Commit Graph
185 Commits
Author SHA1 Message Date
Benjamin Barth a19efbd523 Fixed NPE during deserialization of AccessControlListDTO 2018-12-06 13:48:02 +01:00
Steffen Schaefer ecdc56a125 Simplified UserRole permissions 2018-12-06 13:36:37 +01:00
Kai Börnert 986a531727 reimplemented missing hashcode and equals for usergroup 2018-11-30 15:51:04 +01:00
Steffen Jacobs 968dae3093 fixed issue where users in usergroups were not loaded correctly 2018-11-30 14:12:28 +01:00
Kai Börnert b9cfb77cdc replaced UserGroupWithSecurityDTO with UserGroupDTO and added required
Security information
2018-11-30 11:52:16 +01:00
Steffen Jacobs b783c9b99d Merge branch 'permission-vertical-split' of
ssh://trac@sapsailing.com/home/trac/git into permission-vertical-split

Conflicts:
	java/com.sap.sse.security.ui/src/main/java/com/sap/sse/security/ui/server/UserManagementServiceImpl.java
2018-11-29 17:45:33 +01:00
Kai Börnert 561a938a65 further restructuring of dto classes 2018-11-29 14:56:25 +01:00
Steffen Schaefer 85063ea7a2 Introduced new DTO for UserGroup with security info 2018-11-28 17:18:02 +01:00
Kai Börnert 1d5f1fc90b added ownerships for roles 2018-11-28 16:03:40 +01:00
Kai Börnert 049a840aec roleDTO serialisation fix 2018-11-28 13:48:20 +01:00
Kai Börnert 00b9193818 fixes for serialisation 2018-11-28 13:33:16 +01:00
Kai Börnert 5d9d18bfa6 fixes for gwt compile 2018-11-28 10:06:02 +01:00
Kai Börnert 3d49644443 cleaned up dtos a little 2018-11-28 09:49:33 +01:00
Kai Börnert 9774654679 split of client and server side data classes 2018-11-28 08:22:47 +01:00
Kai Börnert 1fe28a232d wip for defaultTenant switching 2018-11-21 17:26:28 +01:00
Steffen Jacobs 8e243f6a05 aligned ACL SecuredSecurityType with CHANGE_OWNERSHIP action by creating
a CHANGE_ACL DefaultAction
2018-11-14 14:47:49 +01:00
Benjamin Barth 8d60318378 Merge branch 'permission-vertical' of
ssh://trac@sapsailing.com/home/trac/git into permission-vertical

Conflicts:
	java/com.sap.sse.security.ui/src/main/java/com/sap/sse/security/ui/shared/UserDTO.java
2018-11-13 09:22:28 +01:00
Steffen Schäfer ccbd65b0a5 Using WildcardPermissionBuilder to construct complex permissions instead
of hard-coding permission strings
2018-11-12 15:03:16 +01:00
Steffen Schäfer ab86ca0d01 Added a builder to not need to construct complex permissions (e.g.
multiple types, or wildcard type) as String
2018-11-12 15:03:13 +01:00
Steffen Schäfer 9f8aafd5a6 An empty part is equivalent to the wildcard token 2018-11-12 14:39:12 +01:00
Steffen Schäfer 835f169390 Implemented meta permission checks when granting users additional
permissions (not finished yet)
2018-11-12 11:12:41 +01:00
Kai Börnert a16965897d user a defaultTenant that is configured per server for each user 2018-11-09 09:44:45 +01:00
Benjamin Barth 635b3156b9 Wrapped security information into separate data transfer object 2018-11-08 12:20:51 +01:00
Steffen Jacobs 197e469ad9 added convenience method to get WildcardPermissions for multiple actions 2018-11-06 14:18:54 +01:00
Benjamin Barth 5e3896ece9 Introduced new DTO for role definitions including ownership and ACL info 2018-11-02 13:41:49 +01:00
Kai Börnert 020ed3ff43 changed deviceconfigurations to use servername + configname for type
relative identifiers
2018-10-30 14:09:41 +01:00
Steffen Schäfer 5c930a53e9 Fixed permission check for the case when we have SecurityUser instances
of different types
2018-10-25 11:58:56 +02:00
Benjamin Barth a48e64151f Adjusted custom field serializers for UserDTOs / minor code formattings 2018-10-25 10:11:17 +02:00
Kai Börnert a77c8a83f3 moved NamedDTO and SecurityObject to be visible by sse, extracted
SecurityDTOUtil
2018-10-22 17:29:43 +02:00
Steffen Schäfer 982edf5193 Streamlined permission checks in AdminConsole to allow access to most
users that have the permission to mutate at least one possible instance
(which does not mean there is such an instance yet). Most UIs should
filter the contents based on read permissions (some are already
implemented, others will follow) which means users could see an empty
list instead.
