Axel Uhl
83ddb13865
bug5048: integrated CrossDomainStorage with UserService; not tested yet...
2019-11-08 13:10:57 +01:00
Axel Uhl
d69bf17769
renamed sharedAcrossSubdomains to sharedAcrossSubdomainsOf
2019-11-05 23:52:16 +01:00
Axel Uhl
31f0e719f1
bug4903: introduce new system property security.sharedAcrossSubdomains and replicate through SecurityService
2019-11-05 18:07:36 +01:00
Steffen Jacobs
5df0972048
Merge branch 'bug5049'
2019-07-05 17:51:28 +02:00
Steffen Jacobs
c3f9bfc603
Revert "Bug 5080: adjusted meta permission checks when editing a user group to check against the granted permissions of the user instead the ones of the group to edit"
...
This reverts commit fac96ac247 .
2019-07-05 15:01:23 +02:00
Steffen Jacobs
8e9d9aea64
removed unnecessary uriInfo parameter from endpoints in RoleResource
2019-07-05 14:39:17 +02:00
Steffen Jacobs
0592cb16c9
Merge branch 'master' into bug5080
2019-07-05 13:58:32 +02:00
Steffen Jacobs
fac96ac247
Bug 5080: adjusted meta permission checks when editing a user group to
...
check against the granted permissions of the user instead the ones of
the group to edit
2019-07-05 13:54:50 +02:00
Axel Uhl
deaa6cbe6c
more whitespace-only changes
...
Change-Id: I1928d360a99be6a6b855605f02032d986a42b2c4
2019-07-03 15:43:04 +02:00
Axel Uhl
9548e9d7cb
whitespace changes only
...
Change-Id: I69a054e2fe317c472da6d6c4575799286b18fe32
2019-07-03 13:57:03 +02:00
Steffen Jacobs
aa56707ba6
Bug 5080: added meta permission check if the current user has all roles
...
implicated by a user group before allowing him to add a user (possibly
himself) to a user group
2019-06-27 14:19:08 +02:00
Steffen Jacobs
02b59ca833
Bug 5080: added convenience method to the SecurityService which calls
...
hasCurrentUserMetaPermissionsOfRoleDefinitionWithQualification for each
RoleDefinition in a set of RoleDefinitions.
2019-06-27 14:19:08 +02:00
Axel Uhl
82786a38ae
fixed initialization of AccessControlStore internal structures after initial load;
...
the userToOwnership and userGroupToOwnership structures weren't
correctly filled because of a missing call to
internalSetOwnershipAndMapUserAndUserGroupToOwnership for cleanly
updating the internal structures. This caused problems when deleting
users or groups in replication scenarios.
Change-Id: I656090242d40e9792a46835440eaf6865f3434a7
2019-06-27 00:24:29 +02:00
Axel Uhl
2d47fca207
bug5082: don't manage a session for unauthenticated subjects in GWT bundles
...
Change-Id: I8be9123b7f5fc3a0a1f6c96707fc383a8a006de1
2019-06-26 18:29:42 +02:00
Steffen Jacobs
36c10ebb72
Bug 4892: added missing meta permission check + fixed existing one
2019-06-25 20:43:27 +02:00
Steffen Schaefer
fa1f8873cc
Bug 4892: Removed redundant shiro config
2019-06-25 16:14:08 +02:00
Steffen Jacobs
49d3d9395c
Bug 4892: added meta permission check for adding a role to a usergroup +
...
adjusted ownership removal when deleting a usergroup
2019-06-24 12:43:34 +02:00
Steffen Schaefer
42c05bc80b
Merge branch 'master' into bug4892
...
Conflicts:
java/com.sap.sailing.www/release_notes_admin.html
2019-06-24 11:37:53 +02:00
Steffen Jacobs
2997dbb790
Bug 5049: added rule.html to index.html
2019-06-24 11:17:39 +02:00
Steffen Jacobs
2ba3b38c7e
Merge branch 'master' into bug5049
2019-06-24 11:11:44 +02:00
Steffen Schaefer
38162e4177
Bug 4892: Linked new UserGroup docs in index.html
2019-06-24 11:09:51 +02:00
Steffen Jacobs
1d0e29140a
Bug 4892: adjusted documentation of UserGroupResource in
...
webservices/api/usergroup.html
2019-06-21 16:27:32 +02:00
Steffen Jacobs
b456a1eb7d
Merge branch 'master' into bug4892
2019-06-21 15:56:31 +02:00
Steffen Schaefer
2a0f5cdca7
Merge branch 'master' into bug5047
2019-05-29 10:09:18 +02:00
Steffen Schaefer
b330981b40
Bug 5047: Simplified the various map and filter methods in
...
