Commit Graph
623 Commits
Author SHA1 Message Date
Steffen Jacobs 2997dbb790 Bug 5049: added rule.html to index.html 2019-06-24 11:17:39 +02:00
Steffen Jacobs 2ba3b38c7e Merge branch 'master' into bug5049 2019-06-24 11:11:44 +02:00
Steffen Schaefer 2a0f5cdca7 Merge branch 'master' into bug5047 2019-05-29 10:09:18 +02:00
Steffen Schaefer b330981b40 Bug 5047: Simplified the various map and filter methods in
SecurityService by removing the redundant HasPermissions parameter. This
can now be obtained from the given WithQualifiedObjectIdentifier values.
2019-05-29 10:00:53 +02:00
Axel Uhl 89e8bef9c8 Revert "removed PluginNature from our OSGi bundles; they are not Eclipse plugins";
according to https://bugs.eclipse.org/bugs/show_bug.cgi?id=544977#c21 the
scenario of using the ManifestBuilder without setting the PluginNature is
not a supported scenario. Besides, it doesn't help to get rid of the new
Eclipse warning regarding non-exported packages.

This reverts commit 063484e29f.
2019-05-28 21:54:20 +02:00
Steffen Jacobs 3711762256 Bug 5049: adjusted deletion of roles to avoid orphaned ownerships. 2019-05-28 17:26:49 +02:00
Steffen Jacobs 5d79885d0d Bug 5049: adjusted documentation of REST endpoints related to roles
according to changes in the previous commits.
2019-05-28 17:20:05 +02:00
Steffen Jacobs 4779d1a519 Bug 5049: extracted constants for roleId, roleName and permissions 2019-05-28 16:09:15 +02:00
Steffen Jacobs aca242568d Bug 5049: Adjusted RoleResource to work with JSONObjects in body when
HTTP PUT is used
2019-05-28 15:48:45 +02:00
Steffen Jacobs e38e0072bf Bug 5049: changed HTTP PUT to HTTP POST for creation of roles by name 2019-05-28 14:09:03 +02:00
Steffen Jacobs e17658593d Bug 5049: added REST endpoints to CREATE and DELETE role definitions 2019-05-28 13:13:08 +02:00
Steffen Jacobs b3d77a6704 Bug 5049: introduced path parameters for /role REST endpoints 2019-05-28 12:58:44 +02:00
Steffen Jacobs d48a3ac31d Bug 5049: removed support for query parameters for /role rest endpoint 2019-05-28 12:50:25 +02:00
Steffen Jacobs 4c9598d849 Merge branch 'master' into bug5049 2019-05-28 11:25:17 +02:00
Axel Uhl 063484e29f removed PluginNature from our OSGi bundles; they are not Eclipse plugins 2019-05-27 22:53:30 +02:00
Steffen Schaefer 1db9349d61 Merge branch 'master' into bug5049 2019-05-27 15:03:18 +02:00
Steffen Schaefer 958eacce9f Bug 5049: Implemented meta permission check for removal of a permission
from a role
2019-05-27 15:03:01 +02:00
Steffen Schaefer 8e1191f185 Bug 5040: Implemented logging of AuthorizationExceptions in REST APIs 2019-05-27 12:58:29 +02:00
Steffen Schaefer d17002208f Merge branch 'master' into bug5040 2019-05-27 10:36:55 +02:00
Steffen Schaefer 9f965a9218 Bug 5040: Improved permission check in MasterDataResource and reduced
code duplication by introducing
SecurityService.checkCurrentUserServerPermission
2019-05-27 10:36:18 +02:00
Axel Uhl e75d1b17b8 aftermath for d3698bc608: ConcurrentWeakHashMap cannot deal with null values; using dummy object instead
Change-Id: I2f3c892aed8e35ffc3efda098e1ff2d611250a48
2019-05-27 10:03:50 +02:00
Axel Uhl d3698bc608 bug5054: use ConcurrentWeakHashMap instead of WeakHashMap for SecurityWebSessionManager.sessionsAlreadyScheduledForOnChange
Change-Id: I47b3418b177ebaa00c526952ad05ad1b062220ab
2019-05-25 22:51:43 +02:00
Steffen Jacobs 293b0e15e3 Bug 5049: added name of role to GET endpoint in RoleResource 2019-05-22 16:46:38 +02:00
Steffen Jacobs 2b6f3b2592 Bug 5049: added API doc for RoleResouce 2019-05-22 16:42:03 +02:00
Steffen Jacobs 2f8cfee9ce Bug 5049: minor cleanup in RoleResource 2019-05-22 16:33:47 +02:00
