Commit Graph
193 Commits
Author SHA1 Message Date
Steffen Schaefer 4eaa69cec4 Further reduced size of security relevant objects 2018-12-18 19:27:56 +01:00
Steffen Schaefer 43b0bca40a Removed unnecessary generic 2018-12-18 19:27:54 +01:00
Kai Börnert ac5597a621 added missing null check in equals 2018-12-18 18:35:51 +01:00
Kai Börnert 18df63ac5c added missing this in StrippedUserDTO 2018-12-18 14:03:54 +01:00
Steffen Schaefer aa16714fd5 Implemented custom serialization for UserImpl again. This should fix
deserialization of object cycles (UserImpl -> HashSet -> RoleImpl ->
UserImpl) where uninitialized objects are inserted into a HashSet.
2018-12-18 08:34:41 +01:00
Steffen Schaefer d46a8a7d7e Adjusted equals and hashCode implementations to conform to the
description in the JavaDocs. In addition this fixes potential problems
in the UI where we do not enforce a single instance pattern.
2018-12-17 18:00:05 +01:00
Benjamin Barth 3ec8c428f5 Integrated new user roles editor implementation to UserEditDialog 2018-12-17 16:38:32 +01:00
Kai Börnert e6cee2e365 wip for role associations 2018-12-13 17:01:30 +01:00
Benjamin Barth a19efbd523 Fixed NPE during deserialization of AccessControlListDTO 2018-12-06 13:48:02 +01:00
Steffen Schaefer ecdc56a125 Simplified UserRole permissions 2018-12-06 13:36:37 +01:00
Kai Börnert 986a531727 reimplemented missing hashcode and equals for usergroup 2018-11-30 15:51:04 +01:00
Steffen Jacobs 968dae3093 fixed issue where users in usergroups were not loaded correctly 2018-11-30 14:12:28 +01:00
Kai Börnert b9cfb77cdc replaced UserGroupWithSecurityDTO with UserGroupDTO and added required
Security information
2018-11-30 11:52:16 +01:00
Steffen Jacobs b783c9b99d Merge branch 'permission-vertical-split' of
ssh://trac@sapsailing.com/home/trac/git into permission-vertical-split

Conflicts:
	java/com.sap.sse.security.ui/src/main/java/com/sap/sse/security/ui/server/UserManagementServiceImpl.java
2018-11-29 17:45:33 +01:00
Kai Börnert 561a938a65 further restructuring of dto classes 2018-11-29 14:56:25 +01:00
Steffen Schaefer 85063ea7a2 Introduced new DTO for UserGroup with security info 2018-11-28 17:18:02 +01:00
Kai Börnert 1d5f1fc90b added ownerships for roles 2018-11-28 16:03:40 +01:00
Kai Börnert 049a840aec roleDTO serialisation fix 2018-11-28 13:48:20 +01:00
Kai Börnert 00b9193818 fixes for serialisation 2018-11-28 13:33:16 +01:00
Kai Börnert 5d9d18bfa6 fixes for gwt compile 2018-11-28 10:06:02 +01:00
Kai Börnert 3d49644443 cleaned up dtos a little 2018-11-28 09:49:33 +01:00
Kai Börnert 9774654679 split of client and server side data classes 2018-11-28 08:22:47 +01:00
Kai Börnert 1fe28a232d wip for defaultTenant switching 2018-11-21 17:26:28 +01:00
Steffen Jacobs 8e243f6a05 aligned ACL SecuredSecurityType with CHANGE_OWNERSHIP action by creating
a CHANGE_ACL DefaultAction
2018-11-14 14:47:49 +01:00
Benjamin Barth 8d60318378 Merge branch 'permission-vertical' of
ssh://trac@sapsailing.com/home/trac/git into permission-vertical

Conflicts:
	java/com.sap.sse.security.ui/src/main/java/com/sap/sse/security/ui/shared/UserDTO.java
2018-11-13 09:22:28 +01:00
Steffen Schäfer ccbd65b0a5 Using WildcardPermissionBuilder to construct complex permissions instead
of hard-coding permission strings
2018-11-12 15:03:16 +01:00
Steffen Schäfer ab86ca0d01 Added a builder to not need to construct complex permissions (e.g.
