Commit Graph
201 Commits
Author SHA1 Message Date
Thomas Wiese 69707bb14f bug 4813: make sure that typerelativeidentifer is running trough
corresponding convert method on object creation
2018-12-12 13:21:41 +01:00
Thomas Wiese 534dca5186 bug 4813: clean method names in HasPermissions to distinguish between object or type relative identifers as parameter 2018-12-12 09:05:43 +01:00
Thomas Wiese bdb4b0e99e bug 4813: testing HasPermissions-methods that use identifer strategy 2018-12-11 18:22:44 +01:00
Thomas Wiese 67320fba63 bug 4813: cleanup 2018-12-11 15:04:54 +01:00
Thomas Wiese 5d57aaf53e bug 4813: handle RESULT_IMPORT_URL correctly 2018-12-11 15:00:28 +01:00
Thomas Wiese 082554e2ce bug4813: added javadocs 2018-12-10 11:00:34 +01:00
Thomas Wiese 82b6cd4a2f bug 4813: fixing getStringPermissionForObject to get typerelative
identifier by object
2018-12-07 21:33:16 +01:00
Thomas Wiese 09e0f12fbc bug 4813: use concrete object instead of typerelative identifier to
build QualifiedObjectIdentifiers by delegation to the identiferstrategy
of the permissions type
2018-12-07 14:09:57 +01:00
Thomas Wiese 8a662aa8d4 bug 4813: move SecuredDomainTypes for SwissTiming to swisstimingadapter 2018-12-07 08:25:27 +01:00
Thomas Wiese f27abc43c4 bug 4816: move permission CAN_IMPORT_MASTERDATA to SERVER_ACTIONS 2018-12-06 15:12:34 +01:00
Thomas Wiese 1d427a3f5c Merge branch 'permission-vertical' into bug4813
Conflicts:
	java/com.sap.sse.security.ui/src/main/java/com/sap/sse/security/ui/client/component/UserGroupManagementPanel.java
2018-12-06 14:32:05 +01:00
Thomas Wiese b965882121 bug 4813: add getPermissionForObject-method to accept domain object.
Setting the corresponding method based on
typerelativeObjetctIdentigfiers to deprecated.
Continued transition to type based id determination for
SecureDomainTypes SEVRER and MEDIA_TRACK.
2018-12-06 14:21:03 +01:00
Benjamin Barth a19efbd523 Fixed NPE during deserialization of AccessControlListDTO 2018-12-06 13:48:02 +01:00
Steffen Schaefer ecdc56a125 Simplified UserRole permissions 2018-12-06 13:36:37 +01:00
Thomas Wiese 669bcea2b4 bug 4813: remove generics from HasPermissions 2018-12-05 17:54:07 +01:00
Thomas Wiese cd2de0af7f bug 4813: implement WithID on DTOs for SecureDomainTypes with
ID-IdentifierStrategy.
2018-12-04 17:29:57 +01:00
Thomas Wiese 8c9e35c12d bug 4813: eleminate id factories in filter methods of security service 2018-12-04 16:27:07 +01:00
Thomas Wiese b2930b1b8e bug 4813: First draft for defining identifier strategy in HasPermissions
for SecuredDomainTypes and SecureSecurityTypes to hide complexity and
create a single point of responsibilty for identiferAsString-Logic.
