eclipse-sailing-analytics/sailing-analytics
1
0 Fork 0
mirror of https://github.com/eclipse-sailing-analytics/sailing-analytics.git synced 2026-11-14 22:43:57 +00:00
Code Activity
46,466 Commits 294 Branches 311 Tags
8d504ba1f37ef837efcbc3df94b2d8e0e2c88b98
Commit Graph
170 Commits
Author SHA1 Message Date
Steffen Jacobs 8e243f6a05 aligned ACL SecuredSecurityType with CHANGE_OWNERSHIP action by creating 
a CHANGE_ACL DefaultAction
 2018-11-14 14:47:49 +01:00
Benjamin Barth 8d60318378 Merge branch 'permission-vertical' of 
ssh://trac@sapsailing.com/home/trac/git into permission-vertical

Conflicts:
	java/com.sap.sse.security.ui/src/main/java/com/sap/sse/security/ui/shared/UserDTO.java
 2018-11-13 09:22:28 +01:00
Steffen Schäfer ccbd65b0a5 Using WildcardPermissionBuilder to construct complex permissions instead 
of hard-coding permission strings
 2018-11-12 15:03:16 +01:00
Steffen Schäfer ab86ca0d01 Added a builder to not need to construct complex permissions (e.g. 
multiple types, or wildcard type) as String
 2018-11-12 15:03:13 +01:00
Steffen Schäfer 9f8aafd5a6 An empty part is equivalent to the wildcard token 2018-11-12 14:39:12 +01:00
Steffen Schäfer 835f169390 Implemented meta permission checks when granting users additional 
permissions (not finished yet)
 2018-11-12 11:12:41 +01:00
Kai Börnert a16965897d user a defaultTenant that is configured per server for each user 2018-11-09 09:44:45 +01:00
Benjamin Barth 635b3156b9 Wrapped security information into separate data transfer object 2018-11-08 12:20:51 +01:00
Steffen Jacobs 197e469ad9 added convenience method to get WildcardPermissions for multiple actions 2018-11-06 14:18:54 +01:00
Benjamin Barth 5e3896ece9 Introduced new DTO for role definitions including ownership and ACL info 2018-11-02 13:41:49 +01:00
Kai Börnert 020ed3ff43 changed deviceconfigurations to use servername + configname for type 
relative identifiers
 2018-10-30 14:09:41 +01:00
Steffen Schäfer 5c930a53e9 Fixed permission check for the case when we have SecurityUser instances 
of different types
 2018-10-25 11:58:56 +02:00
Benjamin Barth a48e64151f Adjusted custom field serializers for UserDTOs / minor code formattings 2018-10-25 10:11:17 +02:00
Kai Börnert a77c8a83f3 moved NamedDTO and SecurityObject to be visible by sse, extracted 
SecurityDTOUtil
 2018-10-22 17:29:43 +02:00
Steffen Schäfer 982edf5193 Streamlined permission checks in AdminConsole to allow access to most 
users that have the permission to mutate at least one possible instance
(which does not mean there is such an instance yet). Most UIs should
filter the contents based on read permissions (some are already
implemented, others will follow) which means users could see an empty
list instead.
 2018-10-22 12:55:00 +02:00
Steffen Schäfer 9c3aacbf76 Fixed PermissionChecker.hasUserAnyPermission to also match qualified 
roles if the check is not qualified for a specific ownership (this still
means, the user has permission for at least one possible instance)
 2018-10-22 12:54:54 +02:00
Steffen Schäfer 90f669d51a Fixed copy&paste bugs 2018-10-19 15:19:20 +02:00
Steffen Schäfer f9372f71a7 Initial implementation to check if a user has at least one required 
permission. This will be required for several permission checks in the
UI
 2018-10-19 15:19:17 +02:00
Steffen Schäfer ec5bb47124 Initial implementation for a server-side meta permission check in 
SecurityServiceImpl
 2018-10-19 15:19:15 +02:00
Steffen Schäfer 68961f842b Prototype implementation for wildcard permission checks (currently 
unused)
 2018-10-19 15:19:11 +02:00
Steffen Schäfer 8868004821 Using constants defined in WildcardPermission instead of hard-coded 
strings for special chars in permission strings constructed by
HasPermissionsImpl
 2018-10-19 15:19:10 +02:00
Kai Börnert ded8efaca7 added WithQualifiedObjectIdentifier to User and UserGroup 2018-10-19 10:07:50 +02:00
Steffen Schäfer 8faaf4e05c Added JavaDoc 2018-10-18 09:13:45 +02:00
Steffen Schäfer 06b5219596 Added explicit admin role check for user deletion 2018-10-17 14:52:33 +02:00
Steffen Schäfer 0a29d86f4a Code simplification 2018-10-17 14:52:32 +02:00
Kai Börnert d9d5863526 added ability to get the actual Type from a 
WithQualifiedObjectIdentifier
 2018-10-16 15:22:20 +02:00
Steffen Schäfer 0d9eb23316 The user role now implies permissions *:READ:*, *:UPDATE:*, *:DELETE:* 
in addition to *:CREATE:* which means, by default, users may do any
action for objects created by themselves.
