Commit Graph
664 Commits
Author SHA1 Message Date
Axel Uhl 83ddb13865 bug5048: integrated CrossDomainStorage with UserService; not tested yet... 2019-11-08 13:10:57 +01:00
Axel Uhl d69bf17769 renamed sharedAcrossSubdomains to sharedAcrossSubdomainsOf 2019-11-05 23:52:16 +01:00
Axel Uhl 31f0e719f1 bug4903: introduce new system property security.sharedAcrossSubdomains and replicate through SecurityService 2019-11-05 18:07:36 +01:00
Steffen Jacobs 5df0972048 Merge branch 'bug5049' 2019-07-05 17:51:28 +02:00
Steffen Jacobs c3f9bfc603 Revert "Bug 5080: adjusted meta permission checks when editing a user group to check against the granted permissions of the user instead the ones of the group to edit"
This reverts commit fac96ac247.
2019-07-05 15:01:23 +02:00
Steffen Jacobs 8e9d9aea64 removed unnecessary uriInfo parameter from endpoints in RoleResource 2019-07-05 14:39:17 +02:00
Steffen Jacobs 0592cb16c9 Merge branch 'master' into bug5080 2019-07-05 13:58:32 +02:00
Steffen Jacobs fac96ac247 Bug 5080: adjusted meta permission checks when editing a user group to
check against the granted permissions of the user instead the ones of
the group to edit
2019-07-05 13:54:50 +02:00
Axel Uhl deaa6cbe6c more whitespace-only changes
Change-Id: I1928d360a99be6a6b855605f02032d986a42b2c4
2019-07-03 15:43:04 +02:00
Axel Uhl 9548e9d7cb whitespace changes only
Change-Id: I69a054e2fe317c472da6d6c4575799286b18fe32
2019-07-03 13:57:03 +02:00
Steffen Jacobs aa56707ba6 Bug 5080: added meta permission check if the current user has all roles
implicated by a user group before allowing him to add a user (possibly
himself) to a user group
2019-06-27 14:19:08 +02:00
Steffen Jacobs 02b59ca833 Bug 5080: added convenience method to the SecurityService which calls
hasCurrentUserMetaPermissionsOfRoleDefinitionWithQualification for each
RoleDefinition in a set of RoleDefinitions.
2019-06-27 14:19:08 +02:00
Axel Uhl 82786a38ae fixed initialization of AccessControlStore internal structures after initial load;
the userToOwnership and userGroupToOwnership structures weren't
correctly filled because of a missing call to
internalSetOwnershipAndMapUserAndUserGroupToOwnership for cleanly
updating the internal structures. This caused problems when deleting
users or groups in replication scenarios.

Change-Id: I656090242d40e9792a46835440eaf6865f3434a7
2019-06-27 00:24:29 +02:00
Axel Uhl 2d47fca207 bug5082: don't manage a session for unauthenticated subjects in GWT bundles
Change-Id: I8be9123b7f5fc3a0a1f6c96707fc383a8a006de1
2019-06-26 18:29:42 +02:00
Steffen Jacobs 36c10ebb72 Bug 4892: added missing meta permission check + fixed existing one 2019-06-25 20:43:27 +02:00
Steffen Schaefer fa1f8873cc Bug 4892: Removed redundant shiro config 2019-06-25 16:14:08 +02:00
Steffen Jacobs 49d3d9395c Bug 4892: added meta permission check for adding a role to a usergroup +
adjusted ownership removal when deleting a usergroup
2019-06-24 12:43:34 +02:00
Steffen Schaefer 42c05bc80b Merge branch 'master' into bug4892
Conflicts:
	java/com.sap.sailing.www/release_notes_admin.html
2019-06-24 11:37:53 +02:00
Steffen Jacobs 2997dbb790 Bug 5049: added rule.html to index.html 2019-06-24 11:17:39 +02:00
Steffen Jacobs 2ba3b38c7e Merge branch 'master' into bug5049 2019-06-24 11:11:44 +02:00
Steffen Schaefer 38162e4177 Bug 4892: Linked new UserGroup docs in index.html 2019-06-24 11:09:51 +02:00
Steffen Jacobs 1d0e29140a Bug 4892: adjusted documentation of UserGroupResource in
webservices/api/usergroup.html
2019-06-21 16:27:32 +02:00
Steffen Jacobs b456a1eb7d Merge branch 'master' into bug4892 2019-06-21 15:56:31 +02:00
Steffen Schaefer 2a0f5cdca7 Merge branch 'master' into bug5047 2019-05-29 10:09:18 +02:00
Steffen Schaefer b330981b40 Bug 5047: Simplified the various map and filter methods in
SecurityService by removing the redundant HasPermissions parameter. This
can now be obtained from the given WithQualifiedObjectIdentifier values.
