Benjamin Barth
a19efbd523
Fixed NPE during deserialization of AccessControlListDTO
2018-12-06 13:48:02 +01:00
Steffen Schaefer
ecdc56a125
Simplified UserRole permissions
2018-12-06 13:36:37 +01:00
Kai Börnert
986a531727
reimplemented missing hashcode and equals for usergroup
2018-11-30 15:51:04 +01:00
Steffen Jacobs
968dae3093
fixed issue where users in usergroups were not loaded correctly
2018-11-30 14:12:28 +01:00
Kai Börnert
b9cfb77cdc
replaced UserGroupWithSecurityDTO with UserGroupDTO and added required
...
Security information
2018-11-30 11:52:16 +01:00
Steffen Jacobs
b783c9b99d
Merge branch 'permission-vertical-split' of
...
ssh://trac@sapsailing.com/home/trac/git into permission-vertical-split
Conflicts:
java/com.sap.sse.security.ui/src/main/java/com/sap/sse/security/ui/server/UserManagementServiceImpl.java
2018-11-29 17:45:33 +01:00
Kai Börnert
561a938a65
further restructuring of dto classes
2018-11-29 14:56:25 +01:00
Steffen Schaefer
85063ea7a2
Introduced new DTO for UserGroup with security info
2018-11-28 17:18:02 +01:00
Kai Börnert
1d5f1fc90b
added ownerships for roles
2018-11-28 16:03:40 +01:00
Kai Börnert
049a840aec
roleDTO serialisation fix
2018-11-28 13:48:20 +01:00
Kai Börnert
00b9193818
fixes for serialisation
2018-11-28 13:33:16 +01:00
Kai Börnert
5d9d18bfa6
fixes for gwt compile
2018-11-28 10:06:02 +01:00
Kai Börnert
3d49644443
cleaned up dtos a little
2018-11-28 09:49:33 +01:00
Kai Börnert
9774654679
split of client and server side data classes
2018-11-28 08:22:47 +01:00
Kai Börnert
1fe28a232d
wip for defaultTenant switching
2018-11-21 17:26:28 +01:00
Steffen Jacobs
8e243f6a05
aligned ACL SecuredSecurityType with CHANGE_OWNERSHIP action by creating
...
a CHANGE_ACL DefaultAction
2018-11-14 14:47:49 +01:00
Benjamin Barth
8d60318378
Merge branch 'permission-vertical' of
...
ssh://trac@sapsailing.com/home/trac/git into permission-vertical
Conflicts:
java/com.sap.sse.security.ui/src/main/java/com/sap/sse/security/ui/shared/UserDTO.java
2018-11-13 09:22:28 +01:00
Steffen Schäfer
ccbd65b0a5
Using WildcardPermissionBuilder to construct complex permissions instead
...
of hard-coding permission strings
2018-11-12 15:03:16 +01:00
Steffen Schäfer
ab86ca0d01
Added a builder to not need to construct complex permissions (e.g.
...
multiple types, or wildcard type) as String
2018-11-12 15:03:13 +01:00
Steffen Schäfer
9f8aafd5a6
An empty part is equivalent to the wildcard token
2018-11-12 14:39:12 +01:00
Steffen Schäfer
835f169390
Implemented meta permission checks when granting users additional
...
permissions (not finished yet)
2018-11-12 11:12:41 +01:00
Kai Börnert
a16965897d
user a defaultTenant that is configured per server for each user
2018-11-09 09:44:45 +01:00
Benjamin Barth
635b3156b9
Wrapped security information into separate data transfer object
2018-11-08 12:20:51 +01:00
Steffen Jacobs
197e469ad9
added convenience method to get WildcardPermissions for multiple actions
2018-11-06 14:18:54 +01:00
Benjamin Barth
5e3896ece9
Introduced new DTO for role definitions including ownership and ACL info
2018-11-02 13:41:49 +01:00
Kai Börnert
020ed3ff43
changed deviceconfigurations to use servername + configname for type
...
relative identifiers
2018-10-30 14:09:41 +01:00
Steffen Schäfer
5c930a53e9
Fixed permission check for the case when we have SecurityUser instances
...
of different types
2018-10-25 11:58:56 +02:00
Benjamin Barth
a48e64151f
Adjusted custom field serializers for UserDTOs / minor code formattings
2018-10-25 10:11:17 +02:00
Kai Börnert
a77c8a83f3
moved NamedDTO and SecurityObject to be visible by sse, extracted
...