2018-10-22 12:55:00 +02:00
Steffen Schäfer 9c3aacbf76 Fixed PermissionChecker.hasUserAnyPermission to also match qualified
roles if the check is not qualified for a specific ownership (this still
means, the user has permission for at least one possible instance)
2018-10-22 12:54:54 +02:00
Steffen Schäfer 90f669d51a Fixed copy&paste bugs 2018-10-19 15:19:20 +02:00
Steffen Schäfer f9372f71a7 Initial implementation to check if a user has at least one required
permission. This will be required for several permission checks in the
UI
2018-10-19 15:19:17 +02:00
Steffen Schäfer ec5bb47124 Initial implementation for a server-side meta permission check in
SecurityServiceImpl
2018-10-19 15:19:15 +02:00
Steffen Schäfer 68961f842b Prototype implementation for wildcard permission checks (currently
unused)
2018-10-19 15:19:11 +02:00
Steffen Schäfer 8868004821 Using constants defined in WildcardPermission instead of hard-coded
strings for special chars in permission strings constructed by
HasPermissionsImpl
2018-10-19 15:19:10 +02:00
Kai Börnert ded8efaca7 added WithQualifiedObjectIdentifier to User and UserGroup 2018-10-19 10:07:50 +02:00
Steffen Schäfer 8faaf4e05c Added JavaDoc 2018-10-18 09:13:45 +02:00
Steffen Schäfer 06b5219596 Added explicit admin role check for user deletion 2018-10-17 14:52:33 +02:00
Steffen Schäfer 0a29d86f4a Code simplification 2018-10-17 14:52:32 +02:00
Kai Börnert d9d5863526 added ability to get the actual Type from a
WithQualifiedObjectIdentifier
2018-10-16 15:22:20 +02:00
Steffen Schäfer 0d9eb23316 The user role now implies permissions *:READ:*, *:UPDATE:*, *:DELETE:*
in addition to *:CREATE:* which means, by default, users may do any
action for objects created by themselves.
2018-10-16 11:22:38 +02:00
Kai Börnert 6ee2b64242 simplified user & group handing for most cases 2018-10-15 13:32:48 +02:00
Kai Börnert 8957643596 fix for PermissionChecker 2018-10-15 12:38:40 +02:00
Kai Börnert 000ac30a95 moved anonymous checks to PermissionChecker 2018-10-15 11:37:17 +02:00
Steffen Schäfer 4b539a405c Added CREATE_OBJECT check for the current server when creating objects 2018-10-12 09:31:20 +02:00
Steffen Schäfer e99083372f Removed trailing spaces 2018-10-11 18:02:51 +02:00
Kai Börnert 5a26fc46bb Merge branch 'bug4768' into permission-vertical 2018-10-11 17:43:17 +02:00
Kai Börnert 60c435cc73 permission-vertical added *:CREATE:* to the default UserRole upon
initial creation
2018-10-11 17:18:35 +02:00
Kai Börnert c08e8b4369 bug4768 added multiple parts that will explicitly set permissions,
created an interface to allow most ownable objects to directly return
the QualifiedObjectIdentifier
2018-10-10 13:16:16 +02:00