2019-05-29 10:00:53 +02:00
Axel Uhl 89e8bef9c8 Revert "removed PluginNature from our OSGi bundles; they are not Eclipse plugins";
according to https://bugs.eclipse.org/bugs/show_bug.cgi?id=544977#c21 the
scenario of using the ManifestBuilder without setting the PluginNature is
not a supported scenario. Besides, it doesn't help to get rid of the new
Eclipse warning regarding non-exported packages.

This reverts commit 063484e29f.
2019-05-28 21:54:20 +02:00
Steffen Jacobs 37c0caaad2 Bug 4892: minor refactor in UserGroupResource 2019-05-28 19:33:57 +02:00
Steffen Jacobs 3d979cfb2a Bgu 4892: adjusted PUT /usergroups/{groupId}/role/{roleId} to accept
json instead of FormParameter in UserGroupResource
2019-05-28 19:26:52 +02:00
Steffen Jacobs 1d42faad79 Merge branch 'bug5049' into bug4892
Conflicts:
	java/com.sap.sse.security/resources/shiro.ini
	java/com.sap.sse.security/src/com/sap/sse/security/jaxrs/api/RestApiApplication.java
2019-05-28 18:19:14 +02:00
Steffen Jacobs 821144e528 Bug 4892: extracted key constants from UserGroupResource 2019-05-28 18:14:08 +02:00
Steffen Jacobs 87713fc674 Bug 4892: use JSON body when creating new user groups via
UserGroupResource
2019-05-28 18:14:06 +02:00
Steffen Jacobs 3711762256 Bug 5049: adjusted deletion of roles to avoid orphaned ownerships. 2019-05-28 17:26:49 +02:00
Steffen Jacobs 5d79885d0d Bug 5049: adjusted documentation of REST endpoints related to roles
according to changes in the previous commits.
2019-05-28 17:20:05 +02:00
Steffen Jacobs 4779d1a519 Bug 5049: extracted constants for roleId, roleName and permissions 2019-05-28 16:09:15 +02:00
Steffen Jacobs aca242568d Bug 5049: Adjusted RoleResource to work with JSONObjects in body when
HTTP PUT is used
2019-05-28 15:48:45 +02:00
Steffen Jacobs e38e0072bf Bug 5049: changed HTTP PUT to HTTP POST for creation of roles by name 2019-05-28 14:09:03 +02:00
Steffen Jacobs 88282d57e2 Bug 4892: used path parameters instead of FormParams whereever possible
in REST endpoints regarding user group management
2019-05-28 14:00:55 +02:00
Steffen Jacobs f18562fb04 Merge branch 'master' into bug4892 2019-05-28 13:25:11 +02:00
Steffen Jacobs e17658593d Bug 5049: added REST endpoints to CREATE and DELETE role definitions 2019-05-28 13:13:08 +02:00
Steffen Jacobs b3d77a6704 Bug 5049: introduced path parameters for /role REST endpoints 2019-05-28 12:58:44 +02:00
Steffen Jacobs d48a3ac31d Bug 5049: removed support for query parameters for /role rest endpoint 2019-05-28 12:50:25 +02:00
Steffen Jacobs 4c9598d849 Merge branch 'master' into bug5049 2019-05-28 11:25:17 +02:00
Axel Uhl 063484e29f removed PluginNature from our OSGi bundles; they are not Eclipse plugins 2019-05-27 22:53:30 +02:00
Steffen Schaefer d67ebae7b9 Merge branch 'master' into bug4892 2019-05-27 15:15:06 +02:00
Steffen Schaefer 1db9349d61 Merge branch 'master' into bug5049 2019-05-27 15:03:18 +02:00
Steffen Schaefer 958eacce9f Bug 5049: Implemented meta permission check for removal of a permission
from a role
2019-05-27 15:03:01 +02:00
Steffen Schaefer 8e1191f185 Bug 5040: Implemented logging of AuthorizationExceptions in REST APIs 2019-05-27 12:58:29 +02:00
Steffen Schaefer d17002208f Merge branch 'master' into bug5040 2019-05-27 10:36:55 +02:00
Steffen Schaefer 9f965a9218 Bug 5040: Improved permission check in MasterDataResource and reduced
code duplication by introducing
SecurityService.checkCurrentUserServerPermission
2019-05-27 10:36:18 +02:00
Axel Uhl e75d1b17b8 aftermath for d3698bc608: ConcurrentWeakHashMap cannot deal with null values; using dummy object instead
Change-Id: I2f3c892aed8e35ffc3efda098e1ff2d611250a48
2019-05-27 10:03:50 +02:00