Steffen Jacobs
2997dbb790
Bug 5049: added rule.html to index.html
2019-06-24 11:17:39 +02:00
Steffen Jacobs
2ba3b38c7e
Merge branch 'master' into bug5049
2019-06-24 11:11:44 +02:00
Steffen Schaefer
2a0f5cdca7
Merge branch 'master' into bug5047
2019-05-29 10:09:18 +02:00
Steffen Schaefer
b330981b40
Bug 5047: Simplified the various map and filter methods in
...
SecurityService by removing the redundant HasPermissions parameter. This
can now be obtained from the given WithQualifiedObjectIdentifier values.
2019-05-29 10:00:53 +02:00
Axel Uhl
89e8bef9c8
Revert "removed PluginNature from our OSGi bundles; they are not Eclipse plugins";
...
according to https://bugs.eclipse.org/bugs/show_bug.cgi?id=544977#c21 the
scenario of using the ManifestBuilder without setting the PluginNature is
not a supported scenario. Besides, it doesn't help to get rid of the new
Eclipse warning regarding non-exported packages.
This reverts commit 063484e29f .
2019-05-28 21:54:20 +02:00
Steffen Jacobs
3711762256
Bug 5049: adjusted deletion of roles to avoid orphaned ownerships.
2019-05-28 17:26:49 +02:00
Steffen Jacobs
5d79885d0d
Bug 5049: adjusted documentation of REST endpoints related to roles
...
according to changes in the previous commits.
2019-05-28 17:20:05 +02:00
Steffen Jacobs
4779d1a519
Bug 5049: extracted constants for roleId, roleName and permissions
2019-05-28 16:09:15 +02:00
Steffen Jacobs
aca242568d
Bug 5049: Adjusted RoleResource to work with JSONObjects in body when
...
HTTP PUT is used
2019-05-28 15:48:45 +02:00
Steffen Jacobs
e38e0072bf
Bug 5049: changed HTTP PUT to HTTP POST for creation of roles by name
2019-05-28 14:09:03 +02:00
Steffen Jacobs
e17658593d
Bug 5049: added REST endpoints to CREATE and DELETE role definitions
2019-05-28 13:13:08 +02:00
Steffen Jacobs
b3d77a6704
Bug 5049: introduced path parameters for /role REST endpoints
2019-05-28 12:58:44 +02:00
Steffen Jacobs
d48a3ac31d
Bug 5049: removed support for query parameters for /role rest endpoint
2019-05-28 12:50:25 +02:00
Steffen Jacobs
4c9598d849
Merge branch 'master' into bug5049
2019-05-28 11:25:17 +02:00
Axel Uhl
063484e29f
removed PluginNature from our OSGi bundles; they are not Eclipse plugins
2019-05-27 22:53:30 +02:00
Steffen Schaefer
1db9349d61
Merge branch 'master' into bug5049
2019-05-27 15:03:18 +02:00
Steffen Schaefer
958eacce9f
Bug 5049: Implemented meta permission check for removal of a permission
...
from a role
2019-05-27 15:03:01 +02:00
Steffen Schaefer
8e1191f185
Bug 5040: Implemented logging of AuthorizationExceptions in REST APIs
2019-05-27 12:58:29 +02:00
Steffen Schaefer
d17002208f
Merge branch 'master' into bug5040
2019-05-27 10:36:55 +02:00
Steffen Schaefer
9f965a9218
Bug 5040: Improved permission check in MasterDataResource and reduced
...
code duplication by introducing
SecurityService.checkCurrentUserServerPermission
2019-05-27 10:36:18 +02:00
Axel Uhl
e75d1b17b8
aftermath for d3698bc608: ConcurrentWeakHashMap cannot deal with null values; using dummy object instead
...
Change-Id: I2f3c892aed8e35ffc3efda098e1ff2d611250a48
2019-05-27 10:03:50 +02:00
Axel Uhl
d3698bc608
bug5054: use ConcurrentWeakHashMap instead of WeakHashMap for SecurityWebSessionManager.sessionsAlreadyScheduledForOnChange
...
