Thomas Wiese
69707bb14f
bug 4813: make sure that typerelativeidentifer is running trough
...
corresponding convert method on object creation
2018-12-12 13:21:41 +01:00
Thomas Wiese
534dca5186
bug 4813: clean method names in HasPermissions to distinguish between object or type relative identifers as parameter
2018-12-12 09:05:43 +01:00
Thomas Wiese
bdb4b0e99e
bug 4813: testing HasPermissions-methods that use identifer strategy
2018-12-11 18:22:44 +01:00
Thomas Wiese
67320fba63
bug 4813: cleanup
2018-12-11 15:04:54 +01:00
Thomas Wiese
5d57aaf53e
bug 4813: handle RESULT_IMPORT_URL correctly
2018-12-11 15:00:28 +01:00
Thomas Wiese
082554e2ce
bug4813: added javadocs
2018-12-10 11:00:34 +01:00
Thomas Wiese
82b6cd4a2f
bug 4813: fixing getStringPermissionForObject to get typerelative
...
identifier by object
2018-12-07 21:33:16 +01:00
Thomas Wiese
09e0f12fbc
bug 4813: use concrete object instead of typerelative identifier to
...
build QualifiedObjectIdentifiers by delegation to the identiferstrategy
of the permissions type
2018-12-07 14:09:57 +01:00
Thomas Wiese
8a662aa8d4
bug 4813: move SecuredDomainTypes for SwissTiming to swisstimingadapter
2018-12-07 08:25:27 +01:00
Thomas Wiese
f27abc43c4
bug 4816: move permission CAN_IMPORT_MASTERDATA to SERVER_ACTIONS
2018-12-06 15:12:34 +01:00
Thomas Wiese
1d427a3f5c
Merge branch 'permission-vertical' into bug4813
...
Conflicts:
java/com.sap.sse.security.ui/src/main/java/com/sap/sse/security/ui/client/component/UserGroupManagementPanel.java
2018-12-06 14:32:05 +01:00
Thomas Wiese
b965882121
bug 4813: add getPermissionForObject-method to accept domain object.
...
Setting the corresponding method based on
typerelativeObjetctIdentigfiers to deprecated.
Continued transition to type based id determination for
SecureDomainTypes SEVRER and MEDIA_TRACK.
2018-12-06 14:21:03 +01:00
Benjamin Barth
a19efbd523
Fixed NPE during deserialization of AccessControlListDTO
2018-12-06 13:48:02 +01:00
Steffen Schaefer
ecdc56a125
Simplified UserRole permissions
2018-12-06 13:36:37 +01:00
Thomas Wiese
669bcea2b4
bug 4813: remove generics from HasPermissions
2018-12-05 17:54:07 +01:00
Thomas Wiese
cd2de0af7f
bug 4813: implement WithID on DTOs for SecureDomainTypes with
...
ID-IdentifierStrategy.
2018-12-04 17:29:57 +01:00
Thomas Wiese
8c9e35c12d
bug 4813: eleminate id factories in filter methods of security service
2018-12-04 16:27:07 +01:00
Thomas Wiese
b2930b1b8e
bug 4813: First draft for defining identifier strategy in HasPermissions
...
for SecuredDomainTypes and SecureSecurityTypes to hide complexity and
create a single point of responsibilty for identiferAsString-Logic.
2018-12-04 12:46:19 +01:00
Kai Börnert
986a531727
reimplemented missing hashcode and equals for usergroup
2018-11-30 15:51:04 +01:00
Steffen Jacobs
968dae3093
fixed issue where users in usergroups were not loaded correctly
2018-11-30 14:12:28 +01:00
Kai Börnert
b9cfb77cdc
replaced UserGroupWithSecurityDTO with UserGroupDTO and added required
...