2018-12-04 12:46:19 +01:00
Kai Börnert 986a531727 reimplemented missing hashcode and equals for usergroup 2018-11-30 15:51:04 +01:00
Steffen Jacobs 968dae3093 fixed issue where users in usergroups were not loaded correctly 2018-11-30 14:12:28 +01:00
Kai Börnert b9cfb77cdc replaced UserGroupWithSecurityDTO with UserGroupDTO and added required
Security information
2018-11-30 11:52:16 +01:00
Steffen Jacobs b783c9b99d Merge branch 'permission-vertical-split' of
ssh://trac@sapsailing.com/home/trac/git into permission-vertical-split

Conflicts:
	java/com.sap.sse.security.ui/src/main/java/com/sap/sse/security/ui/server/UserManagementServiceImpl.java
2018-11-29 17:45:33 +01:00
Kai Börnert 561a938a65 further restructuring of dto classes 2018-11-29 14:56:25 +01:00
Steffen Schaefer 85063ea7a2 Introduced new DTO for UserGroup with security info 2018-11-28 17:18:02 +01:00
Kai Börnert 1d5f1fc90b added ownerships for roles 2018-11-28 16:03:40 +01:00
Kai Börnert 049a840aec roleDTO serialisation fix 2018-11-28 13:48:20 +01:00
Kai Börnert 00b9193818 fixes for serialisation 2018-11-28 13:33:16 +01:00
Kai Börnert 5d9d18bfa6 fixes for gwt compile 2018-11-28 10:06:02 +01:00
Kai Börnert 3d49644443 cleaned up dtos a little 2018-11-28 09:49:33 +01:00
Kai Börnert 9774654679 split of client and server side data classes 2018-11-28 08:22:47 +01:00
Kai Börnert 1fe28a232d wip for defaultTenant switching 2018-11-21 17:26:28 +01:00
Steffen Jacobs 8e243f6a05 aligned ACL SecuredSecurityType with CHANGE_OWNERSHIP action by creating
a CHANGE_ACL DefaultAction
2018-11-14 14:47:49 +01:00
Benjamin Barth 8d60318378 Merge branch 'permission-vertical' of
ssh://trac@sapsailing.com/home/trac/git into permission-vertical

Conflicts:
	java/com.sap.sse.security.ui/src/main/java/com/sap/sse/security/ui/shared/UserDTO.java
2018-11-13 09:22:28 +01:00
Steffen Schäfer ccbd65b0a5 Using WildcardPermissionBuilder to construct complex permissions instead
of hard-coding permission strings
2018-11-12 15:03:16 +01:00
Steffen Schäfer ab86ca0d01 Added a builder to not need to construct complex permissions (e.g.
multiple types, or wildcard type) as String
2018-11-12 15:03:13 +01:00
Steffen Schäfer 9f8aafd5a6 An empty part is equivalent to the wildcard token 2018-11-12 14:39:12 +01:00
Steffen Schäfer 835f169390 Implemented meta permission checks when granting users additional
permissions (not finished yet)
2018-11-12 11:12:41 +01:00
Kai Börnert a16965897d user a defaultTenant that is configured per server for each user 2018-11-09 09:44:45 +01:00
Benjamin Barth 635b3156b9 Wrapped security information into separate data transfer object 2018-11-08 12:20:51 +01:00
Steffen Jacobs 197e469ad9 added convenience method to get WildcardPermissions for multiple actions 2018-11-06 14:18:54 +01:00
Benjamin Barth 5e3896ece9 Introduced new DTO for role definitions including ownership and ACL info 2018-11-02 13:41:49 +01:00
Kai Börnert 020ed3ff43 changed deviceconfigurations to use servername + configname for type
relative identifiers
2018-10-30 14:09:41 +01:00
Steffen Schäfer 5c930a53e9 Fixed permission check for the case when we have SecurityUser instances
of different types
2018-10-25 11:58:56 +02:00
Benjamin Barth a48e64151f Adjusted custom field serializers for UserDTOs / minor code formattings 2018-10-25 10:11:17 +02:00
Kai Börnert a77c8a83f3 moved NamedDTO and SecurityObject to be visible by sse, extracted
SecurityDTOUtil
2018-10-22 17:29:43 +02:00
Steffen Schäfer 982edf5193 Streamlined permission checks in AdminConsole to allow access to most
users that have the permission to mutate at least one possible instance
(which does not mean there is such an instance yet). Most UIs should
filter the contents based on read permissions (some are already
implemented, others will follow) which means users could see an empty
list instead.
2018-10-22 12:55:00 +02:00
Steffen Schäfer 9c3aacbf76 Fixed PermissionChecker.hasUserAnyPermission to also match qualified
roles if the check is not qualified for a specific ownership (this still
means, the user has permission for at least one possible instance)
2018-10-22 12:54:54 +02:00
Steffen Schäfer 90f669d51a Fixed copy&paste bugs 2018-10-19 15:19:20 +02:00
Steffen Schäfer f9372f71a7 Initial implementation to check if a user has at least one required
permission. This will be required for several permission checks in the
UI
2018-10-19 15:19:17 +02:00
Steffen Schäfer ec5bb47124 Initial implementation for a server-side meta permission check in
SecurityServiceImpl
2018-10-19 15:19:15 +02:00