Change-Id: I47b3418b177ebaa00c526952ad05ad1b062220ab
2019-05-25 22:51:43 +02:00
Steffen Jacobs
293b0e15e3
Bug 5049: added name of role to GET endpoint in RoleResource
2019-05-22 16:46:38 +02:00
Steffen Jacobs
2b6f3b2592
Bug 5049: added API doc for RoleResouce
2019-05-22 16:42:03 +02:00
Steffen Jacobs
2f8cfee9ce
Bug 5049: minor cleanup in RoleResource
2019-05-22 16:33:47 +02:00
Steffen Jacobs
a409df04bd
Bug 5049: moved role-related REST endpoints to RoleResource.java
2019-05-22 16:32:11 +02:00
Steffen Jacobs
f9ebd12186
Bug 5049: added javadoc in SecurityResource
2019-05-22 16:23:31 +02:00
Steffen Jacobs
0d83777335
Bug 5049: added POST role and GET role endpoints to REST API to support
...
managing a role via the REST API
2019-05-22 16:20:17 +02:00
Steffen Jacobs
aabb0da7b8
Bug 5040: fixed server permission check
2019-05-21 14:27:34 +02:00
Steffen Jacobs
4d6196b096
Bug 5040: added method to check if user has a server permission to
...
SecurityService
2019-05-16 17:19:46 +02:00
Steffen Schaefer
7d69ccd781
Bug 4992: Code cleanup
2019-04-30 09:23:27 +02:00
Steffen Jacobs
08632c57ca
Bug 4992: added migration code for adding the
...
PERMISSION_ASSOCIATION:READ and ROLE_ASSOCIATION_READ permissions for
the anonymous user group via ACL
2019-04-29 16:39:37 +02:00
Axel Uhl
74a8bdbfeb
Merge branch 'master' into bug5015
...
Change-Id: Idc2b46e02f267988dda45e6efc4bca48002b96bd
2019-04-28 02:54:04 +02:00
Axel Uhl
533f6872d2
bug5015: preliminary quick fix that assigns ownerships to new competitors
...
Change-Id: I272db983ad5c98b9ab4aa52f2c08245ad5d2b65b
2019-04-28 02:43:26 +02:00
Axel Uhl
e83bea13bd
fixed create permission checks for Expedition Device Configurations
2019-04-27 12:17:09 +02:00
Benjamin Barth
ce16cdc17f
Merge branch 'permission-vertical' into bug4994
2019-04-18 10:18:10 +02:00
Axel Uhl
523d12b9a4
prefer POST body parameters for create_user, specifically for password
...
Change-Id: I3c7790f08874ab0e8681ad4cdd29541a1a151f91
2019-04-17 16:36:12 +02:00
Benjamin Barth
fe9eb4c3d7
bug4994 Display name of owned object is now passed to SecurityService
2019-04-15 14:15:19 +02:00
Steffen Schaefer
70a9de04b5
Replaced several functional interfaces in com.sap.sse.common.Util with
...
their Java 8 counterpart
2019-04-11 12:57:36 +02:00
Steffen Schaefer
c1a640daeb
Bug 4986: Implemented meta permission check with ownership lookup in
...
SecurityService
2019-04-11 09:18:37 +02:00
Steffen Schaefer
6a52392c87
Bug 4983: Ensures that migrated users don't have the server group set as
...
owner. This is now consistent to newly created users.
2019-04-10 14:21:03 +02:00
Kai Börnert
90ece8d2c8
bug4978 remove default tenant being set in the low level api preventing
...
null group owners
2019-04-09 18:09:03 +02:00
Steffen Schaefer
4e433e2f98
Bug 4963: Replicator actions are now part of the SERVER security type
2019-04-03 13:15:53 +02:00
Steffen Schaefer
497008bd93
Bug 4963: Moved REPLICATOR security type to SecuredSecurityTypes as it
...
is part of SSE and not the sailing domain
2019-04-03 11:18:30 +02:00
Steffen Schaefer
9f3c5e9dda
Bug 4963: ReplicationMasterDescriptor is now aware of a bearer token.
...
The token is currently not given to remote calls and UI fields are
added.
2019-04-03 09:15:23 +02:00
Steffen Schaefer
58021d970f
Bug 4963: bearer token resolution is now skipped if no username or
...
password is given
2019-04-03 09:07:34 +02:00
Steffen Schaefer
dba8cb7606
Bug 4963: Moved the logic to resolve a bearer token for a remote server
...
from SailingServiceImpl to a newly created util. This allows us to reuse
this functionality in other services later.
2019-04-03 09:01:21 +02:00
Steffen Schaefer
278018e6fc
Fixed potential NPE when managing ACLs for the null group
2019-04-01 15:15:40 +02:00
Steffen Schaefer
f8af4c5e39
Bug 4961: Produce a nicer error on failing permission checks due to
...
using an identifier which is already taken by another existing instance.
2019-04-01 12:01:07 +02:00
Steffen Jacobs
9e16206522
Bug 4933: added method
...
setOwnershipWithoutCheckPermissionForObjectCreationAndRevertOnError with
different overloading similar to commit
5a43660474
2019-03-29 18:32:10 +01:00