Commit Graph
45 Commits
Author SHA1 Message Date
Axel Uhl 37f0a61848 aftermath to fbbb66988e: use getRolesInternal() for UserImpl.writeObject;
now with the roles collection being initialized lazily, writeObject may
occur before getRolesInternal() has been called and the de-serialized
roleListForSerialization collection has been converted into the roles
set. Then, onward transitive serialization will try to serialize a null
roles set which (fortunately) fails.
2023-02-26 00:52:35 +01:00
Axel Uhl fbbb66988e bug5820: delaying UserImpl.roles initialization until first used;
this fixed de-serialization issues with cyclic object graphs and not yet
fully resolved UserGroupImpl objects used in role qualifications
2023-02-20 16:00:36 +01:00
Finn Huelsbusch d888c1fad9 added configuration for eclipse 2022-06 and updated the onboarding 2022-07-07 16:51:33 +02:00
Dennis Aulenbacher d9ec2ec960 bug5723: Also making already existing RoleDefinitions publicly readable. 2022-05-18 03:20:03 +02:00
Dennis Aulenbacher 6aa9ec2c69 bug5510: Catching another case, where user subscriptions might be empty 2022-03-24 19:47:50 +01:00
Dennis Aulenbacher e81a32d0f2 bug5510: Prevented Nullpointer if User has the placeholder subscription. 2022-03-23 21:34:48 +01:00
Dennis Aulenbacher eb567743be bug5510: Implemented mutual exclusivity and one time trial status for
plans
2022-03-16 21:58:16 +01:00
Dennis Aulenbacher ade962c3f1 bug5510: added null checks for non initialized subscription array 2021-10-25 01:12:45 +02:00
Axel Uhl 2c622e5b45 patched <!DOCTYPE projectDescription> into all project files to avoid info/warning in problems view about no grammar constraint 2021-06-19 12:45:03 +02:00
Dennis Aulenbacher 4340be1a16 bug5230: Variable renaming. 2021-03-10 11:07:55 +01:00
Axel Uhl 5e6bed337c bug4811: working towards MFA enablement 2021-02-15 18:23:49 +01:00
Axel Uhl 84fdaae2b5 bug4811: completed first untested implementation of PermissionChangeListeners 2021-02-03 16:52:05 +01:00
Axel Uhl a3b24e4170 Merge branch 'master' into bug5349 2020-12-22 00:50:15 +01:00
Axel Uhl 1d9427328d Merge branch 'master' into bug5260 2020-12-15 11:23:47 +01:00
Axel Uhl 080552372b bug5454: setting userGroupProvider on UserImpl to local UserStoreImpl when migrating from de-serialized UserStoreImpl to local store 2020-12-10 00:29:56 +01:00
Dennis Aulenbacher 9e4f1d18f0 Code Cleanup 2020-12-03 13:48:46 +01:00
Dennis Aulenbacher dc33d7eae6 bug5439: Introduced new method to retrieve all Preference objects
related to a specific key.
2020-12-03 13:28:06 +01:00
Tu Tran babdc9ef33 bug5260: Fix null exception on UserImpl.getSubscriptions 2020-11-06 10:19:20 +07:00
Tu Tran 659bf7dccd bug5260: fix return type for User.getSubscriptions(), and check for new subscription active in SecurityServiceImpl.updateRolesOnSubscriptionChange 2020-11-04 16:34:35 +07:00
Tu Tran 70ab155f54 bug5260: improve shouldUpdateUserRolesForSubscription, implement logic for checking overlapping roles on removing premium roles 2020-10-28 17:21:24 +07:00
Tu Tran 1176108c4f Merge branch 'master' into bug5260 2020-10-08 10:24:44 +07:00
Dennis Aulenbacher 8ad6f05c13 bug5357: Renamed method 2020-10-06 13:13:05 +02:00
Tu Tran 95cd14a711 Payment: Refactor and improve abstract layer for backend implementation 2020-09-30 17:28:26 +07:00
Tu Tran 034bd34147 Payment: Merge changes from master 2020-09-22 14:27:01 +07:00
Dennis Aulenbacher 710f914c50 bug5239: redirecting all User.defaultTennant access through the
UserStore locks.
