Commit Graph
203 Commits
Author SHA1 Message Date
Axel Uhl e1c745886c fixed SecurityResourceTest regarding StreamingOutput usage 2020-04-28 18:21:31 +02:00
Steffen Schaefer 4d368e0d1f Bug 5239: Restored original state of LoginTest.testAclAnonUserGroup()
but added @Ignore. Changing the test case is not what's intended but
enabling it again once the final solution is implemented.
2020-03-31 10:28:33 +02:00
Steffen Schaefer 603c9bd673 Bug 5239: Adjusted test case due to temporary deactivation of denied
actions in ACLs
2020-03-31 09:39:59 +02:00
Steffen Schaefer 9e9d4d9ac2 Bug 5239: Adjusted test cased due to temporary deactivation of denied
actions in ACLs
2020-03-23 08:29:35 +01:00
Steffen Schaefer d41143e80b Bug 5239: Removed more unused codepaths that potentially add denied ACL
entries
2020-03-20 16:08:20 +01:00
Steffen Schaefer 8b4b0e3601 Bug 5239: Reduced codepaths that potentially add denied ACL entries 2020-03-20 16:08:17 +01:00
Georg Herdt f3ddf9db8f implement backend test
#5059
2020-03-02 13:03:27 +01:00
Steffen Schaefer 341abf655f Bug 5195: Several adjustments to ensure consistent usage of
RoleDefinitions for RolePrototypes in the security model to prevent
incompatible usages of objects that effectively represent the same
RoleDefinition.
2020-02-11 13:04:30 +01:00
Axel Uhl 99a04487b1 bug5193: adjusting server group in UserStore after receiving initial load 2020-02-03 18:47:06 +01:00
Axel Uhl 4cbf92e796 fixed bug in AccessControlStore regarding adding to ACLs 2020-01-29 12:28:28 +01:00
Axel Uhl a0c87e8f4b Merge branch 'master' into bug5165 2020-01-10 20:31:52 +01:00
Axel Uhl d90177c7cd bug5171: fixing concurrent modification exception; added test that fails before and passes now 2020-01-07 11:20:08 +01:00
Axel Uhl 86feb399c7 fixed testDeleteUserWithPreference() test 2020-01-07 11:06:35 +01:00
Axel Uhl 944a7e5873 Merge branch 'master' into bug5085 2019-12-13 12:28:16 +01:00
Axel Uhl 53f61a2e7a added more test data; factored the -tenant suffix into a constant 2019-11-25 17:24:51 +01:00
Steffen Schaefer 11a75b2e8c Bug 5085: Renamed WithQualifiedObjectIdentifier.getType to
WithQualifiedObjectIdentifier.getPermissionType
2019-08-13 10:37:33 +02:00
Axel Uhl 89e8bef9c8 Revert "removed PluginNature from our OSGi bundles; they are not Eclipse plugins";
according to https://bugs.eclipse.org/bugs/show_bug.cgi?id=544977#c21 the
scenario of using the ManifestBuilder without setting the PluginNature is
not a supported scenario. Besides, it doesn't help to get rid of the new
Eclipse warning regarding non-exported packages.

This reverts commit 063484e29f.
2019-05-28 21:54:20 +02:00
Axel Uhl 063484e29f removed PluginNature from our OSGi bundles; they are not Eclipse plugins 2019-05-27 22:53:30 +02:00
Axel Uhl 2e81eb6f52 Merge remote-tracking branch 'server/master' into bug4821
Change-Id: Ieaa9f39a52b67b5c9b1cbabe40419a06c7f9d8e1
2019-05-09 09:38:52 +02:00
Steffen Schaefer ba3e1cf1b0 Bug 4986: Added test case to verify that meta permission check with
ownership lookup works for a wildcard of the action part
2019-04-11 09:39:00 +02:00
Steffen Schaefer a28e504807 Bug 4986: Implemented test cases for meta permission check with dynamic
ownership lookup. One test case still fails because multiple keys aren't
resolved to distinct permissions, yet. This means, it isn't possible to
get a distinct ownership for the permission check.
2019-04-11 09:18:32 +02:00
Steffen Schaefer cfa4d4d784 Bug 4986: Added test case to verify meta permission check with explicit
ownership before implementing ownerships lookup
2019-04-11 09:18:26 +02:00
Steffen Schaefer b1b0eafa3f Renamed methods in SecurityService having "any" in their name to
explicitly distinct this case from the any check available via
PermissionChecker
2019-03-27 09:14:35 +01:00
Steffen Schaefer 663ce6c1a4 Fixed test failure 2019-03-27 08:30:59 +01:00
Axel Uhl c4f31460a7 fixed getIdentifier implementation of RoleDefinition/RolePrototype;
added tests; remove default constructor from
TypeRelativeObjectIdentifier to avoid confusion; introduced a custom
field serializer instead and use it in QualifiedObjectIdentifierImpl's
custom field serializers.