SecurityDTOUtil
2018-10-22 17:29:43 +02:00
Steffen Schäfer
982edf5193
Streamlined permission checks in AdminConsole to allow access to most
...
users that have the permission to mutate at least one possible instance
(which does not mean there is such an instance yet). Most UIs should
filter the contents based on read permissions (some are already
implemented, others will follow) which means users could see an empty
list instead.
2018-10-22 12:55:00 +02:00
Steffen Schäfer
9c3aacbf76
Fixed PermissionChecker.hasUserAnyPermission to also match qualified
...
roles if the check is not qualified for a specific ownership (this still
means, the user has permission for at least one possible instance)
2018-10-22 12:54:54 +02:00
Steffen Schäfer
90f669d51a
Fixed copy&paste bugs
2018-10-19 15:19:20 +02:00
Steffen Schäfer
f9372f71a7
Initial implementation to check if a user has at least one required
...
permission. This will be required for several permission checks in the
UI
2018-10-19 15:19:17 +02:00
Steffen Schäfer
ec5bb47124
Initial implementation for a server-side meta permission check in
...
SecurityServiceImpl
2018-10-19 15:19:15 +02:00
Steffen Schäfer
68961f842b
Prototype implementation for wildcard permission checks (currently
...
unused)
2018-10-19 15:19:11 +02:00
Steffen Schäfer
8868004821
Using constants defined in WildcardPermission instead of hard-coded
...
strings for special chars in permission strings constructed by
HasPermissionsImpl
2018-10-19 15:19:10 +02:00
Kai Börnert
ded8efaca7
added WithQualifiedObjectIdentifier to User and UserGroup
2018-10-19 10:07:50 +02:00
Steffen Schäfer
8faaf4e05c
Added JavaDoc
2018-10-18 09:13:45 +02:00
Steffen Schäfer
06b5219596
Added explicit admin role check for user deletion
2018-10-17 14:52:33 +02:00
Steffen Schäfer
0a29d86f4a
Code simplification
2018-10-17 14:52:32 +02:00
Kai Börnert
d9d5863526
added ability to get the actual Type from a
...
WithQualifiedObjectIdentifier
2018-10-16 15:22:20 +02:00
Steffen Schäfer
0d9eb23316
The user role now implies permissions *:READ:*, *:UPDATE:*, *:DELETE:*
...
in addition to *:CREATE:* which means, by default, users may do any
action for objects created by themselves.
2018-10-16 11:22:38 +02:00
Kai Börnert
6ee2b64242
simplified user & group handing for most cases
2018-10-15 13:32:48 +02:00
Kai Börnert
8957643596
fix for PermissionChecker
2018-10-15 12:38:40 +02:00
Kai Börnert
000ac30a95
moved anonymous checks to PermissionChecker
2018-10-15 11:37:17 +02:00
Steffen Schäfer
4b539a405c
Added CREATE_OBJECT check for the current server when creating objects
2018-10-12 09:31:20 +02:00
Steffen Schäfer
e99083372f
Removed trailing spaces
2018-10-11 18:02:51 +02:00
Kai Börnert
5a26fc46bb
Merge branch 'bug4768' into permission-vertical
2018-10-11 17:43:17 +02:00
Kai Börnert
60c435cc73
permission-vertical added *:CREATE:* to the default UserRole upon
...
initial creation
2018-10-11 17:18:35 +02:00
Kai Börnert
c08e8b4369
bug4768 added multiple parts that will explicitly set permissions,
...
created an interface to allow most ownable objects to directly return
the QualifiedObjectIdentifier
2018-10-10 13:16:16 +02:00