2020-09-11 01:54:06 +02:00
Dennis Aulenbacher e93c0a07e0 bug5239: Introducing advanced locking to all user and usergroup related
variable accesses.
2020-09-02 16:56:36 +02:00
Tu Tran b8062a059d Payment: Fix bugs on handling webhook events, add logs 2020-09-01 10:04:19 +07:00
Axel Uhl cdf22ae3c8 bug5239: current test base green; however, there may be an issue with meta-permission checks; see Bugzilla 2020-08-04 00:50:05 +02:00
Axel Uhl 8a6dfbc4c3 bug5239: added a few failing test cases 2020-08-03 21:02:12 +02:00
Axel Uhl e05066fa33 bug5239: added first logic for keying denying ACLs by type and group 2020-08-03 11:31:12 +02:00
Tu Tran 436c90eba8 Payment: Refactor and update to support multiple subscriptions for a user at a time 2020-07-28 18:12:09 +07:00
Tu Tran 0cc7385f2b Payment: Update code formatting, code comments 2020-05-22 18:00:57 +07:00
Tu Tran fb176e2b64 Show payment checkout popup on frontend. Add checkout RPC handlers 2020-05-05 18:00:11 +07:00
Steffen Schaefer 8b4b0e3601 Bug 5239: Reduced codepaths that potentially add denied ACL entries 2020-03-20 16:08:17 +01:00
Steffen Schaefer 341abf655f Bug 5195: Several adjustments to ensure consistent usage of
RoleDefinitions for RolePrototypes in the security model to prevent
incompatible usages of objects that effectively represent the same
RoleDefinition.
2020-02-11 13:04:30 +01:00
Axel Uhl 99a04487b1 bug5193: adjusting server group in UserStore after receiving initial load 2020-02-03 18:47:06 +01:00
Axel Uhl ddf94e9bb3 added GET/PUT requests for ownerships and ACLs 2020-01-15 18:03:29 +01:00
Axel Uhl 89e8bef9c8 Revert "removed PluginNature from our OSGi bundles; they are not Eclipse plugins";
according to https://bugs.eclipse.org/bugs/show_bug.cgi?id=544977#c21 the
scenario of using the ManifestBuilder without setting the PluginNature is
not a supported scenario. Besides, it doesn't help to get rid of the new
Eclipse warning regarding non-exported packages.

This reverts commit 063484e29f.
2019-05-28 21:54:20 +02:00
Axel Uhl 063484e29f removed PluginNature from our OSGi bundles; they are not Eclipse plugins 2019-05-27 22:53:30 +02:00
Kai Börnert bc4282cd8b bug4905 cleanup qualified roles 2019-03-14 12:45:00 +01:00
Axel Uhl 7bfddc6926 refactored User-related methods on SecurityService to avoid sending User objects through replication operations;
this way, no patching of the userGroupProvider property after
de-serialization is necessary, and no replacement of a User object in
the UserStore should ever happen.

Change-Id: I23a8ae53b6a53ca89a2a0b8a11dc779f4034db57
2019-02-21 13:21:04 +01:00
Axel Uhl e64e708008 expose userGroupProvider property on User; align in UserStoreImpl for de-serialized copies
Change-Id: I0d520d2b8d19ceb2405d1c1c289d0f839600eb6f
2019-02-20 19:08:13 +01:00
Steffen Jacobs c3fe829b65 added WildcardPermissionWithSecurityDTO and used it in UserDTO 2019-02-14 16:28:23 +01:00
Steffen Schaefer f1bce79592 Moved several classes from com.sap.sse.security to
com.sap.sse.security.interface to allow
com.sap.sse.security.userstore.mongodb to to depend on
com.sap.sse.security anymore
2019-02-14 08:27:28 +01:00
Steffen Schaefer 18dd657ae9 Initially added empty bundle com.sap.sse.security.interface 2019-02-14 08:11:17 +01:00