SecurityService by removing the redundant HasPermissions parameter. This
can now be obtained from the given WithQualifiedObjectIdentifier values.
2019-05-29 10:00:53 +02:00
Axel Uhl
89e8bef9c8
Revert "removed PluginNature from our OSGi bundles; they are not Eclipse plugins";
...
according to https://bugs.eclipse.org/bugs/show_bug.cgi?id=544977#c21 the
scenario of using the ManifestBuilder without setting the PluginNature is
not a supported scenario. Besides, it doesn't help to get rid of the new
Eclipse warning regarding non-exported packages.
This reverts commit 063484e29f .
2019-05-28 21:54:20 +02:00
Steffen Jacobs
37c0caaad2
Bug 4892: minor refactor in UserGroupResource
2019-05-28 19:33:57 +02:00
Steffen Jacobs
3d979cfb2a
Bgu 4892: adjusted PUT /usergroups/{groupId}/role/{roleId} to accept
...
json instead of FormParameter in UserGroupResource
2019-05-28 19:26:52 +02:00
Steffen Jacobs
1d42faad79
Merge branch 'bug5049' into bug4892
...
Conflicts:
java/com.sap.sse.security/resources/shiro.ini
java/com.sap.sse.security/src/com/sap/sse/security/jaxrs/api/RestApiApplication.java
2019-05-28 18:19:14 +02:00
Steffen Jacobs
821144e528
Bug 4892: extracted key constants from UserGroupResource
2019-05-28 18:14:08 +02:00
Steffen Jacobs
87713fc674
Bug 4892: use JSON body when creating new user groups via
...
UserGroupResource
2019-05-28 18:14:06 +02:00
Steffen Jacobs
3711762256
Bug 5049: adjusted deletion of roles to avoid orphaned ownerships.
2019-05-28 17:26:49 +02:00
Steffen Jacobs
5d79885d0d
Bug 5049: adjusted documentation of REST endpoints related to roles
...
according to changes in the previous commits.
2019-05-28 17:20:05 +02:00
Steffen Jacobs
4779d1a519
Bug 5049: extracted constants for roleId, roleName and permissions
2019-05-28 16:09:15 +02:00
Steffen Jacobs
aca242568d
Bug 5049: Adjusted RoleResource to work with JSONObjects in body when
...
HTTP PUT is used
2019-05-28 15:48:45 +02:00
Steffen Jacobs
e38e0072bf
Bug 5049: changed HTTP PUT to HTTP POST for creation of roles by name
2019-05-28 14:09:03 +02:00
Steffen Jacobs
88282d57e2
Bug 4892: used path parameters instead of FormParams whereever possible
...
in REST endpoints regarding user group management
2019-05-28 14:00:55 +02:00
Steffen Jacobs
f18562fb04
Merge branch 'master' into bug4892
2019-05-28 13:25:11 +02:00
Steffen Jacobs
e17658593d
Bug 5049: added REST endpoints to CREATE and DELETE role definitions
2019-05-28 13:13:08 +02:00
Steffen Jacobs
b3d77a6704
Bug 5049: introduced path parameters for /role REST endpoints
2019-05-28 12:58:44 +02:00
Steffen Jacobs
d48a3ac31d
Bug 5049: removed support for query parameters for /role rest endpoint
2019-05-28 12:50:25 +02:00
Steffen Jacobs
4c9598d849
Merge branch 'master' into bug5049
2019-05-28 11:25:17 +02:00
Axel Uhl
063484e29f
removed PluginNature from our OSGi bundles; they are not Eclipse plugins
2019-05-27 22:53:30 +02:00
Steffen Schaefer
d67ebae7b9
Merge branch 'master' into bug4892
2019-05-27 15:15:06 +02:00
Steffen Schaefer
1db9349d61
Merge branch 'master' into bug5049
2019-05-27 15:03:18 +02:00
Steffen Schaefer
958eacce9f
Bug 5049: Implemented meta permission check for removal of a permission
...
from a role
2019-05-27 15:03:01 +02:00
Steffen Schaefer
8e1191f185
Bug 5040: Implemented logging of AuthorizationExceptions in REST APIs
2019-05-27 12:58:29 +02:00
Steffen Schaefer
d17002208f
Merge branch 'master' into bug5040
2019-05-27 10:36:55 +02:00
Steffen Schaefer
9f965a9218
Bug 5040: Improved permission check in MasterDataResource and reduced
...
code duplication by introducing
SecurityService.checkCurrentUserServerPermission
2019-05-27 10:36:18 +02:00
Axel Uhl
e75d1b17b8
aftermath for d3698bc608: ConcurrentWeakHashMap cannot deal with null values; using dummy object instead
...
Change-Id: I2f3c892aed8e35ffc3efda098e1ff2d611250a48
2019-05-27 10:03:50 +02:00