Steffen Jacobs a409df04bd Bug 5049: moved role-related REST endpoints to RoleResource.java 2019-05-22 16:32:11 +02:00
Steffen Jacobs f9ebd12186 Bug 5049: added javadoc in SecurityResource 2019-05-22 16:23:31 +02:00
Steffen Jacobs 0d83777335 Bug 5049: added POST role and GET role endpoints to REST API to support
managing a role via the REST API
2019-05-22 16:20:17 +02:00
Steffen Jacobs aabb0da7b8 Bug 5040: fixed server permission check 2019-05-21 14:27:34 +02:00
Steffen Jacobs 4d6196b096 Bug 5040: added method to check if user has a server permission to
SecurityService
2019-05-16 17:19:46 +02:00
Steffen Schaefer 7d69ccd781 Bug 4992: Code cleanup 2019-04-30 09:23:27 +02:00
Steffen Jacobs 08632c57ca Bug 4992: added migration code for adding the
PERMISSION_ASSOCIATION:READ and ROLE_ASSOCIATION_READ permissions for
the anonymous user group via ACL
2019-04-29 16:39:37 +02:00
Axel Uhl 74a8bdbfeb Merge branch 'master' into bug5015
Change-Id: Idc2b46e02f267988dda45e6efc4bca48002b96bd
2019-04-28 02:54:04 +02:00
Axel Uhl 533f6872d2 bug5015: preliminary quick fix that assigns ownerships to new competitors
Change-Id: I272db983ad5c98b9ab4aa52f2c08245ad5d2b65b
2019-04-28 02:43:26 +02:00
Axel Uhl e83bea13bd fixed create permission checks for Expedition Device Configurations 2019-04-27 12:17:09 +02:00
Benjamin Barth ce16cdc17f Merge branch 'permission-vertical' into bug4994 2019-04-18 10:18:10 +02:00
Axel Uhl 523d12b9a4 prefer POST body parameters for create_user, specifically for password
Change-Id: I3c7790f08874ab0e8681ad4cdd29541a1a151f91
2019-04-17 16:36:12 +02:00
Benjamin Barth fe9eb4c3d7 bug4994 Display name of owned object is now passed to SecurityService 2019-04-15 14:15:19 +02:00
Steffen Schaefer 70a9de04b5 Replaced several functional interfaces in com.sap.sse.common.Util with
their Java 8 counterpart
2019-04-11 12:57:36 +02:00
Steffen Schaefer c1a640daeb Bug 4986: Implemented meta permission check with ownership lookup in
SecurityService
2019-04-11 09:18:37 +02:00
Steffen Schaefer 6a52392c87 Bug 4983: Ensures that migrated users don't have the server group set as
owner. This is now consistent to newly created users.
2019-04-10 14:21:03 +02:00
Kai Börnert 90ece8d2c8 bug4978 remove default tenant being set in the low level api preventing
null group owners
2019-04-09 18:09:03 +02:00
Steffen Schaefer 4e433e2f98 Bug 4963: Replicator actions are now part of the SERVER security type 2019-04-03 13:15:53 +02:00
Steffen Schaefer 497008bd93 Bug 4963: Moved REPLICATOR security type to SecuredSecurityTypes as it
is part of SSE and not the sailing domain
2019-04-03 11:18:30 +02:00
Steffen Schaefer 9f3c5e9dda Bug 4963: ReplicationMasterDescriptor is now aware of a bearer token.
The token is currently not given to remote calls and UI fields are
added.
2019-04-03 09:15:23 +02:00
Steffen Schaefer 58021d970f Bug 4963: bearer token resolution is now skipped if no username or
password is given
2019-04-03 09:07:34 +02:00
Steffen Schaefer dba8cb7606 Bug 4963: Moved the logic to resolve a bearer token for a remote server
from SailingServiceImpl to a newly created util. This allows us to reuse
this functionality in other services later.
2019-04-03 09:01:21 +02:00
Steffen Schaefer 278018e6fc Fixed potential NPE when managing ACLs for the null group 2019-04-01 15:15:40 +02:00
Steffen Schaefer f8af4c5e39 Bug 4961: Produce a nicer error on failing permission checks due to
using an identifier which is already taken by another existing instance.
2019-04-01 12:01:07 +02:00
Steffen Jacobs 9e16206522 Bug 4933: added method
setOwnershipWithoutCheckPermissionForObjectCreationAndRevertOnError with
different overloading similar to commit
5a43660474
2019-03-29 18:32:10 +01:00