 2018-10-16 11:22:38 +02:00
Kai Börnert 6ee2b64242 simplified user & group handing for most cases 2018-10-15 13:32:48 +02:00
Kai Börnert 8957643596 fix for PermissionChecker 2018-10-15 12:38:40 +02:00
Kai Börnert 000ac30a95 moved anonymous checks to PermissionChecker 2018-10-15 11:37:17 +02:00
Steffen Schäfer 4b539a405c Added CREATE_OBJECT check for the current server when creating objects 2018-10-12 09:31:20 +02:00
Steffen Schäfer e99083372f Removed trailing spaces 2018-10-11 18:02:51 +02:00
Kai Börnert 5a26fc46bb Merge branch 'bug4768' into permission-vertical 2018-10-11 17:43:17 +02:00
Kai Börnert 60c435cc73 permission-vertical added *:CREATE:* to the default UserRole upon 
initial creation
 2018-10-11 17:18:35 +02:00
Kai Börnert c08e8b4369 bug4768 added multiple parts that will explicitly set permissions, 
created an interface to allow most ownable objects to directly return
the QualifiedObjectIdentifier
 2018-10-10 13:16:16 +02:00
Axel Uhl 2da96b724c Merge remote-tracking branch 'server/permission-vertical' into permission-vertical 
Change-Id: I18927445a32e18ce60f95b056967b56cc62b7127
 2018-10-08 10:51:49 +02:00
Kai Börnert 5102fc8a94 bug4769 moved SERVER from SecuredDomainType to SecuredSecurityTypes, as 
it is an SSE concern
 2018-10-05 09:41:44 +02:00
Axel Uhl 944008ddac more security consistency for access control list 
Change-Id: I5fc9584d3c92e0b112974bd64ee3cda0bd5f47bc
 2018-09-28 17:04:57 +02:00
Steffen Schäfer 3731fb8a3b Updated project config for the current GWT Eclipse plugin 2018-09-28 13:19:40 +02:00
Axel Uhl ca4f740d75 bug4762: null is now a valid group to allow/deny permissions for in an ACL 
Change-Id: I03c484981094e852fa0ae6a6ec134e6297317bff
 2018-09-26 17:58:07 +02:00
Benjamin Barth a6e37f033c Code style / formatting changesand method name refactoring 2018-09-26 10:50:05 +02:00
Axel Uhl d2e3253cf0 use \ instead of _ for the encoding character, making sure that logical type names can have underscores in them 
Change-Id: I0b9710f986115e8a835c13aea78e2b8631d8334c
 2018-09-25 00:22:15 +02:00
Axel Uhl 43a17f6e9e compilable but untested version that obtains server info for client-side permission checks 
Change-Id: Ib70bb9283cce22a109199b43122009243bcede78
 2018-09-24 23:20:30 +02:00
Axel Uhl 6899c7869c some renames; using optional per-logical-type actions 
Change-Id: Ia68de601d563683eed24b65ae2af63e0f5239deb
 2018-09-24 22:45:43 +02:00
Axel Uhl 5afc023969 removed AdminConsoleRole and made basic Security and Sailing permissions explicit 
Change-Id: I51ca76d3d42fda846c6295d9553c6cff96bbb256
 2018-09-24 15:55:46 +02:00
Axel Uhl 3164e300f4 renamed "Mode" to "Action" in HasPermissions 
Change-Id: I9a0a8f90918e7c370d03dd0d32a37b1afeb7aaff
 2018-09-24 14:12:24 +02:00
Axel Uhl 937637eb5a some renamings around ACL->AccessControlList and ownership-related methods 
Change-Id: I2288f2adba1f3935df2ef92a5ee637c836ed84d8
 2018-09-21 13:37:46 +02:00
Axel Uhl 4c8214afdb adjusted tests and verdicts to modified permission check 
Change-Id: Ia4ad1b0769fec25a13e7d87dbde01d0ef8ba3b15
 2018-09-18 20:22:30 +02:00
Axel Uhl f604292db4 Merge remote-tracking branch 'server/permission-vertical' into permission-vertical 
Change-Id: I626711ce02869b2204c6cb54804ae16419b0caf0
 2018-09-18 19:56:13 +02:00
Axel Uhl 3b03bca4c0 bug 4753: initialize / migrate roles before users are loaded 
Change-Id: Ic6943214b951ba5b5b2ea62c154db049703a8c8c
 2018-09-18 16:22:26 +02:00