multiple types, or wildcard type) as String
2018-11-12 15:03:13 +01:00
Steffen Schäfer 9f8aafd5a6 An empty part is equivalent to the wildcard token 2018-11-12 14:39:12 +01:00
Steffen Schäfer 835f169390 Implemented meta permission checks when granting users additional
permissions (not finished yet)
2018-11-12 11:12:41 +01:00
Kai Börnert a16965897d user a defaultTenant that is configured per server for each user 2018-11-09 09:44:45 +01:00
Benjamin Barth 635b3156b9 Wrapped security information into separate data transfer object 2018-11-08 12:20:51 +01:00
Steffen Jacobs 197e469ad9 added convenience method to get WildcardPermissions for multiple actions 2018-11-06 14:18:54 +01:00
Benjamin Barth 5e3896ece9 Introduced new DTO for role definitions including ownership and ACL info 2018-11-02 13:41:49 +01:00
Kai Börnert 020ed3ff43 changed deviceconfigurations to use servername + configname for type
relative identifiers
2018-10-30 14:09:41 +01:00
Steffen Schäfer 5c930a53e9 Fixed permission check for the case when we have SecurityUser instances
of different types
2018-10-25 11:58:56 +02:00
Benjamin Barth a48e64151f Adjusted custom field serializers for UserDTOs / minor code formattings 2018-10-25 10:11:17 +02:00
Kai Börnert a77c8a83f3 moved NamedDTO and SecurityObject to be visible by sse, extracted
SecurityDTOUtil
2018-10-22 17:29:43 +02:00
Steffen Schäfer 982edf5193 Streamlined permission checks in AdminConsole to allow access to most
users that have the permission to mutate at least one possible instance
(which does not mean there is such an instance yet). Most UIs should
filter the contents based on read permissions (some are already
implemented, others will follow) which means users could see an empty
list instead.
2018-10-22 12:55:00 +02:00
Steffen Schäfer 9c3aacbf76 Fixed PermissionChecker.hasUserAnyPermission to also match qualified
roles if the check is not qualified for a specific ownership (this still
means, the user has permission for at least one possible instance)
2018-10-22 12:54:54 +02:00
Steffen Schäfer 90f669d51a Fixed copy&paste bugs 2018-10-19 15:19:20 +02:00
Steffen Schäfer f9372f71a7 Initial implementation to check if a user has at least one required
permission. This will be required for several permission checks in the
UI
2018-10-19 15:19:17 +02:00
Steffen Schäfer ec5bb47124 Initial implementation for a server-side meta permission check in
SecurityServiceImpl
2018-10-19 15:19:15 +02:00
Steffen Schäfer 68961f842b Prototype implementation for wildcard permission checks (currently
unused)
2018-10-19 15:19:11 +02:00
Steffen Schäfer 8868004821 Using constants defined in WildcardPermission instead of hard-coded
strings for special chars in permission strings constructed by
HasPermissionsImpl
2018-10-19 15:19:10 +02:00
Kai Börnert ded8efaca7 added WithQualifiedObjectIdentifier to User and UserGroup 2018-10-19 10:07:50 +02:00
Steffen Schäfer 8faaf4e05c Added JavaDoc 2018-10-18 09:13:45 +02:00
Steffen Schäfer 06b5219596 Added explicit admin role check for user deletion 2018-10-17 14:52:33 +02:00
Steffen Schäfer 0a29d86f4a Code simplification 2018-10-17 14:52:32 +02:00
Kai Börnert d9d5863526 added ability to get the actual Type from a
WithQualifiedObjectIdentifier
2018-10-16 15:22:20 +02:00
Steffen Schäfer 0d9eb23316 The user role now implies permissions *:READ:*, *:UPDATE:*, *:DELETE:*
in addition to *:CREATE:* which means, by default, users may do any
action for objects created by themselves.
2018-10-16 11:22:38 +02:00