Security information
2018-11-30 11:52:16 +01:00
Steffen Jacobs
b783c9b99d
Merge branch 'permission-vertical-split' of
...
ssh://trac@sapsailing.com/home/trac/git into permission-vertical-split
Conflicts:
java/com.sap.sse.security.ui/src/main/java/com/sap/sse/security/ui/server/UserManagementServiceImpl.java
2018-11-29 17:45:33 +01:00
Kai Börnert
561a938a65
further restructuring of dto classes
2018-11-29 14:56:25 +01:00
Steffen Schaefer
85063ea7a2
Introduced new DTO for UserGroup with security info
2018-11-28 17:18:02 +01:00
Kai Börnert
1d5f1fc90b
added ownerships for roles
2018-11-28 16:03:40 +01:00
Kai Börnert
049a840aec
roleDTO serialisation fix
2018-11-28 13:48:20 +01:00
Kai Börnert
00b9193818
fixes for serialisation
2018-11-28 13:33:16 +01:00
Kai Börnert
5d9d18bfa6
fixes for gwt compile
2018-11-28 10:06:02 +01:00
Kai Börnert
3d49644443
cleaned up dtos a little
2018-11-28 09:49:33 +01:00
Kai Börnert
9774654679
split of client and server side data classes
2018-11-28 08:22:47 +01:00
Kai Börnert
1fe28a232d
wip for defaultTenant switching
2018-11-21 17:26:28 +01:00
Steffen Jacobs
8e243f6a05
aligned ACL SecuredSecurityType with CHANGE_OWNERSHIP action by creating
...
a CHANGE_ACL DefaultAction
2018-11-14 14:47:49 +01:00
Benjamin Barth
8d60318378
Merge branch 'permission-vertical' of
...
ssh://trac@sapsailing.com/home/trac/git into permission-vertical
Conflicts:
java/com.sap.sse.security.ui/src/main/java/com/sap/sse/security/ui/shared/UserDTO.java
2018-11-13 09:22:28 +01:00
Steffen Schäfer
ccbd65b0a5
Using WildcardPermissionBuilder to construct complex permissions instead
...
of hard-coding permission strings
2018-11-12 15:03:16 +01:00
Steffen Schäfer
ab86ca0d01
Added a builder to not need to construct complex permissions (e.g.
...
multiple types, or wildcard type) as String
2018-11-12 15:03:13 +01:00
Steffen Schäfer
9f8aafd5a6
An empty part is equivalent to the wildcard token
2018-11-12 14:39:12 +01:00
Steffen Schäfer
835f169390
Implemented meta permission checks when granting users additional
...
permissions (not finished yet)
2018-11-12 11:12:41 +01:00
Kai Börnert
a16965897d
user a defaultTenant that is configured per server for each user
2018-11-09 09:44:45 +01:00
Benjamin Barth
635b3156b9
Wrapped security information into separate data transfer object
2018-11-08 12:20:51 +01:00
Steffen Jacobs
197e469ad9
added convenience method to get WildcardPermissions for multiple actions
2018-11-06 14:18:54 +01:00
Benjamin Barth
5e3896ece9
Introduced new DTO for role definitions including ownership and ACL info
2018-11-02 13:41:49 +01:00
Kai Börnert
020ed3ff43
changed deviceconfigurations to use servername + configname for type
...
relative identifiers
2018-10-30 14:09:41 +01:00
Steffen Schäfer
5c930a53e9
Fixed permission check for the case when we have SecurityUser instances
...
of different types
2018-10-25 11:58:56 +02:00
Benjamin Barth
a48e64151f
Adjusted custom field serializers for UserDTOs / minor code formattings
2018-10-25 10:11:17 +02:00
Kai Börnert
a77c8a83f3
moved NamedDTO and SecurityObject to be visible by sse, extracted
...
SecurityDTOUtil
2018-10-22 17:29:43 +02:00
Steffen Schäfer
982edf5193
Streamlined permission checks in AdminConsole to allow access to most
...
users that have the permission to mutate at least one possible instance
(which does not mean there is such an instance yet). Most UIs should
filter the contents based on read permissions (some are already
implemented, others will follow) which means users could see an empty
list instead.
2018-10-22 12:55:00 +02:00
Steffen Schäfer
9c3aacbf76
Fixed PermissionChecker.hasUserAnyPermission to also match qualified
...
roles if the check is not qualified for a specific ownership (this still
means, the user has permission for at least one possible instance)
2018-10-22 12:54:54 +02:00
Steffen Schäfer
90f669d51a
Fixed copy&paste bugs
2018-10-19 15:19:20 +02:00
Steffen Schäfer
f9372f71a7
Initial implementation to check if a user has at least one required
...
permission. This will be required for several permission checks in the
UI
2018-10-19 15:19:17 +02:00
Steffen Schäfer
ec5bb47124
Initial implementation for a server-side meta permission check in
...
SecurityServiceImpl
2018-10-19 15:19:15 +02:00