs 2018-10-19 15:19:20 +02:00
Steffen Schäfer f9372f71a7 Initial implementation to check if a user has at least one required 
permission. This will be required for several permission checks in the
UI
 2018-10-19 15:19:17 +02:00
Steffen Schäfer ec5bb47124 Initial implementation for a server-side meta permission check in 
SecurityServiceImpl
 2018-10-19 15:19:15 +02:00
Steffen Schäfer 68961f842b Prototype implementation for wildcard permission checks (currently 
unused)
 2018-10-19 15:19:11 +02:00
Steffen Schäfer 8868004821 Using constants defined in WildcardPermission instead of hard-coded 
strings for special chars in permission strings constructed by
HasPermissionsImpl
 2018-10-19 15:19:10 +02:00
Kai Börnert ded8efaca7 added WithQualifiedObjectIdentifier to User and UserGroup 2018-10-19 10:07:50 +02:00
Steffen Schäfer 8faaf4e05c Added JavaDoc 2018-10-18 09:13:45 +02:00
Steffen Schäfer 06b5219596 Added explicit admin role check for user deletion 2018-10-17 14:52:33 +02:00
Steffen Schäfer 0a29d86f4a Code simplification 2018-10-17 14:52:32 +02:00
Kai Börnert d9d5863526 added ability to get the actual Type from a 
WithQualifiedObjectIdentifier
 2018-10-16 15:22:20 +02:00
Steffen Schäfer 0d9eb23316 The user role now implies permissions *:READ:*, *:UPDATE:*, *:DELETE:* 
in addition to *:CREATE:* which means, by default, users may do any
action for objects created by themselves.
 2018-10-16 11:22:38 +02:00
Kai Börnert 6ee2b64242 simplified user & group handing for most cases 2018-10-15 13:32:48 +02:00
Kai Börnert 8957643596 fix for PermissionChecker 2018-10-15 12:38:40 +02:00
Kai Börnert 000ac30a95 moved anonymous checks to PermissionChecker 2018-10-15 11:37:17 +02:00
Steffen Schäfer 4b539a405c Added CREATE_OBJECT check for the current server when creating objects 2018-10-12 09:31:20 +02:00
Steffen Schäfer e99083372f Removed trailing spaces 2018-10-11 18:02:51 +02:00
Kai Börnert 5a26fc46bb Merge branch 'bug4768' into permission-vertical 2018-10-11 17:43:17 +02:00
Kai Börnert 60c435cc73 permission-vertical added *:CREATE:* to the default UserRole upon 
initial creation
 2018-10-11 17:18:35 +02:00
Kai Börnert c08e8b4369 bug4768 added multiple parts that will explicitly set permissions, 
created an interface to allow most ownable objects to directly return
the QualifiedObjectIdentifier
 2018-10-10 13:16:16 +02:00
Axel Uhl 2da96b724c Merge remote-tracking branch 'server/permission-vertical' into permission-vertical 
Change-Id: I18927445a32e18ce60f95b056967b56cc62b7127
 2018-10-08 10:51:49 +02:00
Kai Börnert 5102fc8a94 bug4769 moved SERVER from SecuredDomainType to SecuredSecurityTypes, as 
it is an SSE concern
 2018-10-05 09:41:44 +02:00
Axel Uhl 944008ddac more security consistency for access control list 
Change-Id: I5fc9584d3c92e0b112974bd64ee3cda0bd5f47bc
 2018-09-28 17:04:57 +02:00
Steffen Schäfer 3731fb8a3b Updated project config for the current GWT Eclipse plugin 2018-09-28 13:19:40 +02:00
Axel Uhl ca4f740d75 bug4762: null is now a valid group to allow/deny permissions for in an ACL 
Change-Id: I03c484981094e852fa0ae6a6ec134e6297317bff
 2018-09-26 17:58:07 +02:00
Benjamin Barth a6e37f033c Code style / formatting changesand method name refactoring 2018-09-26 10:50:05 +02:00
Axel Uhl d2e3253cf0 use \ instead of _ for the encoding character, making sure that logical type names can have underscores in them 
Change-Id: I0b9710f986115e8a835c13aea78e2b8631d8334c
 2018-09-25 00:22:15 +02:00
Axel Uhl 43a17f6e9e compilable but untested version that obtains server info for client-side permission checks 
Change-Id: Ib70bb9283cce22a109199b43122009243bcede78
 2018-09-24 23:20:30 +02:00
Axel Uhl 6899c7869c some renames; using optional per-logical-type actions 
Change-Id: Ia68de601d563683eed24b65ae2af63e0f5239deb
 2018-09-24 22:45:43 +02:00