Change-Id: If6057c21771a8488581ef9f6b401e09ec1b6a8cc
2019-02-27 17:30:09 +01:00
Axel Uhl ca52320c98 added another failing test for RoleDefinition.getIdentifier management
Change-Id: I706e120e86782f95884813a8e62382b870c09d7b
2019-02-27 17:04:01 +01:00
Kai Börnert 3a65aa40c3 Ensure that already escaped identifiers that are stored in the Database
will not be escaped again on loading, adjusted test to contain some of
the original offenders
2019-02-21 13:15:48 +01:00
Axel Uhl d8ffb5ae7f permission checks for null objects now always pass; some renames and tests
Change-Id: I3e5fe27646efd7eb170af6857b647b9aa7da5583
2019-02-20 15:49:11 +01:00
Steffen Schaefer f1bce79592 Moved several classes from com.sap.sse.security to
com.sap.sse.security.interface to allow
com.sap.sse.security.userstore.mongodb to to depend on
com.sap.sse.security anymore
2019-02-14 08:27:28 +01:00
Steffen Schaefer 3868019c0d Default creation tenant isn't set on user creation anymore. This helps
to resolve issues with the creation order of Users and UserGroups as
well as migration issues. In addition this simplifies the setup of
several test cases.
2019-02-11 16:10:13 +01:00
Kai Börnert 8e0effbd78 fixed wrong bundle dependencies 2019-02-11 15:51:55 +01:00
Kai Börnert 24fcdca713 fixed SecurityService being used before existing, fixed hacky way the
SecurityServer used Acticator.setSecurityService, fixed deadlock, when
not yet fully constructed SecurityService tried to load the
ReplicatingCache, which requires a working SecurityService to start.
2019-02-07 18:18:58 +01:00
Steffen Schaefer 27338103d4 Fixed test by doing a proper setup of UserStore and
AccessControlStoreImpl which includes loading of stored data
2019-02-04 19:00:32 +01:00
Steffen Schaefer 9e25974761 Code formatting change only 2019-01-29 15:42:20 +01:00
Steffen Schaefer 0ccb55daad Implemented initial unit tests for permission checks for RoleDefinitions
associated to UserGroups
2019-01-29 15:40:00 +01:00
Steffen Schaefer ce4fc5eb04 Extended security DTO model to include RoleDefinitions associated to
groups. These will be needed by permission checks.
2019-01-29 14:52:21 +01:00
Steffen Schaefer 42ea70f2aa Merge branch 'master' into permission-vertical
Conflicts:
	java/com.sap.sailing.domain.persistence/META-INF/MANIFEST.MF
	java/com.sap.sailing.domain.swisstimingadapter.persistence/META-INF/MANIFEST.MF
	java/com.sap.sailing.domain.swisstimingadapter.test/META-INF/MANIFEST.MF
	java/com.sap.sailing.domain.tractracadapter.persistence/META-INF/MANIFEST.MF
	java/com.sap.sailing.server.replication.test/META-INF/MANIFEST.MF
	java/com.sap.sailing.server.testsupport/META-INF/MANIFEST.MF
	java/com.sap.sailing.server/META-INF/MANIFEST.MF
	java/com.sap.sse.security.persistence/META-INF/MANIFEST.MF
	java/com.sap.sse.security.test/META-INF/MANIFEST.MF
	java/com.sap.sse.security.userstore.mongodb/META-INF/MANIFEST.MF
2019-01-28 09:58:30 +01:00
Axel Uhl 878e5d9dd2 upgraded the MongoDB driver to version 3.6.4; upgraded target platform
Change-Id: I621d4af6d3a3b0bcbf70310f731153cacfecebfc
2019-01-25 16:46:46 +01:00
Steffen Schaefer f0cb402863 Clear all security collections in UserStoreWithPersistenceTest to fix
several failing test cases
2019-01-24 11:54:00 +01:00
Steffen Schaefer b246f872ad Explicitly loading users (not loaded automatically anymore) in several
test cases to fix test failures
2019-01-24 11:52:55 +01:00
Steffen Schaefer ddda0835d7 LoginTest needs to also clear existing sessions to work
deterministically
2019-01-24 11:51:25 +01:00
Kai Börnert deeb4bd01a simplify tests to not reload all users from db at setup 2019-01-22 16:49:02 +01:00
Kai Börnert 8bac619d5e changed clearState to properly reinitialize all security related
services to the state a clean server startup would create
2019-01-17 15:06:20 +01:00
Kai Börnert 6b09b095f0 adjusted non Selenium Tests to userStore startup changes 2019-01-17 12:12:36 +01:00
Steffen Schaefer c315d811e7 Removed method parameter by introducing specific handling for
ExpeditionDeviceConfiguration that has the server name included in the
type relative object identifier
2018-12-19 09:52:34 +01:00
Thomas Wiese 475356f8b8 Merge branch 'permission-vertical' into bug4813
# Conflicts:
#	java/com.sap.sailing.domain.swisstimingadapter.persistence/src/com/sap/sailing/domain/swisstimingadapter/persistence/impl/SwissTimingAdapterPersistenceImpl.java
#	java/com.sap.sailing.server.gateway/src/com/sap/sailing/server/gateway/jaxrs/api/EventsResource.java
2018-12-18 13:32:12 +01:00
Kai Börnert cd2eafc80e adjusted securityservice to allow different ownerTenant for
createSimpleUser than the default one.
2018-12-18 10:08:53 +01:00
Thomas Wiese 30fd1965a3 bug 4813: fixed some gwt problems 2018-12-17 18:51:41 +01:00
Thomas Wiese a387055f95 bug 4813: building the identifier for permissions checks is now be done
by supporting a TypeRelativeObjectIdentifer object that has to be built
by domain objects
2018-12-17 15:49:44 +01:00
Steffen Schaefer 1e00d2d194 Merge branch 'master' into permission-vertical
# Conflicts:
#	java/com.sap.sailing.domain.persistence/META-INF/MANIFEST.MF
#	java/com.sap.sailing.domain.racelogtrackingadapter/META-INF/MANIFEST.MF
#	java/com.sap.sailing.domain.swisstimingadapter.persistence/META-INF/MANIFEST.MF
#	java/com.sap.sailing.domain.swisstimingadapter.persistence/src/com/sap/sailing/domain/swisstimingadapter/persistence/impl/SwissTimingAdapterPersistenceImpl.java
#	java/com.sap.sailing.domain.swisstimingadapter.test/META-INF/MANIFEST.MF
#	java/com.sap.sailing.domain.tractracadapter.persistence/META-INF/MANIFEST.MF
#	java/com.sap.sailing.domain.tractracadapter.persistence/src/com/sap/sailing/domain/tractracadapter/persistence/impl/MongoObjectFactoryImpl.java
#	java/com.sap.sailing.gwt.ui/src/main/java/com/sap/sailing/gwt/ui/server/DataMiningServiceImpl.java
#	java/com.sap.sailing.gwt.ui/src/main/java/com/sap/sailing/gwt/ui/server/SailingServiceImpl.java
#	java/com.sap.sailing.polars.datamining/META-INF/MANIFEST.MF
#	java/com.sap.sailing.server.gateway.test/src/com/sap/sailing/server/gateway/test/jaxrs/AbstractJaxRsApiTest.java
#	java/com.sap.sailing.server.interface/src/com/sap/sailing/server/interfaces/RacingEventService.java
#	java/com.sap.sailing.server.replication.test/META-INF/MANIFEST.MF
#	java/com.sap.sailing.server.replication.test/src/com/sap/sailing/server/replication/test/TrackRaceReplicationTest.java
#	java/com.sap.sailing.server.test/src/com/sap/sailing/server/test/TaggingServiceTest.java
#	java/com.sap.sailing.server.testsupport/META-INF/MANIFEST.MF
#	java/com.sap.sailing.server/META-INF/MANIFEST.MF
#	java/com.sap.sailing.server/src/com/sap/sailing/server/impl/Activator.java
#	java/com.sap.sailing.server/src/com/sap/sailing/server/impl/RacingEventServiceImpl.java
#	java/com.sap.sailing.server/src/com/sap/sailing/server/tagging/TaggingServiceImpl.java
#	java/com.sap.sse.mail.replication.testsupport/src/com/sap/sse/mail/replication/testsupport/AbstractMailServiceReplicationTest.java
#	java/com.sap.sse.security.test/META-INF/MANIFEST.MF
#	java/com.sap.sse.security.test/src/com/sap/sse/security/jaxrs/api/SecurityResourceTest.java
#	java/com.sap.sse.security.test/src/com/sap/sse/security/test/UserStoreWithPersistenceTest.java
#	java/com.sap.sse.security.userstore.mongodb/META-INF/MANIFEST.MF
#	java/com.sap.sse.security.userstore.mongodb/src/com/sap/sse/security/userstore/mongodb/MongoObjectFactory.java
#	java/com.sap.sse.security.userstore.mongodb/src/com/sap/sse/security/userstore/mongodb/impl/DomainObjectFactoryImpl.java
#	java/com.sap.sse.security.userstore.mongodb/src/com/sap/sse/security/userstore/mongodb/impl/MongoObjectFactoryImpl.java
#	java/com.sap.sse.security/src/com/sap/sse/security/impl/SecurityServiceImpl.java
2018-12-17 14:36:37 +01:00